Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
File:                     v0K4S67twsRj3jf6TRRiR_PhS6E.mft (raw, json)
Hash identifier:          iZyRYcsajmVYsDBIgw8M/a45VM3kOlrG6GrRCd0VYrA=
Subject key identifier:   B4:14:E2:47:59:14:2A:77:98:F1:B9:73:3A:92:93:10:D1:24:1A:92
Authority key identifier: BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
Certificate issuer:       /CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Certificate serial:       01962F3DB2F9AB165ED9A2B5CADEE5B6D382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
Manifest number:          06E1
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: v0K4S67twsRj3jf6TRRiR_PhS6E.crl (hash: GJozh8gN4hHitOWwTwvwUMwIwKnOqeZ+5Gzcf4XapLw=)
                          2: z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa (hash: 7Vpbgk+uh3xjUDJDPkW52/aM1co/xcHFVzxeA+KZtTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b2:f9:ab:16:5e:d9:a2:b5:ca:de:e5:b6:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=b414e24759142a7798f1b9733a929310d1241a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:d1:ef:e8:ae:c2:0a:ef:8f:93:fb:15:2b:
                    4b:8f:52:a8:08:ed:ed:df:9f:93:6f:37:d9:b1:b3:
                    72:18:19:ef:e2:90:1b:e3:cb:b8:bf:ac:34:3c:55:
                    2e:d5:d5:27:f9:29:04:b9:e3:1c:15:f8:28:20:d4:
                    3f:ba:fc:01:99:33:b1:66:68:2e:eb:66:c2:fd:2a:
                    69:bb:17:a2:cc:9d:35:16:3e:c4:47:f7:3b:c3:95:
                    5a:90:3c:72:f3:df:82:75:d5:ed:e7:8a:f3:1f:3f:
                    e9:de:d4:17:75:1f:b3:a4:cc:81:75:cb:cf:a0:e1:
                    13:99:2a:ab:32:2a:01:05:03:b9:26:b8:be:db:10:
                    c2:6c:e5:2b:50:f9:9b:84:a6:26:ab:db:49:fb:95:
                    02:c5:95:35:75:c1:74:1c:e2:47:b7:17:57:75:06:
                    d6:1f:99:46:20:05:29:e5:76:40:53:ed:3b:28:42:
                    c1:73:c3:b1:21:4f:cd:f1:fd:cc:c2:45:fc:4f:5e:
                    d9:50:a6:3e:1f:63:87:73:3f:94:c7:25:c3:04:6c:
                    cf:ab:b1:a5:65:bd:cc:bd:e3:d2:35:de:e2:c5:34:
                    88:5f:b6:f9:8e:6e:24:b6:89:2d:da:cc:ee:68:61:
                    74:e0:7c:ae:a5:8a:83:fa:74:d4:79:5b:e0:44:1f:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:14:E2:47:59:14:2A:77:98:F1:B9:73:3A:92:93:10:D1:24:1A:92
            X509v3 Authority Key Identifier:
                keyid:BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:57:b4:05:25:ca:af:80:eb:78:f4:19:70:02:3f:74:55:
         07:dc:66:8d:86:00:d1:61:3d:b8:9e:25:9b:fd:09:e8:0a:88:
         1e:45:fe:81:f1:ca:38:a3:f3:0b:39:9c:82:66:00:ee:37:5c:
         c2:e4:11:1a:58:23:93:0a:24:28:73:f0:1a:09:23:30:67:52:
         18:bf:08:36:b4:de:be:44:b6:63:28:18:aa:dd:51:08:08:63:
         02:91:16:a4:a2:0a:fd:16:17:cc:4f:8d:26:2a:aa:c8:de:6d:
         96:7b:cc:e9:2b:f8:e1:a0:cd:62:98:90:58:34:01:77:6a:bb:
         f5:f6:f9:88:24:f2:4f:41:e6:a0:73:87:8f:43:f8:00:c7:77:
         c3:10:c3:fe:7d:73:84:33:a4:5c:fb:15:80:c2:30:8d:aa:fb:
         ff:b9:26:b7:e0:5b:f1:83:56:61:73:86:f1:ed:50:cc:42:ca:
         46:92:fc:f0:90:59:a9:ed:b2:23:49:d2:b4:20:00:41:44:e0:
         b1:fe:8f:43:08:8b:f4:c8:48:96:cd:1d:27:13:bc:60:27:9c:
         61:d5:bd:a9:14:a0:a7:3d:e7:d8:a0:e9:e8:20:18:a7:26:c1:
         e3:9d:44:d6:50:94:4e:23:a2:c6:9c:2d:f8:f8:5b:ad:ad:cd:
         6e:24:69:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----