Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File:                     bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier:          x6jFNugaCjbrItZC2Ld8w9pMeHfERo9SbdTSkqJxgMM=
Subject key identifier:   46:ED:00:13:DF:5C:9C:6B:7C:4C:96:BF:49:49:4C:61:20:E8:38:78
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer:       /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial:       01962E2B1628D8BB70F6C0BE66DF23A4CEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number:          0201
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: 6hGDoCKEyz9+zPPi7zdVwKHJGEo0GR8jxCuWN71NHXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:16:28:d8:bb:70:f6:c0:be:66:df:23:a4:ce:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=46ed0013df5c9c6b7c4c96bf49494c6120e83878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:9b:30:62:6b:da:f1:02:09:f2:01:ba:02:
                    b9:58:b0:59:e0:f1:12:9f:61:17:a2:1a:8b:9d:3a:
                    27:e1:53:92:2a:85:dd:43:e2:f7:6d:11:94:62:dd:
                    6c:23:1d:cf:48:a8:6f:46:36:9b:69:48:04:9c:21:
                    db:93:60:bf:2a:4e:ef:09:f0:d3:88:27:8e:10:b1:
                    67:a7:77:4e:f9:43:f7:d9:a6:d7:d1:d6:7d:7e:6e:
                    14:b5:35:1b:7e:7c:5c:0f:df:e2:b0:5e:7f:42:29:
                    2f:e5:e8:4a:a1:5d:83:18:21:87:8e:a8:11:55:bd:
                    ca:4f:91:6d:89:eb:e7:cb:39:f9:08:3b:83:75:66:
                    b5:af:fe:18:a7:ec:d2:03:5b:76:26:71:84:40:8b:
                    83:30:83:02:f4:b7:50:a3:c8:5d:9d:00:98:2d:c8:
                    7b:da:3a:76:3b:de:88:56:b3:19:e9:84:89:28:67:
                    de:7c:b7:47:49:90:1e:b1:ab:c3:64:26:93:8e:4a:
                    56:06:49:72:91:98:a4:2d:e7:66:ef:a2:d2:24:c6:
                    c8:b9:d6:48:a3:cb:55:b2:16:c5:17:2b:43:82:dc:
                    17:46:a4:c9:1c:42:a2:33:6c:91:cd:4a:3d:33:ab:
                    49:e1:54:c0:f5:5d:82:ae:22:02:1e:e8:b9:fa:34:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:ED:00:13:DF:5C:9C:6B:7C:4C:96:BF:49:49:4C:61:20:E8:38:78
            X509v3 Authority Key Identifier:
                keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c9:47:1e:1f:3b:e4:ac:8a:af:4d:7c:9c:38:8b:01:f5:58:
         b9:9e:d1:77:73:b7:d0:5f:30:23:c6:92:3a:b2:5c:58:07:cf:
         7b:49:3d:fb:0f:cd:65:80:75:26:da:18:e1:9e:90:e4:df:09:
         ca:ef:05:2e:93:28:7c:16:1e:34:42:35:55:a4:2d:c1:3b:58:
         bb:9f:b0:e8:5e:2b:28:62:6c:fd:d8:3d:54:9d:22:b2:e7:77:
         9a:5b:58:3a:4f:ac:0e:f5:57:33:b4:7e:27:9d:2a:3b:06:05:
         5b:58:31:cc:40:f4:29:57:4b:79:b4:b6:96:fe:9d:02:82:1c:
         0e:d8:66:50:6d:89:99:ea:22:be:03:a5:ad:c7:31:9a:45:4e:
         79:0e:63:4d:2d:54:74:21:e4:f1:c7:67:68:dd:fa:9c:b2:aa:
         c2:fd:04:b4:2e:0a:9a:a1:1d:e0:e0:9a:c6:5e:b9:95:8b:ed:
         d3:0d:80:76:fe:5f:62:9d:b2:c9:ca:c4:e1:70:d4:65:4c:6a:
         c7:20:12:27:c0:a1:72:d0:9c:45:98:aa:68:ee:3b:1d:49:f9:
         ac:b0:4f:ca:0d:ae:34:af:e1:ff:37:aa:3e:7e:77:bd:c5:85:
         60:fa:f5:9d:36:f8:f6:b6:02:11:f9:cb:b2:c6:ca:9c:1a:67:
         de:66:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----