Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          3C1bI0cD971uKJFrIC9m9G7tZz+wikLWPEaV4gqO4mA=
Subject key identifier:   ED:87:0D:C0:61:3E:6A:FD:1D:F1:A6:6F:0F:54:D4:24:CC:B6:47:23
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       01962DF433F47E946CDBAC8A02F9459C7E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0DBD
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
                          2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
                          3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
                          4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
                          5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
                          6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: ZYifKrWOrVShdL2eKW9PJLafM5vW+O+vODvsmc2rA24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:33:f4:7e:94:6c:db:ac:8a:02:f9:45:9c:7e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=ed870dc0613e6afd1df1a66f0f54d424ccb64723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:e0:86:0f:86:d9:3e:4d:6f:88:59:22:ae:
                    22:8f:c1:17:13:d3:d5:98:a8:2d:09:ac:6f:04:4b:
                    5d:18:98:57:1b:d9:34:93:6e:ef:d3:a4:44:03:d5:
                    40:1a:6f:b3:c9:a5:05:fc:c7:ed:7c:36:1e:68:99:
                    99:cb:00:18:66:53:be:52:3b:9c:1b:9f:6e:62:3f:
                    6f:b9:4e:cf:ed:36:ef:8d:3c:c2:97:5e:be:fa:3f:
                    6e:dc:6b:49:9d:91:67:b3:84:f3:63:5f:04:b3:c9:
                    1f:86:c0:f0:24:7b:de:f6:27:21:16:bc:18:42:a9:
                    cf:c6:76:13:1a:0b:1e:84:5a:3f:fe:33:97:12:7a:
                    a1:6f:12:0e:96:79:54:9b:8a:2f:68:9c:b6:f3:d8:
                    d6:de:8c:bd:60:04:a1:7b:70:56:41:7a:9b:dc:b9:
                    af:2d:41:6e:85:4d:ce:b5:a6:94:b6:11:94:83:fa:
                    4c:1b:9c:e3:01:5a:75:4e:07:fe:70:9e:48:da:32:
                    ce:0c:dc:c4:fb:da:55:16:89:63:e0:a2:88:23:9b:
                    6f:da:b6:3c:ec:73:09:28:d8:54:6b:89:f8:42:7e:
                    57:1a:f8:17:27:27:7c:52:2f:24:7a:70:f4:10:84:
                    c9:dc:c0:a7:1e:4e:0d:34:65:5d:66:1a:e7:93:3d:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:0D:C0:61:3E:6A:FD:1D:F1:A6:6F:0F:54:D4:24:CC:B6:47:23
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:72:f9:82:02:41:23:20:06:28:7c:11:92:06:ce:a0:c1:d3:
         fe:50:51:f3:27:03:98:44:bd:99:70:57:89:62:5b:e3:a7:3e:
         a8:09:ca:c4:ab:ec:c1:4a:98:50:5f:63:31:b2:1b:db:92:66:
         49:ec:7c:8a:a8:ff:ed:d6:04:52:aa:3d:e1:3e:4e:83:79:91:
         a3:80:f0:36:06:38:9c:bf:c6:aa:18:26:9f:8a:4c:e8:1a:26:
         6c:18:1c:f2:17:64:42:23:a5:00:a6:bd:95:96:a9:b5:07:c9:
         e2:4c:07:4a:c7:61:9f:7d:e2:99:f1:49:e1:4b:84:03:bf:58:
         c6:20:41:c0:ed:28:29:4e:05:a7:f1:6e:5d:fb:f4:09:a3:da:
         e2:ff:8f:c6:c8:68:45:3d:f1:4d:30:0d:08:b0:0c:b2:65:9f:
         fe:fa:d6:9f:43:9f:30:31:54:f3:7e:75:29:95:21:a3:bb:d2:
         b1:09:9a:dc:15:44:79:f8:3b:dd:59:f2:6d:2a:66:59:fb:14:
         a1:f2:4e:14:85:5d:c7:8d:56:e1:6c:3a:82:1e:38:33:73:a7:
         23:4c:41:e2:55:d1:53:bd:9c:30:b0:5f:c7:12:00:6b:89:bd:
         e6:ad:61:f1:9a:57:99:ba:70:b1:ba:f6:b5:48:02:ae:f9:de:
         d3:63:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----