Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File:                     bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier:          jt5Ey+2mfhekt8N3/X6HYTlhVozMyBvxwVOy8GvBEJU=
Subject key identifier:   1B:64:5A:CA:F7:93:E3:5B:2C:C3:BF:99:8A:27:59:6B:9C:0B:4A:2E
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer:       /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial:       01962ECF63098D975196B2D8B7A4B79D14C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
                          2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: XQCQ8+PNHWRrjgjYRX529OwfIXki33yK7PVhYBLCj50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:09:8d:97:51:96:b2:d8:b7:a4:b7:9d:14:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=1b645acaf793e35b2cc3bf998a27596b9c0b4a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:5c:c7:43:ee:a8:b0:de:fc:f9:ad:12:dd:
                    91:79:7b:99:b0:f4:9e:44:5f:c8:2c:f3:5d:ef:cc:
                    b7:ee:4b:2f:e9:53:3e:e6:c7:a6:3d:60:b0:9d:36:
                    75:3d:9b:66:d2:29:90:ac:97:d5:51:9a:86:45:ba:
                    e2:b8:b8:b4:12:0d:78:9b:06:0c:15:76:4a:33:e6:
                    3e:83:6e:89:f8:61:62:a1:09:59:2f:e2:01:ac:c5:
                    18:a5:3e:73:56:f4:90:bd:8f:77:7a:a0:20:88:12:
                    48:42:b0:35:8c:ce:37:4f:61:4a:32:ad:96:ee:84:
                    57:bf:20:a4:23:c5:d0:1f:c7:2c:68:c9:3a:00:79:
                    47:ad:b2:72:87:8d:23:e7:99:51:79:d7:d4:fa:a6:
                    51:54:3f:57:75:d6:8e:6c:5f:34:3b:7d:5a:41:df:
                    54:20:4f:e8:6b:b5:51:95:ec:1a:77:8e:f6:1d:60:
                    63:65:29:5d:71:fd:31:68:1e:3c:8d:82:e4:2e:47:
                    ef:82:54:12:89:c6:ad:ce:75:de:54:dd:9e:a6:b6:
                    78:6b:2a:50:44:9a:7c:7c:f4:d7:66:1b:7d:f6:8a:
                    f7:a7:37:48:a5:e4:41:61:0f:bc:ed:f9:23:ac:94:
                    dc:fb:31:a1:fa:8c:cd:4c:8f:9b:84:cd:9e:85:3c:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:64:5A:CA:F7:93:E3:5B:2C:C3:BF:99:8A:27:59:6B:9C:0B:4A:2E
            X509v3 Authority Key Identifier:
                keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d0:29:ea:63:1f:f9:ae:34:3f:01:87:78:8c:cc:43:ac:8f:
         18:0c:e7:2b:b2:12:db:c2:ba:ce:2b:a4:c5:2a:5c:71:53:91:
         2a:c0:a0:88:98:6a:61:62:c7:b2:a1:2e:1f:50:f2:d3:56:87:
         92:71:53:f5:3d:41:a2:fa:e0:6b:97:34:91:8d:b1:c8:29:74:
         27:61:0a:52:7d:71:51:a6:d7:07:06:c8:11:d1:8f:bd:c1:f0:
         76:91:a2:ec:ac:cf:4c:48:df:ba:cd:eb:2a:1a:37:03:a9:a6:
         19:cb:57:0d:25:08:32:04:c5:1e:a9:38:9e:21:02:87:8f:2c:
         ce:2d:1b:ae:32:a0:c8:69:c5:96:df:bc:76:92:f8:8d:e7:3a:
         9a:7f:ca:1d:b3:71:af:02:68:02:8d:ed:16:3d:8c:3f:48:dd:
         1e:1a:f1:d2:3c:68:16:59:b3:d4:8b:c4:fc:8a:68:80:57:72:
         99:02:19:c8:33:92:a1:e1:be:c2:85:a7:3c:36:17:a5:fb:fa:
         dc:1a:37:42:f4:6a:31:11:d8:a2:55:0e:a2:77:e0:d5:d3:87:
         53:30:a9:4b:5a:67:69:d7:64:01:32:27:40:59:81:c2:33:23:
         6d:0f:cb:0f:62:48:70:8a:ea:a9:5e:2f:fd:94:51:d4:e1:65:
         53:cd:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----