Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
File:                     bgRq62oBykikl1DYgbefenjVEIk.mft (raw, json)
Hash identifier:          h/GaJF7DSYsJEPfUbdxuKTwcc6WsVdxjT53VjiZO5kg=
Subject key identifier:   86:2D:65:1A:B9:C7:69:68:DC:68:4D:63:54:7A:18:61:90:F9:98:75
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Certificate issuer:       /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial:       019547B55FE9502E3C77A8912DF4506C79D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
Manifest number:          1477
Signing time:             Thu 27 Feb 2025 14:00:23 +0000
Manifest this update:     Thu 27 Feb 2025 14:00:23 +0000
Manifest next update:     Fri 28 Feb 2025 14:00:23 +0000
Files and hashes:         1: GIVWprWFbOZPhSHYq7Ic-gvexKY.roa (hash: a5n2A2nV2+7629D0mXkl2qBTB/0Qibtp1AVMOfdCCQU=)
                          2: bgRq62oBykikl1DYgbefenjVEIk.crl (hash: jZU8jQaekGHc/uyWgzfSRJezqeGU1FVvD+JNvUVj6Gc=)
                          3: gXKAmV_Cm93EQ03TWF25G0QCK6Y.roa (hash: fQ2SrwapEKlQ7rgN9V0I2bJGTFweLcR8p5tMKIoqhrE=)
                          4: uAY7hVAuFrjWUoNPpdRgTEHtcz8.roa (hash: ATwY0nwj3G5EjIg+VZz3Y24NdHZrssfo8WEV62/YzO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:b5:5f:e9:50:2e:3c:77:a8:91:2d:f4:50:6c:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
        Validity
            Not Before: Feb 27 14:00:23 2025 GMT
            Not After : Feb 28 14:00:23 2025 GMT
        Subject: CN=862d651ab9c76968dc684d63547a186190f99875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:a7:a0:bd:19:3b:d7:b6:82:e7:20:d6:3a:
                    62:c2:84:83:d7:20:43:30:dc:d2:83:a4:ea:e3:e1:
                    e5:c6:57:58:ea:49:12:ca:18:cb:b0:c7:0a:52:42:
                    cc:9d:fe:c5:36:99:86:e3:96:53:9a:42:11:87:b1:
                    da:15:10:6b:a0:41:00:8e:03:53:0e:03:a3:50:1d:
                    b0:c1:55:a6:64:32:dd:5d:18:33:f0:8b:b0:3c:d9:
                    01:09:d6:6d:24:92:76:bb:22:7e:5f:37:a4:28:d5:
                    d4:9e:12:fe:22:a8:20:a7:ca:04:7f:15:b2:20:75:
                    f6:0f:bf:60:37:b7:63:9f:e1:83:3a:36:e2:7a:99:
                    94:61:0c:01:08:73:bf:8a:50:9f:c9:90:38:1e:fc:
                    73:5c:86:46:b4:af:9a:96:eb:f8:a6:3e:30:a6:47:
                    80:47:89:ab:65:be:c5:3a:fb:c0:48:61:35:f3:2a:
                    54:00:22:ca:cf:31:02:ea:d0:1b:85:a9:e2:e0:ec:
                    11:40:a2:67:09:f1:b8:99:45:2b:91:eb:61:48:b5:
                    4e:47:46:95:26:c3:ca:38:ba:7d:dc:40:f8:19:57:
                    f1:26:1a:7c:9a:47:60:b9:db:5d:bc:28:de:cd:40:
                    13:63:f0:70:d0:e4:f0:f2:b9:66:1f:23:c9:17:e8:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2D:65:1A:B9:C7:69:68:DC:68:4D:63:54:7A:18:61:90:F9:98:75
            X509v3 Authority Key Identifier:
                keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:1b:17:3f:9a:ee:4d:67:af:f2:44:fa:16:c5:92:f7:bb:
         b9:12:02:4c:59:83:60:65:e8:1c:1e:05:c2:a2:83:d3:25:df:
         ab:18:70:ad:6a:ce:e8:c1:06:4c:84:4f:1f:d5:10:bf:08:28:
         61:a8:cd:95:ed:f8:cd:2b:16:8a:f2:10:42:b9:64:6f:62:d0:
         97:70:c4:69:f3:9c:ac:d0:3d:d2:8d:cd:b0:a3:66:be:90:7a:
         d8:36:25:4f:25:3d:a3:1e:2c:ab:64:0a:ff:35:35:a5:ef:b0:
         cc:07:1d:ff:5a:5a:18:fe:7c:55:01:e6:8b:65:ea:f5:94:a7:
         44:94:2e:ab:dd:7a:db:1b:09:d9:97:4e:52:8c:52:b7:12:ea:
         fe:d1:bd:09:28:9b:17:5d:d0:7f:67:04:3a:20:41:8a:fa:14:
         3d:9c:df:20:8e:fe:7c:80:6a:e1:45:7c:a6:eb:69:be:33:07:
         36:db:3b:e9:0f:0e:e0:c6:f0:96:e6:50:d7:f7:45:21:f8:63:
         3b:23:d9:81:2f:12:ed:b0:f4:56:64:a4:53:fc:4c:40:f3:59:
         88:59:9b:b4:12:16:c5:e6:65:cf:8a:50:65:1b:72:ac:80:99:
         20:ea:93:47:09:5a:b0:0d:f1:49:00:9a:db:e6:41:e4:41:57:
         b6:83:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----