Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File:                     v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier:          0/vKmiWdRhgbl68WDIk3jGc1B03w3FKL3G2N5icI4Z4=
Subject key identifier:   1F:FA:EC:67:F1:CE:B3:AF:93:78:A3:D9:B6:8A:14:4D:3A:5F:67:59
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer:       /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial:       01962E2B36CCE0C213F2E078D6FC15EB632C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number:          11BD
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: PVx9315HXPnPOTLeQcr5qcZngYo.roa (hash: kEXPY9i0jPlv+x61rf6B3m34sobHRCkgbuQLWEQLQ8s=)
                          2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: ogbWghTZq19eNXdSc/9uKHozLQja7MmdG1LvL9BoPN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:36:cc:e0:c2:13:f2:e0:78:d6:fc:15:eb:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=1ffaec67f1ceb3af9378a3d9b68a144d3a5f6759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:69:c7:d2:aa:d3:a9:09:17:d8:ba:98:76:
                    e2:81:75:1b:97:66:38:82:14:15:78:1c:38:0d:e7:
                    4d:60:e3:86:02:6a:f8:33:ba:5e:52:7e:07:5d:bf:
                    3e:19:af:6c:25:25:27:56:cc:ae:b4:44:42:b3:03:
                    58:d5:d0:63:93:c8:be:c3:0f:0b:f7:c3:09:c4:fe:
                    f0:2e:45:e0:1c:0b:19:fb:1b:b9:f7:09:fd:fa:db:
                    a5:b3:b4:a9:1a:e0:2e:e7:c3:98:13:01:2e:91:ce:
                    ac:85:bb:12:07:07:1f:61:56:4b:3e:b9:47:a9:13:
                    28:c6:92:11:32:c5:ce:9f:40:d8:12:1b:62:14:1f:
                    9f:ef:7f:e9:a5:af:5c:f7:cd:bd:97:0f:c8:04:76:
                    f1:27:b0:91:fa:6d:21:63:03:30:a9:3c:a6:6f:4d:
                    72:f2:74:d1:34:0b:5a:8c:85:48:4e:a4:8c:3d:91:
                    10:1e:2d:52:06:44:61:f2:56:b4:0a:50:b2:16:47:
                    a3:e4:0a:d5:af:d6:45:62:02:7e:1b:11:24:76:cd:
                    62:96:77:38:b0:f9:74:63:3b:0a:23:90:56:34:1c:
                    2d:84:b4:fd:79:48:24:51:34:8c:b2:98:1e:71:f4:
                    6f:5d:64:1f:eb:3d:59:27:83:14:ba:36:62:e6:a7:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FA:EC:67:F1:CE:B3:AF:93:78:A3:D9:B6:8A:14:4D:3A:5F:67:59
            X509v3 Authority Key Identifier:
                keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:33:34:ac:4c:3f:06:20:09:a0:94:d0:9f:f1:c8:e9:92:8c:
         b7:d1:2e:d5:0e:60:56:18:37:09:ab:64:20:a5:0a:c4:f9:2b:
         b0:ed:b4:67:5d:0c:b1:e6:1f:74:a7:ea:78:cb:10:31:74:ba:
         c9:5e:d0:5d:cd:b7:31:69:2e:3f:6e:96:3a:21:c7:28:da:0e:
         14:a6:9d:4c:00:14:91:00:79:12:62:29:5f:4f:23:98:e4:b0:
         50:6c:01:ae:f3:b2:76:fd:e0:b6:65:da:23:5b:47:98:9a:84:
         cf:11:36:dc:70:22:a2:1f:a4:b1:87:0f:67:66:7a:3a:78:41:
         08:1f:b9:dc:8c:be:4d:71:8b:01:fa:f7:9f:5c:e1:97:e2:cf:
         d0:61:c3:60:70:d3:87:36:c9:d7:27:36:bd:e0:c8:d9:6d:8a:
         b0:e8:69:2c:ea:01:4e:be:c1:6c:37:04:5a:56:f8:7c:ac:6d:
         ea:3f:95:73:ee:6e:bf:1f:b7:7d:14:75:99:b6:01:13:ab:d3:
         d2:63:31:a3:c8:b2:da:d5:11:d8:27:83:07:d5:0e:6b:5a:08:
         93:12:ad:30:8c:42:f3:97:79:c7:2f:62:84:21:54:16:e8:cc:
         ea:0a:14:1b:9c:02:89:e2:c7:4a:ee:c3:e2:30:3a:f3:0b:c5:
         77:f6:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----