Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          606Tp7wUUHUZ0N1NBgrhLA2sW0/VhaUnctW0+pwHUbM=
Subject key identifier:   5A:3B:10:E4:F4:24:6F:EB:BF:50:FA:7F:F0:D2:02:B2:00:44:AE:30
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       01962DF4351DD6DE81638C24607DA21F25FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          1240
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=)
                          2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=)
                          3: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=)
                          4: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=)
                          5: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (hash: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=)
                          6: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (hash: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=)
                          7: CQSr_mSGvx_MO501tTIbCtodnJs.roa (hash: esowCKU64ui4/Ap6GOn6lU0uRgAnfvEQjSsW8NdABkY=)
                          8: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=)
                          9: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (hash: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=)
                          10: MhM8AdXgoCd4zrzFUNyYeB1JwVg.roa (hash: x8CsV2gfv0T+wUL+aorX982fUJ/l+SVnwH0Xs0/jba0=)
                          11: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=)
                          12: TEmBttlqOql-6WlBVV0HWvswEQo.roa (hash: fN7yflsLhVlqg4R45jJbYQ9DskvVzHDmzUKU/2SCJrQ=)
                          13: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=)
                          14: bm3jAPSokNwmkDXJzC1yE4mlh8U.roa (hash: Ugi+oeIGdBF2ZuSWBZVXXcNVIbH2fno96x0J1auQtLQ=)
                          15: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=)
                          16: dU3qmUSa0GUKRhwNtqeBWyfdFgA.roa (hash: +1noky3lUg4Xw21sSrzlUFu5e24FajFmXh8kqpW0IH8=)
                          17: ieLYYEtxw8yorIFSAMUiUnhPzxc.roa (hash: zpEjE+0wqNe3063Xp+u8y1IQ6Fze1n5YSctd31AydZQ=)
                          18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=)
                          19: m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa (hash: +f069Ignbpg0zmLTIqsmUaOuN5XLud0PtvHpBkikPfg=)
                          20: pubBNtMB3i07GYMPpVIhhyFOTo8.roa (hash: Mn01o/7jdUgPgTc66DieNIOLFHGdyMS6RTRjsWHR/O4=)
                          21: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=)
                          22: uGhxQuJoiydmGBCdoiTuE4rnskY.roa (hash: cp9F2KjzrCdyiwYgQ04s2rnpm15FpJSYgYYNO9VL9i4=)
                          23: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: nEqBm8RVgieyqFbkCnazWw9tL3y9rtNcS+adPr30UGA=)
                          24: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (hash: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:35:1d:d6:de:81:63:8c:24:60:7d:a2:1f:25:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=5a3b10e4f4246febbf50fa7ff0d202b20044ae30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:49:5e:8e:74:21:c8:48:3f:1e:04:58:b6:
                    9f:2f:c4:06:2a:5c:6a:92:cc:21:dc:f1:11:f6:6c:
                    a1:e1:2c:5e:a4:9a:0a:e4:96:07:be:d7:01:c8:81:
                    81:40:41:fd:13:71:18:7b:e1:62:79:1c:f2:43:a8:
                    7d:4d:7c:55:88:c5:8a:d3:87:47:ef:ad:84:f6:d7:
                    99:d3:ea:54:2c:8c:7c:7f:ea:00:f1:af:44:59:dd:
                    88:49:09:70:13:e7:31:83:81:82:af:6d:21:f6:c7:
                    ef:4c:0b:06:4d:04:70:5e:be:de:09:fd:e6:53:82:
                    95:d9:fd:8d:b6:8d:1f:ee:2d:5a:e9:21:62:db:58:
                    97:c0:de:dc:8e:13:be:a7:70:7d:4e:3c:63:8e:69:
                    ca:17:1d:0e:d5:c8:52:ca:be:d1:78:ea:27:9a:24:
                    28:3d:33:2d:20:c3:00:d0:01:db:90:42:69:1a:4b:
                    f4:a1:72:2b:a8:a2:76:46:b2:b1:be:f9:65:71:0b:
                    71:ff:6b:70:6b:42:7b:1c:0e:99:af:90:bc:b0:13:
                    e9:ac:b1:8b:b8:bf:b6:82:11:04:44:23:1f:8a:a9:
                    7a:52:b1:18:5f:76:56:61:16:8f:5b:a8:48:f3:db:
                    d3:ca:10:94:c8:b0:f5:90:bc:33:be:c3:14:d7:d3:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:10:E4:F4:24:6F:EB:BF:50:FA:7F:F0:D2:02:B2:00:44:AE:30
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:c2:d9:f8:eb:a5:bf:89:3f:15:69:43:47:2a:0a:3b:c8:
         f0:44:0e:54:af:14:ef:42:9f:c6:fd:de:8f:f8:29:9c:d3:0e:
         c7:70:7c:4c:d9:17:5c:46:38:36:87:f6:67:34:33:6d:8a:5f:
         86:eb:4f:68:33:4e:f9:41:4e:04:5f:e2:d2:01:40:72:60:3f:
         aa:12:a5:4e:75:fb:a1:3b:8e:a2:a7:68:4b:1d:74:97:57:0f:
         d4:c9:33:92:5a:9e:28:b4:b2:6a:8b:a5:17:d1:cb:71:94:e7:
         2f:d1:a6:36:86:e0:bb:c0:fa:8a:63:b0:5b:cf:68:24:3f:eb:
         dd:b2:d8:d8:d4:fa:92:32:ef:ba:15:9f:b7:86:5d:b0:33:59:
         8a:56:86:72:8c:b7:c8:78:c5:ae:43:2b:6e:c1:b3:73:bd:f6:
         ea:c8:c2:b1:9e:17:c0:b7:3c:da:1f:fa:15:18:24:c3:3c:61:
         42:ef:88:d8:7a:47:b6:91:e4:af:ca:84:78:9d:3e:df:83:62:
         e1:c2:e7:5a:30:05:e2:9c:1b:8c:9a:79:89:b5:b8:a4:bd:e0:
         78:36:3b:e6:4d:09:35:fb:5d:dd:a4:ea:db:fd:9b:5c:6e:d3:
         fa:e1:bc:26:28:5e:47:2e:0c:8c:4f:1d:de:6c:ae:8d:07:ee:
         e2:a5:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----