Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
File:                     bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json)
Hash identifier:          EUNh03KIO9oIkA6VHdtuQRDZajeVvFu0hURkYgRf4No=
Subject key identifier:   DE:F4:44:C6:5E:EE:47:7A:14:86:9E:6F:D1:97:6A:33:D0:D0:4C:DE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       01962E61880AB7B56104CAC3E63B2219C6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
Manifest number:          04CB
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (hash: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=)
                          2: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (hash: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=)
                          3: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (hash: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=)
                          4: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (hash: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=)
                          5: DNyiCmbllI62P4e2fFvrufnXXhw.roa (hash: I/eD5S5k79O0q4R1YqX+E0ipH1fvYmuFNyj8c1ibSPY=)
                          6: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (hash: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=)
                          7: LztToIfHj5MPHP69zf_0q_SimrU.roa (hash: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=)
                          8: RAn-0aZAhXN_H9DvYD6bYNgp32s.roa (hash: ieir54EQY2hQHdftSkxb+5GR7REd+9+NA0K3WqSPUQ0=)
                          9: SF7imhaazuPfEpJBywM_tm8X9mE.roa (hash: 8+reCe3POF1ExZIThV5iCt+eheoTKlzITInNmkvijl4=)
                          10: XYYDIXiK6DLY6uUmH1bLSCpurpI.roa (hash: 2nb9BodFkoof3d5aJD3mP2QX8Y82jT6IwRaoI0HoLFA=)
                          11: ZbHp2Q0SQCE3MMYBAQ4MOMTgPEM.roa (hash: TQP4ZxqijWk9XzygHeIy2mb/KtPqcpn8/1/3cIo31Ss=)
                          12: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (hash: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=)
                          13: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: h9XCF/OkLNFxRe3SU3CAcRfUThnu3TmQQVNKZGkKDhY=)
                          14: f017PzkxNN7Z5ETh0qCvv8t0lNo.roa (hash: RBBJWOHQn7zT4E3wUOt8OhgmQHDecS8xI1YeXa1Jnyc=)
                          15: hu0DNVNBS-52vImMrFag5xmRonA.roa (hash: S+JBIuGEFQfqRFNizmiIiEzsKVPxb9FoL2Uoi+rMdKU=)
                          16: kVb7Jw3eFm0rH_2hI_sFxpUe654.roa (hash: DhV0642v9bLRlCfdgD3Msa05srzFpUmzNDU1xI+EO2k=)
                          17: pTFWP5ts7dNfHyhFc9nDm9T7Shk.roa (hash: KrXatMakUf7FEk5x5p0WIjNpbDIla1OfAVog24ZN1j0=)
                          18: qEE8SDYU5JIB-O7Trc1We8cjPEs.roa (hash: XHzHtADLaVp1ioqOh7kQak2u8fbeDr9tEqrlOIWlYXY=)
                          19: rGOYtq_Thi1bHxPEPh_-1162hwE.roa (hash: sMSgNyPNu+dXEEK26rDJLJvw6klu2nxdHF72XJN9xsY=)
                          20: sYcIUF9JZUL8nalnP6guQpiQpFo.roa (hash: O15muEWAoO/BLk3AT82wezr5i9pcEWqA91vts9pFe9Q=)
                          21: s_SOeCU2ZSlKaABMzyI1A92STj8.roa (hash: 6Ea34PFLl9Lnz9BrVAkfmVoBNWpp0IKT4SIgHazKH4s=)
                          22: sgCCvkuDH7pLONYDGbcyveP1Fns.roa (hash: 6pE2iCGii/sYhcErT76C0r5xU6ShZPkO5zG1gGCULAs=)
                          23: sssWP3djtd6l0GWL_I-wmGeoSjI.roa (hash: 6zyugApApVeFvdjdkS2bSXr4jHljDOC0iTp4kTrBxZ0=)
                          24: vCsrdLZ3sjv7jX0AsouEukps7zI.roa (hash: 0mduqHJYJw2QdsAngOAfbzJ7V4cIEG2VwhLeCMRkpDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:0a:b7:b5:61:04:ca:c3:e6:3b:22:19:c6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=def444c65eee477a14869e6fd1976a33d0d04cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:d5:8c:66:3b:9f:c7:d2:da:cc:5f:e6:66:
                    ed:ef:ee:ca:78:6a:e7:d3:93:85:dd:5f:7c:40:5d:
                    d1:f6:4c:17:95:9c:91:0a:1c:4f:04:8c:a4:4d:0e:
                    65:b2:57:cc:aa:9b:a1:44:1b:7d:4d:0d:0d:cb:2d:
                    33:6a:27:b0:b2:71:c1:16:17:cd:87:23:b0:eb:3a:
                    26:23:6b:e1:19:a6:ed:2c:6e:7d:8b:6d:b3:ec:b6:
                    c4:de:32:ab:e7:a8:48:75:35:f6:89:e8:f8:50:5f:
                    2e:09:57:f9:7c:c9:41:79:b2:49:69:c1:15:19:1e:
                    cb:b9:f4:77:0f:88:d6:7a:1c:57:b9:17:11:82:6b:
                    11:39:e3:4d:82:b2:25:19:d2:85:e1:7e:bd:9d:5c:
                    d1:d2:79:0e:b8:ad:f8:4b:80:7f:ee:6c:09:e0:5b:
                    a5:49:37:c2:9f:e3:42:02:16:0c:55:49:ca:9e:ed:
                    24:5a:97:0c:cb:9c:95:e4:89:c4:17:74:c7:03:9a:
                    9c:12:07:c0:0e:88:cf:7d:c5:c6:b7:ec:62:43:98:
                    9b:b2:a0:77:60:46:73:33:c3:1b:c9:7b:00:71:68:
                    26:91:4d:e3:f2:83:c0:34:6b:5e:84:bf:1e:27:ca:
                    fd:ee:3f:9a:52:22:8a:9a:2b:67:72:ba:5c:07:5c:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:44:C6:5E:EE:47:7A:14:86:9E:6F:D1:97:6A:33:D0:D0:4C:DE
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:ad:7c:45:6d:21:fd:30:40:a3:40:a6:23:b9:ef:ae:9d:
         35:11:e2:95:44:55:0b:ec:55:fe:bc:1d:b4:d1:da:1f:94:b6:
         7e:62:10:a5:1b:61:39:8b:8c:8a:22:c3:74:38:61:04:b2:b9:
         20:4b:88:20:ba:9a:a5:b8:25:2c:78:9e:13:2f:13:a7:90:0a:
         7b:17:86:2d:b4:7a:3a:03:2c:17:6d:e9:23:60:77:0c:72:d3:
         2d:9c:55:2a:fc:3e:29:f6:c8:f6:23:59:44:53:b8:08:83:f4:
         10:30:21:ea:ec:82:56:3f:e9:66:fd:4d:38:2b:c2:36:f1:01:
         fc:6e:f9:e5:80:3b:d8:00:96:17:dd:76:3a:cd:2d:27:ee:a6:
         70:a7:9e:2c:50:70:2d:0a:47:5c:07:6e:03:0f:35:7f:3f:2e:
         15:a8:f6:3e:0b:7c:1d:b3:5c:63:7a:ea:62:c0:db:8e:9d:1e:
         06:97:1f:4c:36:0c:4a:79:4d:4b:b6:26:61:a6:32:c6:a8:63:
         42:04:69:8d:40:77:ea:77:6d:e4:95:38:aa:73:68:43:62:74:
         41:4a:df:88:af:94:e3:b1:0b:92:d2:01:9d:fc:ca:83:dc:ff:
         0f:5c:f9:54:30:e6:26:9c:fb:9f:e1:21:ad:3b:80:8f:ea:05:
         8b:5b:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----