Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File:                     bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier:          c+hA7SvQi5/P4UNi1wjbH7BQPQXGPV7JgwpVPtkS+6s=
Subject key identifier:   F2:6E:99:C3:88:7B:B2:4C:AC:1B:A8:A0:1E:91:55:D3:F4:6E:2C:F6
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer:       /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial:       01962ECFB9B7A438EC89DE08FE1CEF90DEC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number:          1049
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
                          2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: 3/7VBa8ynLfWUuPyB1s8oywh97qNBxWAJLSTNa0jFMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b9:b7:a4:38:ec:89:de:08:fe:1c:ef:90:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=f26e99c3887bb24cac1ba8a01e9155d3f46e2cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:2a:6b:7d:c9:58:65:a2:89:d2:c6:68:55:
                    69:3d:0d:11:92:3d:b8:02:27:39:ef:9b:c9:0f:19:
                    9a:4b:b8:74:ed:63:95:d3:f1:fc:a8:db:2e:62:b3:
                    a2:be:7d:3d:c8:6e:ec:c5:be:c9:46:fe:69:68:49:
                    0a:7d:b4:81:49:e4:f8:ab:dd:16:d4:c5:12:79:56:
                    3e:3b:0f:ef:f1:65:f2:78:fb:05:8e:96:f5:97:b7:
                    8e:5f:ac:5e:4c:ab:7c:c1:f8:6e:17:49:54:49:a3:
                    c9:b4:70:62:5b:82:4c:52:07:25:e6:97:b0:58:29:
                    ed:96:83:af:9e:d9:25:9a:a1:b3:4b:cf:bc:30:41:
                    0b:f4:cf:93:0b:b2:41:55:3b:51:b0:f1:af:37:9c:
                    e3:d9:4e:a8:0e:89:ac:9a:0e:6e:49:00:22:2a:56:
                    29:7b:25:df:31:a5:a0:00:a2:af:c5:52:ae:a5:f9:
                    84:47:60:a6:dc:3e:a3:72:85:2c:5e:4b:1b:d2:6f:
                    01:ed:b4:e4:89:72:af:8f:4d:d7:63:b8:18:69:9c:
                    36:4b:ca:15:cf:c7:dc:da:63:63:5a:e3:e7:57:82:
                    75:6d:22:fc:f5:ea:ff:f9:ca:3b:c7:66:c9:6b:b5:
                    36:38:39:fa:55:b8:8f:72:60:93:ad:be:7e:07:52:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:99:C3:88:7B:B2:4C:AC:1B:A8:A0:1E:91:55:D3:F4:6E:2C:F6
            X509v3 Authority Key Identifier:
                keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0f:d3:e9:f0:71:a3:6f:bc:e7:b4:cf:5c:9c:34:57:cf:a3:
         6f:f9:c8:c0:5f:0b:04:42:01:f2:07:a0:a2:be:e6:6a:10:8d:
         6d:29:f8:22:0f:df:e2:70:ce:35:6e:4e:6e:10:e8:79:dc:66:
         f6:90:65:3e:58:90:06:fb:de:f3:c7:85:78:6c:69:6e:94:23:
         9b:bf:b8:de:bb:e1:c9:56:4c:90:ca:64:84:4c:25:78:bb:88:
         76:e1:0a:76:e6:6d:98:57:46:4d:b7:97:b5:76:6f:5c:cf:05:
         e9:eb:ea:07:7b:25:77:ae:89:32:f8:63:e5:93:cb:f6:40:41:
         8a:1b:03:b8:5d:0c:a6:22:19:e6:74:6d:b5:d5:2d:4c:c5:08:
         56:dd:0f:33:4b:60:f0:2e:1a:ec:2e:7b:71:d3:08:17:e5:7d:
         8e:c8:29:4b:40:3e:59:5a:5d:77:24:c1:9b:c8:af:6e:f7:c9:
         3c:32:a3:a8:cb:e9:17:1f:22:93:64:86:7c:6d:60:e2:09:ad:
         32:42:d8:cc:4e:72:ea:ef:e2:52:0b:57:24:e5:71:78:a0:b9:
         ed:d6:3c:e7:5f:05:49:b1:8b:00:3d:39:ac:b5:b5:6a:b4:ae:
         ef:a6:8a:f2:6d:71:6a:2c:b1:ec:1e:e6:6f:21:ab:37:fc:85:
         4f:7b:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----