Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File:                     bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier:          xdbhNacBfygNtJDrF64tPy28hbi/kbVSQnPlsSWkOtw=
Subject key identifier:   FE:D0:C4:17:5E:46:BD:0B:C7:5F:2B:8C:D4:75:9A:A9:4B:4F:E9:AD
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer:       /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial:       01962F068BF0F70B81355CF1B2641EB43300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number:          0D96
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
                          2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: 2Fmop28j3F7ahV67hqW9zXKKn3VB0MSRjGahpEmQkwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:f0:f7:0b:81:35:5c:f1:b2:64:1e:b4:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=fed0c4175e46bd0bc75f2b8cd4759aa94b4fe9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:2a:68:ce:8a:42:be:2a:21:96:42:8a:30:
                    7e:49:a1:38:2f:7b:29:16:cb:0a:09:87:ac:50:6f:
                    89:28:61:56:11:f5:e4:93:73:ef:e0:af:6f:7c:38:
                    30:84:40:54:1a:4e:dd:4b:4e:6d:41:cd:f2:43:be:
                    92:e0:6b:88:62:1d:45:cf:cf:73:50:9e:f0:d7:c7:
                    5e:b7:a1:ea:62:d0:32:56:7b:32:91:51:37:c1:90:
                    90:ed:51:11:d1:85:8f:6d:4b:47:7a:81:0e:55:97:
                    8a:af:a5:48:46:72:55:da:3e:8a:3a:67:09:be:d8:
                    36:a6:1c:5d:8d:dd:75:a4:d8:07:78:33:5b:29:3e:
                    6f:51:3a:13:d1:b3:9d:dd:8d:09:2d:9b:b5:aa:6a:
                    9c:25:a9:86:37:ec:9c:e1:d0:06:91:1d:53:7d:dc:
                    1b:5c:4d:53:4b:62:71:ee:33:46:db:e7:4d:c3:32:
                    a4:dd:f2:c3:57:89:0f:12:40:b0:98:82:6d:35:ca:
                    e6:90:cc:3f:52:96:91:dd:c7:74:5f:12:89:e8:2f:
                    8b:f5:1e:e5:1d:69:e7:90:d9:94:c0:fc:98:29:7a:
                    de:e3:ee:60:c5:00:10:39:6d:5a:aa:3b:65:44:8a:
                    05:60:b7:48:b3:13:bc:60:cc:5f:8b:75:bc:e9:76:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D0:C4:17:5E:46:BD:0B:C7:5F:2B:8C:D4:75:9A:A9:4B:4F:E9:AD
            X509v3 Authority Key Identifier:
                keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:c9:a1:2d:0b:df:4c:22:5f:de:2d:ef:69:37:72:c6:9e:
         84:60:5f:fe:9f:b6:c6:56:a0:5b:b2:66:b5:fc:aa:06:5e:8b:
         f0:b2:c7:4b:da:33:54:a6:08:95:f2:18:15:a0:a9:2d:34:e0:
         77:b9:dc:46:f1:5c:2c:be:5c:5f:86:d2:de:2c:98:ea:4d:7a:
         9b:30:ee:e3:fd:fa:f3:e2:23:0e:36:7d:76:76:90:18:98:15:
         2d:ab:7d:51:80:bc:3a:84:79:5f:01:10:71:71:54:88:8b:52:
         2d:11:64:4d:68:3b:9f:48:57:02:dd:09:55:e6:ea:36:d5:6a:
         83:88:2a:61:af:7a:ad:eb:cf:4c:b0:48:9a:12:34:34:cd:69:
         b1:c0:2b:a2:aa:78:4d:24:0d:8c:d4:fc:46:78:53:03:10:f4:
         8a:be:11:46:d4:08:b1:f6:ed:1d:cc:7e:78:9a:32:d6:26:7b:
         83:f9:8f:83:8e:36:e3:10:fa:18:46:ff:0f:20:13:a1:5a:ea:
         ce:08:1a:8e:fd:9f:e2:30:5e:2e:23:81:66:d5:ce:00:db:11:
         8c:69:91:fd:cd:fb:6f:7c:1c:f9:aa:27:e8:61:d2:3a:ac:af:
         33:10:3b:c5:9c:f3:fd:2a:3f:98:40:5e:31:b5:63:ba:77:f1:
         02:f3:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----