Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File:                     BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier:          TLnJlFPbyVwakDqLos7gAV4Zi+CakdsRp+BzxDeDeZk=
Subject key identifier:   C7:DE:67:30:F6:E5:25:3C:86:84:83:3F:4F:BB:87:40:69:B7:E4:DE
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer:       /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial:       01962E98B23C3ECD100A50DDD6C8673CAB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number:          08FA
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: c4RjKJmuyxTWedMliWvOxD7moOWQWcBPe0jNWPKvTCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:3c:3e:cd:10:0a:50:dd:d6:c8:67:3c:ab:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=c7de6730f6e5253c8684833f4fbb874069b7e4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:71:4e:d8:68:53:2a:74:03:ca:6e:6a:c3:
                    60:fa:91:2d:fa:40:ee:6a:d9:f7:ab:f2:78:21:9a:
                    50:50:68:76:ae:05:22:d1:49:91:bf:34:fd:04:96:
                    b2:fc:ba:d2:26:59:56:1b:fa:b0:eb:b1:b1:d4:c6:
                    39:27:f2:f5:f1:b4:f6:01:3b:d5:7a:4e:9d:29:dd:
                    21:e6:7d:dc:1e:08:14:01:d7:83:93:78:7e:be:3b:
                    3f:b0:11:22:36:7c:2b:9c:a7:3c:a2:d0:86:16:42:
                    ec:d6:a7:78:9d:ce:b3:00:a4:12:bf:ef:42:ac:c7:
                    89:e1:67:24:aa:11:c4:b7:a9:62:2d:fb:8b:7f:ab:
                    ab:ce:64:a7:95:df:c4:23:66:b4:62:5f:2b:3b:22:
                    2d:3c:44:04:9a:24:21:08:ce:f3:29:d3:7b:f5:29:
                    52:8b:76:74:76:f5:0b:83:a1:27:22:c0:ba:7c:29:
                    c0:28:9a:da:12:6f:70:9a:27:de:07:bc:ec:69:99:
                    05:6d:70:77:3b:9b:4a:1a:c6:fb:a5:1b:8b:5d:86:
                    32:80:5d:b0:df:cf:bf:b0:2f:5c:c6:b4:f9:ee:0e:
                    ec:8a:cd:b1:fc:86:8d:c3:69:a6:91:c8:1a:4d:59:
                    4e:9d:d0:cc:5e:a2:ff:f9:02:5f:aa:42:f5:c0:a7:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DE:67:30:F6:E5:25:3C:86:84:83:3F:4F:BB:87:40:69:B7:E4:DE
            X509v3 Authority Key Identifier:
                keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:08:be:f7:27:32:f6:64:31:64:2c:3f:b4:80:3a:1a:46:
         2b:c1:e5:2a:f7:e0:59:9d:00:62:9b:e8:a0:37:e9:a9:93:f4:
         e8:9a:be:86:8f:d3:fd:2b:24:7d:1e:26:8b:12:28:14:02:14:
         67:b1:68:69:21:88:2c:41:2a:60:48:57:4c:07:a4:85:87:ec:
         92:4f:cc:9b:21:de:ad:cd:82:fb:28:bf:1e:ae:19:32:84:aa:
         54:d1:0b:f3:38:06:eb:8e:85:ad:46:32:38:cc:6a:9a:31:38:
         82:4b:22:9b:f4:a9:5c:63:66:ed:72:60:b3:64:9f:f0:a3:00:
         ad:8b:1a:76:dc:8e:da:45:86:d9:48:60:a2:fe:b5:a1:e4:b9:
         ac:3e:81:5c:02:47:fa:d0:66:46:8c:13:e4:b6:4b:c7:0c:28:
         d8:d5:d0:9c:0e:8a:2e:70:33:d9:48:1b:20:61:7f:c8:15:d7:
         05:8d:9a:db:4b:4a:c1:82:64:cd:22:16:94:10:fc:8a:5a:21:
         05:0a:34:52:fb:bd:b8:53:1c:51:e7:1a:37:68:ec:7e:be:13:
         74:8a:5e:9d:07:b2:26:d7:30:2a:17:84:92:b6:64:83:29:7c:
         79:15:d3:79:93:31:a4:a8:fd:ef:25:16:64:f5:d2:28:45:28:
         76:51:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----