Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File:                     bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier:          O/3uLq39/FabC4tI3hML02xyuJ6/yexc/RK0cNE84Y0=
Subject key identifier:   08:5D:DD:AC:85:D6:FB:C3:46:2F:C7:C5:15:F6:9A:83:8A:34:29:FF
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer:       /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial:       01962ECF9D0E2504566EF071ED27A61D001C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number:          0664
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: HuuruuJUnyizGG7iC01ujDUd5zE.roa (hash: zJUuXbnFQXiP5Cz81qdrVSNYrr0dHAG+T0ZkZ/sUgdY=)
                          2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: KI12zMoJeC9e4Ztcohn7zYSPZ4kE6TYneR6Mq/fXjkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9d:0e:25:04:56:6e:f0:71:ed:27:a6:1d:00:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=085dddac85d6fbc3462fc7c515f69a838a3429ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:b0:f7:6e:5e:b9:54:14:2f:87:95:31:85:
                    a2:cb:ef:d3:e3:ed:36:3b:75:4d:7d:44:93:d8:eb:
                    17:15:4c:f3:0a:fa:b8:c3:a5:88:9a:6c:bc:17:47:
                    73:6c:bc:74:28:6b:4f:86:33:84:8b:b9:5b:18:91:
                    f4:41:dc:7b:75:d0:4e:a1:74:2c:6d:c8:00:1c:9f:
                    34:cb:19:b8:df:fd:0a:fb:66:53:25:6e:87:22:c7:
                    88:dc:32:44:75:f5:06:3f:34:c0:4c:52:2f:8b:62:
                    7c:ed:55:6b:ee:cf:7a:2c:07:f2:70:7e:a1:62:68:
                    3f:0e:24:e9:5d:8c:b2:17:2b:6b:73:09:d7:69:37:
                    30:92:00:a8:10:fb:fd:31:71:0e:4c:77:9c:bb:63:
                    aa:cf:b2:6a:cc:7e:51:1e:eb:b1:85:9b:cc:b9:78:
                    98:22:b1:2b:b3:2a:9f:fe:c0:a3:40:95:39:75:1c:
                    ec:74:ce:a7:32:fd:34:c7:64:84:9f:9c:00:e0:85:
                    92:f2:28:16:e1:d2:59:8c:6a:7d:45:fe:79:a5:8e:
                    b7:6e:c4:0d:1e:fa:23:5d:55:6d:73:02:09:bf:fb:
                    58:d0:bd:8e:84:e4:29:5d:3d:05:f5:43:35:67:c6:
                    35:fb:50:2f:4e:86:63:c9:e6:bc:31:69:f4:eb:e5:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5D:DD:AC:85:D6:FB:C3:46:2F:C7:C5:15:F6:9A:83:8A:34:29:FF
            X509v3 Authority Key Identifier:
                keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:f0:46:0f:8d:89:68:e0:e9:b8:ad:28:fa:9f:ef:16:01:
         bf:7b:f4:90:75:e1:f4:75:76:01:bb:16:f4:e9:01:56:bc:4b:
         85:62:b4:62:22:92:84:1f:ee:a2:34:5f:6a:49:ba:a5:db:88:
         af:8e:30:3b:75:08:30:46:61:8c:43:d8:d9:c7:34:a8:ca:9e:
         f6:51:55:ef:72:3b:85:5d:45:c6:ae:87:66:8b:57:f9:b9:9c:
         77:5a:8a:47:75:ea:87:53:a8:29:57:48:3b:b2:21:b9:27:1e:
         c5:b0:56:26:d9:34:de:65:a4:14:90:de:38:f8:dd:e1:92:ad:
         09:7d:23:96:42:82:38:a1:af:22:00:95:21:fe:dc:80:8e:05:
         28:48:69:31:2a:dc:8e:0d:0a:2a:4a:68:4c:34:42:14:05:ee:
         2a:4d:f1:e2:64:2a:1d:99:8c:f9:cb:50:cb:bf:bb:97:9b:64:
         b3:f3:23:2f:0e:5e:c4:e5:69:be:e8:45:50:17:b8:f4:14:5c:
         aa:4c:a6:8b:79:69:1f:ea:2f:d4:51:eb:5f:6b:1d:6c:0a:74:
         da:2f:d1:33:80:3a:5e:66:7b:72:6e:f4:78:d1:dc:98:02:fb:
         18:10:98:15:76:60:b0:9e:19:cb:f2:0f:71:4a:df:0f:92:85:
         4e:2c:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----