Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File:                     bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier:          ekNPUzNhwSmCRe3kL5bB0+CI/1tDuirm5Q2f2VQ1rqE=
Subject key identifier:   2F:B6:E8:BE:11:8C:2D:1E:D2:16:7C:1C:8B:D9:02:11:C5:B7:D5:7C
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer:       /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial:       01962E2AEE23B2CB73EF53D4D4F9E9E3D629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number:          0D84
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
                          2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: Y9G9hOgKcU4PX6ZfPX08+Ed+nB0he8+Bu+taUvJ4voo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ee:23:b2:cb:73:ef:53:d4:d4:f9:e9:e3:d6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=2fb6e8be118c2d1ed2167c1c8bd90211c5b7d57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:ca:ed:5c:2f:4b:fb:96:41:57:a9:5c:ec:
                    93:e7:bd:86:70:4e:bd:b5:b2:6d:c6:49:80:cf:30:
                    17:c5:84:e6:c0:36:11:78:43:5c:40:ac:91:d4:59:
                    8a:97:12:dd:b2:5c:67:ad:ce:4f:98:be:a7:87:36:
                    8d:71:ab:64:ca:3d:a5:0d:da:77:f0:7f:b2:6a:0a:
                    84:09:f4:c5:e2:76:6e:ec:2e:ef:cc:d2:96:69:62:
                    1d:82:8d:67:3a:de:92:fa:a6:62:d4:76:85:f5:1e:
                    06:23:6e:0c:ec:6c:3e:37:a4:7c:d2:69:4e:ef:62:
                    2d:4b:39:93:b9:8b:e5:d2:0f:b3:b5:07:f3:c6:bf:
                    25:b6:3f:f7:49:00:54:b0:82:32:fc:b5:e0:0e:a5:
                    8b:56:33:69:ac:4c:e0:8a:7b:be:ae:ae:a6:37:c0:
                    50:6e:fb:b7:81:a9:18:2b:e5:65:3b:53:bd:43:d7:
                    34:e0:22:a0:60:f7:f0:f8:80:0a:19:36:d2:50:ef:
                    82:0e:e4:56:70:5a:a6:93:66:1e:96:1e:69:44:0a:
                    12:46:60:fc:85:c8:73:56:7c:da:5f:41:14:8c:dc:
                    ef:9d:d6:94:bd:57:b1:74:3c:f3:b3:34:53:6a:ad:
                    8f:90:ad:16:37:d6:4c:60:04:72:ba:94:0b:45:3b:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:E8:BE:11:8C:2D:1E:D2:16:7C:1C:8B:D9:02:11:C5:B7:D5:7C
            X509v3 Authority Key Identifier:
                keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:77:6d:aa:d6:ad:2f:ba:de:74:f6:f6:9b:9b:6e:9e:73:81:
         cb:4a:8f:e5:a9:14:ce:b1:72:e6:fb:1a:47:f4:1e:50:6e:09:
         d0:e2:85:c7:ee:97:77:1a:1d:56:94:11:2d:7d:a7:72:b0:13:
         12:a6:f7:1d:e9:e4:3b:0d:55:e7:5b:b7:6f:8b:fb:6f:6f:e0:
         39:0d:43:ec:ba:3b:91:23:e5:c2:e2:39:0e:c8:e0:c3:ad:91:
         85:a7:4d:66:04:43:d3:ed:cf:d3:ef:c8:d0:98:8a:f3:5c:29:
         13:1e:6a:7f:ca:ba:9e:36:6e:fe:ef:97:60:d4:c8:4a:2a:2b:
         3b:96:eb:77:8f:95:0d:19:c7:ac:5b:68:f6:06:b4:9d:0e:fd:
         e1:f0:7d:63:0a:69:98:0f:41:84:1e:f1:6d:59:09:aa:47:d5:
         47:dc:12:a9:2e:41:60:36:9d:97:93:0d:a3:4e:44:8e:90:74:
         14:65:3f:82:d5:1b:c4:63:c7:3a:34:b2:7d:94:44:f6:ee:3f:
         51:04:2b:97:3f:84:29:11:82:e3:95:ca:9d:a1:6c:da:8f:9d:
         b9:a8:e4:12:3c:70:37:7c:be:68:b0:59:fe:47:40:96:50:9e:
         c6:f9:2c:e5:78:c1:8f:9b:0a:0e:c2:d7:93:65:03:61:67:2f:
         0a:cc:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----