Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File:                     bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier:          qRNucDXWvLQn0H2DHSpnk3XzviOOQcy0E/q4W7w5rrk=
Subject key identifier:   5D:E7:F2:58:D0:C5:E6:93:CF:F8:58:E1:38:50:2D:00:C2:49:8D:5C
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer:       /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial:       01962DF43C3FF19E21DA6B92F40F597C2F63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number:          10BC
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
                          2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: efFGqU4X1e5h2ZjM0Alu847RX4aCwZpFLh5N4PdE5tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:3f:f1:9e:21:da:6b:92:f4:0f:59:7c:2f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=5de7f258d0c5e693cff858e138502d00c2498d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:3b:1d:f9:6b:32:de:25:e5:af:f4:0d:af:
                    74:60:02:b6:92:18:bb:4c:6c:65:d2:5d:3b:ce:7c:
                    74:35:5f:10:a2:50:9c:c1:ad:95:ef:5c:eb:38:a3:
                    68:73:82:cf:7d:b0:ec:0c:d4:0f:12:67:e8:b9:28:
                    ea:34:15:1a:03:c8:09:f4:8d:46:17:46:60:5e:3c:
                    66:1d:68:cd:5e:a6:90:72:58:47:37:e4:7f:76:c9:
                    a4:80:60:b7:dc:4d:ea:8f:64:cd:5e:dd:19:fc:ab:
                    29:02:df:2b:97:a9:f6:6c:5a:17:fc:14:19:a0:4e:
                    98:5e:10:d9:0a:65:00:88:0b:2d:c2:7b:42:74:64:
                    d7:1c:0e:f7:13:39:ba:fd:02:62:79:df:d1:60:d7:
                    33:62:75:cb:03:9e:de:a2:6c:8c:ca:6a:eb:ec:be:
                    20:b6:b6:fc:3f:38:75:24:1a:e6:e3:9f:66:d8:ea:
                    45:d0:50:27:e8:ff:78:c0:00:4b:63:89:18:fb:9e:
                    b4:98:7b:35:7a:70:95:0b:68:17:69:8e:12:d4:ce:
                    f0:10:dc:3d:d6:99:6e:73:32:9c:3b:55:36:f3:ed:
                    dd:ea:5d:ad:63:b4:41:b2:75:d2:23:48:f7:bc:5b:
                    ba:96:4c:f0:8b:7a:0a:1a:08:62:dd:05:9d:de:a6:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:F2:58:D0:C5:E6:93:CF:F8:58:E1:38:50:2D:00:C2:49:8D:5C
            X509v3 Authority Key Identifier:
                keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:54:22:28:6f:61:1e:40:d0:30:67:a6:a8:85:dd:01:bc:
         27:44:e3:15:74:7b:df:ae:85:46:b4:da:73:da:ad:ee:b6:bc:
         bd:fd:bb:e7:4b:c1:b8:c3:5d:a0:ff:6b:ec:f3:04:5a:72:64:
         7d:7c:eb:61:1c:f1:68:c7:67:7b:af:95:f4:9b:cc:77:78:80:
         c4:39:a1:bf:08:07:f9:c9:dd:98:27:07:73:b7:6e:06:be:d1:
         db:77:87:bc:0c:da:45:3c:6b:6d:e4:61:83:f4:39:9a:fb:98:
         fe:3b:f7:e0:9b:98:c3:7b:d6:3c:e1:f2:8c:3a:c7:ba:62:bf:
         9c:52:04:90:2e:40:b5:27:bb:ee:ec:e8:f2:c9:f3:48:ca:87:
         c2:06:46:0f:a5:1e:d5:7b:4e:c3:68:d6:2d:7e:e5:9f:9b:f3:
         77:2b:92:00:b4:80:d5:04:fc:6c:02:cc:4e:69:22:d1:03:aa:
         37:92:9b:be:47:eb:60:75:26:43:2a:75:6f:3f:3f:bb:bb:e2:
         1b:de:15:7e:0a:a6:40:c6:28:ff:63:c0:01:9c:a4:eb:4e:76:
         d3:34:97:34:c3:c6:2b:da:48:84:7a:cb:bd:3e:85:4b:6b:6b:
         9f:f8:64:b9:a1:8c:c6:e9:8d:d3:13:6e:da:b9:c5:d3:76:45:
         92:b4:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----