Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          Y9SrWLy7ga2+zPy7AGDN6eNoZi0sntu7PqQpqa9WdEA=
Subject key identifier:   0A:A1:43:B6:D5:20:46:BB:5E:F2:FF:3A:C3:18:63:39:5A:8A:21:17
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       01962E98ABF5A506C2CEB2D33126D1944C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: 0Ic0y5l8CCrSsf+mx2vvMFNdRCtN9eAw4CZXjVZt7AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ab:f5:a5:06:c2:ce:b2:d3:31:26:d1:94:4c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=0aa143b6d52046bb5ef2ff3ac31863395a8a2117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:cd:ca:0b:97:a5:5b:0c:e5:aa:2a:3c:fc:
                    23:94:a6:e5:ce:97:a0:a8:1a:ab:ef:fe:48:6d:20:
                    12:a4:f4:aa:96:f7:61:1c:61:f8:40:99:d5:4b:a8:
                    04:c0:70:46:2a:1d:50:3c:10:7c:04:d1:b6:99:7b:
                    3d:2b:7f:49:62:59:74:ce:f2:68:5e:ac:46:3a:a8:
                    db:3e:98:59:0b:06:a1:bf:5f:7c:6a:6e:d8:5c:c7:
                    82:15:5a:54:f0:36:72:98:09:f7:46:4b:fc:49:93:
                    e8:54:01:c0:de:8e:50:90:24:89:0d:0c:c2:c6:39:
                    b5:84:4f:1c:90:da:d9:0f:1d:41:da:24:38:c4:4f:
                    8e:22:0c:3a:b4:00:6f:88:ab:f9:74:52:95:a6:a8:
                    b0:bf:73:b9:a8:8d:0a:35:0c:90:1d:78:1d:f8:dc:
                    dd:34:2d:7f:e9:fa:75:58:6c:d9:9b:05:9b:07:d9:
                    92:90:64:8c:33:12:87:96:0b:84:cc:88:10:e4:36:
                    d1:17:4c:ed:62:03:93:ab:a4:f2:08:3e:15:65:3a:
                    c3:89:de:05:7e:c9:92:a9:59:56:81:db:f1:97:a1:
                    45:64:a8:45:1e:58:08:af:51:41:52:2d:26:74:60:
                    e0:72:58:3c:43:46:65:99:a0:af:7a:75:03:6a:05:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A1:43:B6:D5:20:46:BB:5E:F2:FF:3A:C3:18:63:39:5A:8A:21:17
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5e:fc:a3:b7:9b:6a:9b:f9:aa:7c:8b:0a:3a:ba:f8:20:0f:
         83:a7:a1:c5:ad:6f:ef:d5:12:3b:7d:8b:b3:0b:45:e0:aa:af:
         fe:7f:73:13:89:5c:ce:88:11:50:cd:ac:43:c6:74:df:79:f3:
         35:de:c0:c6:a8:d4:6b:56:22:8c:72:73:e4:1d:d2:12:ed:37:
         51:82:f6:09:88:73:ac:40:f4:0f:7c:51:9d:37:f1:bd:1c:78:
         bd:53:67:73:08:ec:fc:e3:de:a3:2e:df:d4:96:0e:5f:91:60:
         4a:59:75:f4:3f:76:f4:7e:da:7c:23:54:72:83:ee:06:09:c9:
         d8:a8:76:76:c1:8e:8c:6d:32:df:3d:1c:28:7a:36:ea:a8:2a:
         3b:a1:9b:48:ab:fd:ae:8c:1d:fa:be:9f:fc:cb:6a:d0:1a:f2:
         23:9a:c8:e8:1b:0b:29:21:85:7d:81:2f:a4:6e:76:1b:c5:ed:
         2f:0d:04:85:4b:c4:00:26:fc:cd:96:c7:f8:06:a3:72:5c:e4:
         2c:c2:cc:24:54:64:46:51:c8:d8:18:d0:cf:22:4c:9c:f4:81:
         1f:09:81:45:7a:a1:8b:66:60:f2:f5:cd:9c:57:a1:c0:44:de:
         1a:3b:66:2b:b6:9e:3c:dc:5b:40:04:20:e8:45:52:83:df:21:
         e2:92:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----