Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File:                     bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier:          VkCUDES8cYcbIgkKF60QL8lI511sssM8xJkFmgLyrdg=
Subject key identifier:   40:AA:BE:48:22:91:C3:D7:E3:8B:43:78:EC:CF:1C:B9:64:D3:24:FF
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer:       /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial:       01962ECF593A094DDDCEB806062B33DED735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number:          0D84
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=)
                          2: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=)
                          3: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=)
                          4: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=)
                          5: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: 6ZOBUJf/hkRYX/lRPtQg7tmMFLbecSYVcOtAOKA1vek=)
                          6: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=)
                          7: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:59:3a:09:4d:dd:ce:b8:06:06:2b:33:de:d7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=40aabe482291c3d7e38b4378eccf1cb964d324ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:db:9f:76:ff:5e:fe:ba:ab:70:4d:8d:ea:
                    07:cd:6e:11:bc:89:4f:4d:27:09:64:75:43:97:5c:
                    af:7a:92:d7:94:b8:ab:7c:53:03:1e:47:96:e7:4a:
                    96:d9:da:23:e3:06:e1:39:c6:f9:04:15:d6:ac:28:
                    a2:70:f2:5b:c4:e1:e7:02:f1:f1:78:e9:10:68:a3:
                    ab:88:c0:80:f2:ab:b1:be:f7:3b:2f:40:1e:bd:f2:
                    b3:79:0c:00:d1:48:91:42:f0:41:4e:50:8e:28:9d:
                    e8:ce:cd:7c:21:de:58:81:b6:4d:c4:ba:67:e3:b4:
                    d7:0e:df:ad:45:87:b5:46:da:6b:b3:43:a0:a9:2f:
                    fe:d9:02:7e:da:ac:f3:b4:7e:52:83:d9:18:38:07:
                    4e:63:a2:29:5f:64:8d:83:33:5a:8a:13:6d:93:6c:
                    70:de:d9:f9:85:3d:f3:c5:80:e0:15:61:2d:23:20:
                    6b:f6:2b:e6:45:ad:37:7b:23:3f:3e:45:ea:fa:9b:
                    0b:69:a9:c5:1c:c5:bf:ca:8f:12:bb:05:e3:14:e4:
                    5f:3f:25:0a:1b:0a:37:6b:ff:d3:03:47:1f:bb:3b:
                    43:ee:0d:d4:1f:ac:88:8f:3b:24:68:0d:79:6b:cd:
                    b8:c5:da:57:2d:60:0b:61:4f:1f:15:ae:eb:f5:ba:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:BE:48:22:91:C3:D7:E3:8B:43:78:EC:CF:1C:B9:64:D3:24:FF
            X509v3 Authority Key Identifier:
                keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:bb:54:d9:86:8a:24:7f:99:ea:f5:2e:ef:5b:b2:72:87:
         2d:fc:94:11:60:5d:28:a5:09:6f:14:36:93:65:34:5a:e1:dc:
         71:97:b8:36:df:61:81:b7:e8:14:b8:77:61:96:23:fc:d8:73:
         a3:9b:c2:89:25:47:ff:b7:76:bf:b1:5f:1d:e1:30:a8:c2:56:
         98:8a:59:4a:5f:43:7e:7c:a1:9f:28:b6:8a:f3:1b:89:90:11:
         8e:17:00:c2:2f:49:2b:b2:df:42:98:b6:de:d4:7c:80:d3:14:
         b3:c0:9f:3e:97:b9:be:83:ec:bd:55:60:90:8f:0c:fd:69:ee:
         60:40:5b:11:9f:72:8a:ea:c8:a9:c0:bd:78:fc:56:c4:cf:3d:
         b7:61:05:5a:83:dd:c2:0b:49:89:a0:1f:1b:3d:c8:f5:4b:20:
         65:f3:19:c6:71:e3:83:26:50:8e:be:3c:6d:c7:aa:aa:41:62:
         cd:38:1a:60:27:a3:0c:b2:36:de:9b:d9:2d:1a:ee:0a:d9:20:
         d3:85:f6:68:94:90:41:fd:c2:f0:d3:d2:18:d7:f5:20:5a:f9:
         e8:eb:34:84:9a:64:9b:27:96:58:1e:9d:51:2f:37:54:de:55:
         98:48:fa:60:c8:a5:3d:34:5d:59:e8:cc:5d:0b:07:79:eb:ac:
         95:b1:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----