Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File:                     Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier:          /6nBNMCV0f08n+jmVoZdvnHHk8yKf+ZMg/TpPGr2UAc=
Subject key identifier:   A9:93:50:FB:09:C3:6C:46:06:80:71:25:1D:EE:2D:CE:44:18:92:A5
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer:       /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial:       01962E617A79889F81B0FE8F7D6C8F16152F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: rxC91l/K9DHBiAYYqKPPn8VsN5ydVUP/kl3gWATAnmY=)
                          2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
                          3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
                          4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7a:79:88:9f:81:b0:fe:8f:7d:6c:8f:16:15:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=a99350fb09c36c46068071251dee2dce441892a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:95:9f:3a:52:5c:ab:94:4b:4b:8e:0f:44:
                    7b:9d:ef:58:fe:b2:1f:8a:b2:80:3d:e5:51:2a:9c:
                    86:df:24:cb:9a:ab:3c:0c:bc:c5:df:86:96:c1:28:
                    07:18:98:a6:f0:23:52:64:10:3b:e7:7e:76:d5:01:
                    dd:11:da:b3:59:81:28:e4:ef:02:06:08:fd:99:7c:
                    44:56:fb:65:8c:f8:aa:8a:dc:ec:16:c3:bf:de:a3:
                    62:e0:a2:5c:15:ee:c6:2c:b8:ac:6a:a6:90:d1:47:
                    29:d2:89:86:28:a2:bf:5e:fd:02:49:04:7d:2d:83:
                    ea:25:37:db:1c:2f:52:0f:ab:db:4f:0a:39:8d:e9:
                    f0:84:4c:73:76:96:fc:b0:23:18:d5:cf:12:70:f0:
                    ef:e7:00:ad:3b:c2:58:77:11:96:49:ea:49:ce:be:
                    85:bc:0a:b2:a5:53:8c:7f:35:5c:69:b3:a3:fe:50:
                    5a:43:d6:12:c1:d5:19:27:3b:f2:a3:62:f2:f4:58:
                    ce:85:00:23:f2:97:89:bd:94:d0:68:e0:51:9d:4e:
                    80:5c:a7:d1:89:40:1f:3c:cd:01:15:a5:38:cf:55:
                    6e:cf:12:6e:05:1e:d2:6e:ee:b4:3e:6b:b6:15:e8:
                    a1:bd:5f:75:e1:af:37:1e:38:74:3b:8c:a3:34:e8:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:50:FB:09:C3:6C:46:06:80:71:25:1D:EE:2D:CE:44:18:92:A5
            X509v3 Authority Key Identifier:
                keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c7:22:36:3a:06:f2:b4:20:e4:9d:49:9e:42:97:6c:b2:ce:
         f5:54:ba:dc:dd:99:dd:0f:aa:2d:61:71:0e:b3:a1:ad:0b:61:
         2e:0c:f3:8e:fb:03:d9:33:3a:63:90:53:8f:c1:47:ba:16:5d:
         11:28:4d:78:63:f7:12:cd:0d:cd:47:6c:73:a0:33:28:ba:63:
         5d:97:4b:48:7f:76:e7:89:64:4d:c1:1f:85:84:49:5e:2c:ae:
         ea:16:cd:3d:45:97:12:5b:50:04:70:a0:48:59:b4:e0:9d:6d:
         50:2b:ed:7f:3a:a8:c5:c2:77:0e:88:c3:a8:5c:83:f7:3d:f9:
         cb:ef:6e:fe:19:09:e0:64:17:78:46:ca:f1:ff:bb:c1:2b:00:
         b3:39:10:99:1a:a7:8f:42:91:25:b8:99:b0:1b:73:62:56:63:
         80:7a:88:37:f1:10:f6:40:ad:b8:b0:bb:b1:66:03:ad:a7:73:
         ec:0e:2e:fe:2a:0c:9e:ae:05:73:97:63:ed:7d:a8:5b:d0:23:
         f8:76:76:19:5d:e5:ee:54:ae:2f:53:18:1f:6a:9c:fb:69:32:
         a7:9e:f5:f8:9c:ec:8d:3e:c1:6a:92:f0:c3:70:0a:96:e0:49:
         10:e8:e5:cb:28:d1:1b:45:2d:40:71:63:b7:80:5d:84:ac:20:
         ac:dd:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----