Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File:                     v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier:          7P4KRWZcxfsOFYAgUi+qB2mXk1GSzzb0vOtzzwDceHc=
Subject key identifier:   01:AC:D0:1F:D8:77:55:CD:66:2D:FC:8B:68:EE:74:5C:46:B6:07:C3
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer:       /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial:       01962DF4106CD8BBF9AA2E703ABD20CBEDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
                          2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: a9qKd5myxBl5fLSGp3QLpO9kMLvKHDVeVbO983+mWn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:6c:d8:bb:f9:aa:2e:70:3a:bd:20:cb:ed:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=01acd01fd87755cd662dfc8b68ee745c46b607c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:93:f5:03:fa:d6:d3:18:03:34:2e:94:14:
                    ee:13:1b:69:32:83:db:59:9e:ac:0a:d7:98:31:ba:
                    28:94:ef:bb:ad:da:a2:d3:1d:40:64:52:3c:bd:11:
                    d3:66:94:68:aa:ff:32:a2:38:f6:19:b8:de:a8:cb:
                    9a:23:d0:79:63:46:f4:4f:21:9a:e3:90:bd:5c:a8:
                    48:84:d0:35:c3:d0:39:c9:96:66:6e:a1:90:09:ba:
                    6b:3c:f9:12:80:a0:28:3b:bd:a3:9b:a6:cf:2c:f0:
                    ae:17:99:6c:83:bc:71:b6:b7:b4:7a:71:7a:d0:a2:
                    a6:d3:8c:5f:9e:4e:fb:33:34:f3:70:d5:a6:71:5c:
                    d4:2f:7a:20:da:6c:48:2a:1c:9c:b5:ef:18:b2:89:
                    c0:a5:36:17:d0:c3:45:3c:64:0a:67:f8:63:8e:c3:
                    41:aa:58:10:be:c4:f1:80:ed:25:95:01:9a:26:28:
                    80:25:18:67:eb:3f:09:39:f6:df:ab:2a:63:2b:aa:
                    a5:5f:e3:e1:a9:66:ee:fe:30:f6:51:20:52:29:7b:
                    00:32:50:17:85:4d:ac:4b:f4:63:1b:17:4e:44:aa:
                    3e:25:f4:1b:b4:97:88:70:57:1a:af:87:3f:35:57:
                    03:9c:87:8a:45:1d:50:6b:4b:4a:83:8e:3b:54:cc:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:D0:1F:D8:77:55:CD:66:2D:FC:8B:68:EE:74:5C:46:B6:07:C3
            X509v3 Authority Key Identifier:
                keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:63:7e:75:11:2c:33:6f:3a:36:36:d4:99:1a:59:f0:b6:0b:
         ee:98:c5:8b:b3:34:61:72:25:7c:3e:cb:da:a9:54:68:2f:19:
         ef:ad:55:f7:e6:fc:9d:ce:73:16:24:45:09:44:2c:31:21:1d:
         17:93:e7:fb:cc:98:a0:65:48:4e:9d:01:28:e8:a6:5f:e0:9a:
         b3:e3:7a:ee:d6:b9:1d:d3:8f:00:66:fe:31:08:f9:e1:c7:51:
         1d:f1:99:b0:9a:0a:0c:18:46:d1:a5:ad:a7:33:4d:f2:b2:f0:
         fc:5b:f2:58:39:59:6e:c0:4a:3f:90:a6:02:50:07:1a:e8:96:
         58:23:b5:21:bf:a9:13:3c:f0:14:dc:c4:a9:78:82:e9:97:f8:
         aa:d2:03:03:29:57:3d:a9:b2:d0:52:70:fb:53:59:93:9a:13:
         2a:90:0e:e0:b1:fc:20:99:5a:7e:b1:dd:9b:a4:e6:99:4c:00:
         be:fc:84:1b:50:dc:3b:be:7b:8d:62:b5:81:a8:05:cb:ea:88:
         eb:29:c0:b1:94:f6:53:ab:34:23:68:ef:27:47:af:1e:b9:8a:
         90:10:b3:a7:35:59:c1:7f:04:b4:9f:d6:ba:96:65:a2:e9:16:
         15:8f:c8:b5:a7:f5:da:b0:a3:b7:cf:17:bc:dd:f3:f2:63:a0:
         f2:7c:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----