Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File:                     bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier:          2sR8tIHA38/gH/4X3NhpPCiI/hQ3nglGvl0ww2jyoVY=
Subject key identifier:   C2:66:FC:F3:ED:BC:17:7D:C7:61:3E:10:93:CA:8A:21:99:F1:85:71
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer:       /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial:       01962F3D5D7986F0C90C0B5E6EFE3BBD865C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number:          149C
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: JZIFGGJEPe9tGsn1JCyqtbtkOX6igb+3RC3q0Pl1R8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5d:79:86:f0:c9:0c:0b:5e:6e:fe:3b:bd:86:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=c266fcf3edbc177dc7613e1093ca8a2199f18571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:a8:4f:f3:f8:00:f3:44:92:6c:d1:0c:45:
                    98:b2:30:d5:8a:16:ac:f1:be:49:21:81:d2:3a:76:
                    a9:36:bd:b5:33:6f:83:82:d1:2e:d1:d9:c6:c6:af:
                    0d:90:18:58:b8:91:e4:aa:63:99:d3:c3:f3:d3:f6:
                    9e:b5:1a:ff:64:2b:98:2a:21:67:f4:3e:90:1b:a6:
                    46:e7:44:42:47:af:9c:56:27:d4:56:0a:06:f7:9f:
                    99:64:24:f0:f2:e6:b0:4f:8c:9d:62:66:90:53:ad:
                    e5:61:d5:0d:a6:7c:71:66:19:e1:6c:c4:9c:43:d9:
                    53:df:35:0f:41:4d:f8:62:72:1f:65:1a:57:da:48:
                    12:b0:13:71:69:0c:83:a7:f7:e2:b9:8d:11:6a:4c:
                    6d:53:fe:3c:42:ed:f8:60:0d:26:08:dc:a1:60:19:
                    8b:c7:e7:d9:0c:33:aa:bc:d0:f1:de:4f:a1:6d:bb:
                    76:4c:b2:b0:ad:e4:f6:7c:ac:38:26:cd:7a:0f:9d:
                    bc:74:bd:87:b6:07:a6:69:29:67:c7:d3:95:f3:be:
                    ad:cd:7d:e3:a9:73:89:e3:14:cb:03:0c:2f:9d:bb:
                    9a:07:37:a1:71:88:a1:c1:6d:2f:49:8f:36:6a:a7:
                    ad:cc:87:d0:c0:f6:04:0f:18:36:10:52:43:f0:16:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:66:FC:F3:ED:BC:17:7D:C7:61:3E:10:93:CA:8A:21:99:F1:85:71
            X509v3 Authority Key Identifier:
                keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:a8:65:d0:37:08:26:e5:e4:8e:1d:10:04:01:38:20:8f:
         93:16:e2:19:0a:bb:86:1e:99:0d:35:0d:0b:9a:53:8a:83:0c:
         57:14:27:47:b7:5c:4e:90:19:2c:42:85:72:a6:53:d5:cd:bd:
         e6:d8:75:97:3d:52:3c:9a:e9:31:6b:25:52:70:9b:ff:7b:74:
         c5:29:c0:8b:7c:29:8f:86:d4:5b:a9:2a:f2:b5:72:ec:22:b3:
         0f:8d:76:bb:c3:7e:76:e5:ed:2b:ac:67:5e:d3:9c:f4:a8:35:
         04:2e:60:e1:ed:3a:a8:ca:99:b8:58:52:c5:87:9a:81:36:f6:
         d4:0c:7a:6a:9a:b8:a5:ce:d0:5a:08:e9:88:43:ff:54:ef:91:
         40:39:fc:77:2b:ae:26:15:87:bf:e6:78:28:fa:35:e4:e5:ba:
         9e:0a:fd:a6:ea:09:84:30:a7:0f:98:e3:1f:75:e5:ea:19:ea:
         8b:a9:6d:4e:e2:f6:0a:4b:74:ce:a1:6b:a8:4b:fa:9c:19:b5:
         3b:a2:ba:50:be:7f:64:a5:28:35:05:6c:a1:04:ac:1f:54:e2:
         f9:ba:93:a1:a9:c2:66:66:d3:93:81:a5:f8:41:1e:32:b9:46:
         54:7f:07:f5:4a:ca:91:2b:e7:18:f7:0a:ea:9d:a3:c5:4d:2d:
         ae:c8:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----