Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File:                     bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier:          ATTau/aXQWvF3EhvkUDtUuf0uoy0WQFwdWsP7pJm9JI=
Subject key identifier:   F9:E2:52:79:B3:02:3F:CF:BB:65:CC:18:BD:1A:30:0E:A2:AC:88:45
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer:       /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial:       01962F3D824FCF1B7718D65A1C3F5A56DB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: mQgmp/E1zUbAWCv/konm3943+X+iAQVrfUSvaCper0A=)
                          2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:4f:cf:1b:77:18:d6:5a:1c:3f:5a:56:db:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=f9e25279b3023fcfbb65cc18bd1a300ea2ac8845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:fa:1d:21:d9:73:45:9b:14:81:f0:e6:c6:
                    22:58:67:5a:39:db:a2:e0:15:da:f9:bf:93:6a:32:
                    e3:d0:76:fe:a2:c8:f9:87:fe:0e:81:5f:6d:40:c5:
                    eb:c1:65:c6:18:62:36:50:fe:87:9d:74:96:9a:fe:
                    78:88:79:c0:e0:39:a9:e2:71:c3:d8:93:28:80:82:
                    3d:df:2b:a4:71:44:f2:8f:6f:3b:41:c1:cb:41:19:
                    33:58:4d:0e:95:13:ba:fb:fc:05:61:5f:28:3c:24:
                    7b:40:60:97:69:64:41:c6:e9:90:1a:e4:ac:c1:65:
                    33:46:b5:7c:11:7b:34:a7:8c:ec:c4:75:70:1b:56:
                    52:58:b5:1a:5d:03:09:79:7f:24:ba:92:b3:4e:e0:
                    75:30:bf:20:44:5c:1c:90:e2:8f:92:e3:4f:65:59:
                    6f:e0:c8:6a:fe:b7:7d:e5:5e:62:7a:fa:a1:20:08:
                    c6:f2:26:1c:f6:41:58:6e:33:6c:14:23:c9:6c:08:
                    f8:ce:d5:c8:c6:c1:4c:2b:90:78:43:b0:b6:9d:9c:
                    18:be:54:24:44:b9:bc:d8:b6:c2:28:d6:dd:02:64:
                    9e:dd:19:a7:80:33:05:7e:e7:0d:b0:df:1f:30:36:
                    16:f8:55:29:5f:97:40:0e:46:f0:2f:36:3d:cb:b4:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:52:79:B3:02:3F:CF:BB:65:CC:18:BD:1A:30:0E:A2:AC:88:45
            X509v3 Authority Key Identifier:
                keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7d:a5:76:35:30:fd:9e:dc:00:25:d8:34:4d:29:12:fe:63:
         1d:89:e0:56:a5:19:df:c1:ae:15:4d:8e:9b:e8:2c:1b:ba:d2:
         67:fe:0f:e4:a4:18:bb:7a:ad:d1:81:cc:75:10:98:e7:d2:f8:
         91:77:17:c1:3a:9b:f1:cc:3c:2e:cd:0c:d3:23:4f:f0:02:91:
         b8:18:e1:fe:1e:72:6f:a1:0b:05:f1:fb:35:eb:47:f2:c7:c2:
         06:c9:41:b5:44:36:2a:5a:af:4e:98:4d:05:7e:9c:9d:e6:54:
         62:7e:14:16:bb:e4:df:8a:dc:4f:6c:f9:e5:95:98:78:ca:af:
         0a:56:a5:51:f9:da:6c:22:c3:9f:50:28:17:b9:4e:a3:70:45:
         67:84:e5:0b:fa:c0:2a:fc:30:a9:31:b5:06:de:34:ff:0f:6b:
         18:b8:57:2d:f1:25:5a:d4:95:4f:4f:df:35:13:08:04:54:5c:
         29:94:f9:ec:f9:2c:37:4f:32:14:9f:b5:00:3d:6e:1b:32:fd:
         7a:31:f2:a3:bd:32:a9:57:d6:c8:ac:99:18:7a:fa:60:89:6f:
         b6:24:e3:8a:d9:52:45:75:bd:42:ca:7b:e2:05:70:71:f0:07:
         69:22:c2:a4:34:7d:ad:72:82:15:2b:cf:cc:e3:72:61:c2:32:
         c8:01:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----