Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier:          4x8KOfRoGr7CdoR0O1DwTsBI003TTdBMfY6Lch2M+ao=
Subject key identifier:   66:4E:CF:1C:CB:39:E5:81:A9:21:8A:9B:21:C7:94:39:A2:DD:FE:79
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       0195E122716192C6EE855014517E4E06A40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number:          135E
Signing time:             Sat 29 Mar 2025 09:01:25 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:25 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:25 +0000
Files and hashes:         1: DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa (hash: yUyTh7meErNXbMRoAKGZB1yTrhp9xLOBqyMiqtl/XxA=)
                          2: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: sAyfvOgjsPX7utX+o9uXKo+HMQzxVtpU+8SQpdHsWbE=)
                          3: uBSOOeaOOAPA_AKPY15x-quda9A.roa (hash: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:71:61:92:c6:ee:85:50:14:51:7e:4e:06:a4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Mar 29 09:01:25 2025 GMT
            Not After : Mar 30 09:01:25 2025 GMT
        Subject: CN=664ecf1ccb39e581a9218a9b21c79439a2ddfe79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:2f:50:a6:e8:a8:c5:d4:de:be:7e:1a:10:
                    0c:93:b2:58:e3:cf:8b:35:3d:20:c8:b9:6c:44:7a:
                    27:2b:c4:e5:2e:34:35:45:eb:28:a4:b9:72:fe:31:
                    82:44:82:7a:d6:b4:fe:01:d6:7e:a6:9d:5a:f4:f5:
                    ad:bf:30:e6:11:6b:4a:e2:68:5b:5a:e1:2e:86:53:
                    3d:48:ed:8e:83:81:8c:70:a2:7f:f7:1e:27:97:86:
                    32:4d:3d:40:6a:ea:a1:a8:dc:22:03:90:8f:b4:5f:
                    14:9a:6e:ad:2c:11:4f:6f:e0:0d:0a:76:7b:32:0b:
                    8c:c1:22:2a:5e:a9:19:80:f0:59:19:39:ae:97:71:
                    b2:05:ed:b8:82:81:f2:2b:7d:4a:f3:e7:50:54:e6:
                    d2:ba:ef:23:43:31:24:05:07:ba:c0:07:19:c7:6e:
                    03:f2:91:cd:c7:34:f2:6a:5d:b6:3f:02:ae:48:02:
                    8b:07:23:38:0d:b5:0f:d4:9f:99:94:18:99:ac:dd:
                    93:8c:45:ed:0f:7d:ff:cf:04:65:67:cd:82:72:a4:
                    e5:44:86:5f:56:44:fc:6b:70:71:4f:25:d2:e8:69:
                    0a:7e:c1:b5:9b:b9:6e:30:11:d3:ab:5d:1d:b9:16:
                    24:d0:19:00:8e:b2:80:83:b9:18:65:06:7f:14:20:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4E:CF:1C:CB:39:E5:81:A9:21:8A:9B:21:C7:94:39:A2:DD:FE:79
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:6f:f2:d0:41:b7:c1:a5:c3:f1:37:08:23:ee:74:05:58:
         99:e6:7e:fe:2f:f6:15:49:18:af:2c:8e:76:b0:41:cb:6d:0f:
         3d:d3:0a:c2:cd:e9:88:7a:c2:13:70:f6:ba:27:b3:f0:93:89:
         b4:75:d7:42:8b:87:38:d7:08:04:68:a6:e5:7b:76:b5:ec:67:
         51:f3:af:ff:80:e5:b2:ec:b1:51:7c:42:e1:1d:b1:0f:9b:6c:
         5f:c9:db:3c:fe:35:66:14:7d:01:c2:cc:24:f6:52:cb:a5:24:
         1c:d7:b6:bb:04:48:01:ca:80:31:2f:16:40:3e:c8:b5:c0:a6:
         6f:85:6e:8f:8a:85:5d:fe:4e:1b:55:7e:9d:c8:be:b5:2f:5c:
         62:f3:75:20:f7:29:00:37:9a:c6:3f:0e:97:59:e1:8c:a3:59:
         1c:c7:2d:25:11:3a:8f:a2:0b:52:20:7b:9c:9b:71:e3:e1:b5:
         e5:6b:43:c0:88:8b:a9:e3:86:c8:4b:37:73:3d:05:e5:04:25:
         72:08:05:de:8b:78:b9:fb:89:71:f5:e8:56:f6:8b:b7:7a:c2:
         cc:5c:ca:c0:d7:c3:7a:9b:88:6d:58:10:1e:ea:a5:08:5a:9d:
         45:fa:1d:d0:8e:06:ab:45:9e:5b:83:18:33:d2:d9:da:61:fe:
         10:46:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----