Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File:                     _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier:          Onj3N7/JOev7uctjrnFx55bOGZSINYudTiVNjKBqEMI=
Subject key identifier:   AF:F3:AB:60:86:6F:E3:21:F6:13:05:C3:9B:D1:CB:B8:B8:41:17:F8
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer:       /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial:       01962E2B12A2F6B87AFEEB49C7D6A7355914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number:          07B6
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: k7e4v24L5dC0nuaLhtJsLvSDnpZFbcNGJnhOYKx1tqk=)
                          2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:a2:f6:b8:7a:fe:eb:49:c7:d6:a7:35:59:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=aff3ab60866fe321f61305c39bd1cbb8b84117f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:dc:18:3b:31:2e:1b:d2:2f:c8:75:e6:37:
                    3f:13:78:69:ee:65:98:be:e6:b1:74:45:4a:4c:6d:
                    fc:52:7a:6b:73:35:57:1e:f7:0d:a8:5b:03:76:c6:
                    cc:b0:44:14:24:6c:dd:39:20:1d:5f:28:ba:48:f7:
                    84:b9:46:80:53:a8:79:fa:76:67:65:66:e3:cf:e2:
                    f4:53:ad:78:93:fa:20:70:92:05:c6:1a:4c:3b:71:
                    6c:2d:25:33:91:d4:04:15:94:a9:28:4f:8e:c0:ce:
                    86:c5:2c:64:3f:a8:7f:11:f4:df:02:cf:e9:e7:3c:
                    7c:a3:9a:ba:63:2a:e6:d6:d5:84:49:4a:a3:ce:9b:
                    d0:76:77:a6:8d:bc:f7:1d:17:6e:ca:83:2c:7a:37:
                    ae:fa:1b:37:18:58:97:14:22:8f:c2:14:21:58:86:
                    dd:b2:3b:91:21:22:93:02:c8:b7:04:cd:41:b8:78:
                    c9:a0:90:81:ba:28:12:1f:c0:9e:27:af:2d:fa:64:
                    26:53:b0:8a:ef:89:1e:0b:55:88:98:6b:aa:62:4f:
                    f9:5c:c9:95:ef:3f:85:5d:30:e7:9f:fa:01:2a:5e:
                    6b:42:4c:b0:f4:89:0d:51:3a:34:cf:bd:8f:fc:a4:
                    89:6b:5c:b2:f9:d7:de:e3:35:29:d0:72:d2:8a:6e:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F3:AB:60:86:6F:E3:21:F6:13:05:C3:9B:D1:CB:B8:B8:41:17:F8
            X509v3 Authority Key Identifier:
                keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:1f:e4:17:b3:86:bc:e9:fd:be:89:a1:69:a2:78:8c:65:
         15:cc:6a:d8:4f:9b:14:16:c1:77:d4:91:3d:a1:9c:1a:f4:f1:
         71:22:49:c1:2e:22:da:6a:dc:86:e2:06:21:8e:e1:ab:aa:19:
         a7:ea:0c:d8:68:53:05:43:68:83:bb:6b:42:e2:25:32:26:ea:
         3f:17:09:e8:89:cc:9c:90:49:46:64:07:11:2d:8d:25:10:f7:
         e1:86:6d:51:00:bf:b1:06:d0:8e:69:db:04:8d:f6:72:6b:dd:
         8e:fe:d2:bb:26:85:ed:61:bd:17:1c:08:cd:d6:0b:5c:45:da:
         b0:17:18:4e:8a:2f:e1:8b:74:0b:4a:ee:35:29:5d:14:5c:df:
         80:ee:d5:0a:b7:a7:1b:f4:d6:fc:4a:e8:9e:c4:3f:37:b4:1b:
         d4:d9:60:a7:c0:49:8f:e0:59:e4:97:9b:eb:fc:47:f0:14:07:
         82:02:f3:52:c6:a9:b6:fa:78:5d:fe:51:a2:27:ed:10:8d:3f:
         7c:68:4b:f6:a9:0c:0f:17:c8:af:78:3f:0c:cb:1b:84:55:f7:
         c6:7a:17:cc:83:78:53:66:cb:e6:1d:6a:ad:13:8d:4b:6a:76:
         10:6b:31:34:92:e8:d6:5a:1a:f3:eb:03:3a:f4:99:95:83:39:
         64:35:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----