Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File:                     uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier:          rypB9aDgW8wKeAWPevSLnw7gMAZVA0v0ou3HJWOTUfw=
Subject key identifier:   D8:AB:63:9A:35:C0:FD:E1:C2:A1:79:55:8A:45:4A:2D:7E:F6:B0:06
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer:       /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial:       01962F74564E467A952251C6806FD0E49201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number:          0D46
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: 1patb8mkVp0mJa0slQ7qQ-5WVBk.roa (hash: DsUMv9vQW0wvlxaSYrdoCYfaCKpNMHSpozAHeICWqOw=)
                          2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: Lx9fByhjJzcUzk+ecUz/T2bfXqeP7UZxWglGu12/9wU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:4e:46:7a:95:22:51:c6:80:6f:d0:e4:92:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=d8ab639a35c0fde1c2a179558a454a2d7ef6b006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:66:3e:24:d9:49:b9:34:d2:78:ae:16:f1:
                    91:c8:ac:b6:ca:66:77:d0:c7:90:41:38:ef:bf:24:
                    7e:e3:a0:d1:de:03:56:07:c5:17:e3:28:e3:b9:ba:
                    9d:25:25:ca:b0:8d:89:db:10:0d:64:f1:a1:08:6f:
                    28:7b:69:59:50:22:0e:e6:95:91:52:09:08:9f:5b:
                    52:fd:cc:3d:60:f6:1d:58:8e:5a:d2:14:93:2c:92:
                    40:c6:b9:50:d2:80:cf:82:a8:1d:0f:92:51:f9:95:
                    32:ed:62:6e:da:92:73:58:10:99:b5:6c:6f:34:03:
                    c7:b1:1a:18:af:84:90:c9:5c:cc:35:5d:a5:e0:f0:
                    5c:e8:c7:f9:9f:2a:d4:67:3a:86:28:ea:a3:8f:f4:
                    c1:12:35:29:aa:65:df:63:5c:8b:67:08:2a:37:52:
                    33:f2:e9:f6:7a:87:fd:48:0d:99:88:dc:8d:8a:93:
                    5b:87:fb:25:02:a8:29:0d:8a:7e:26:7f:bc:8c:da:
                    03:ed:8a:df:0b:d5:4a:7d:44:9a:9e:e2:69:47:66:
                    e3:4b:62:45:43:f1:de:a6:12:e5:83:95:4b:a5:9e:
                    7b:98:6b:4c:84:ba:88:d9:84:80:a3:df:af:a4:35:
                    13:97:f5:2c:8b:17:6f:09:38:a8:1e:21:e1:36:21:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:63:9A:35:C0:FD:E1:C2:A1:79:55:8A:45:4A:2D:7E:F6:B0:06
            X509v3 Authority Key Identifier:
                keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:82:bf:2f:e0:18:6c:a3:ae:1a:27:43:e5:f8:78:ea:c3:8b:
         e2:15:41:90:61:1f:f9:f0:fa:16:89:11:18:2b:aa:87:3a:2c:
         dd:ba:13:4b:1c:e3:9d:eb:44:5b:0d:d9:ee:ba:ee:9e:d8:0d:
         29:e3:2d:d1:25:94:03:ec:ff:b9:0e:f4:6f:6f:ad:1b:4f:63:
         3a:c7:0d:b3:b2:7d:38:d6:8c:c8:57:2d:cc:66:61:80:c6:78:
         3b:6f:2b:ed:33:f9:c5:77:32:ed:aa:7a:2c:cb:c8:5b:ff:6e:
         5b:e8:86:81:8a:8e:8e:37:ed:e4:72:4b:85:85:00:e5:f1:26:
         41:28:66:6f:63:cc:2b:4a:b4:65:42:4b:c3:38:51:3e:ac:00:
         0f:af:ca:f7:88:5e:0f:70:fc:0a:55:38:55:fb:1d:29:00:b0:
         f5:1b:40:b2:9e:7b:de:b7:1c:e8:74:15:44:c1:8a:d1:3e:57:
         6a:2d:fd:34:00:ec:ab:a6:ed:e4:00:fb:d1:1c:6c:7b:36:ef:
         ee:a7:05:e6:91:08:0d:c1:46:27:39:77:0e:66:52:d0:12:5e:
         75:93:b8:6b:a2:4d:ee:73:af:dc:d2:ad:a1:94:fa:3a:58:2f:
         2f:ab:28:11:50:a3:d1:ff:bb:c0:ed:2a:c2:51:6f:7c:d3:f5:
         94:80:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----