Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          SqVgDzXo6J+88wXbmR+4jO/oAn6kz1CpT27klehsXY4=
Subject key identifier:   89:17:82:C5:C1:9D:F5:86:46:51:46:33:FB:C0:AB:1D:02:BA:5D:62
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       01962F065B00859F60381223ED8B322CC57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0C19
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 3NDpUsqPhJcxz3A4C7fxd4qK490.roa (hash: seRjEjrca1U020SOwQkEAWYH1YXwwlJnTmGlO6JWc44=)
                          2: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
                          3: JY70469X8sbUfsNnk7SUuu0w3Kc.roa (hash: Hfl/rx8Ob8X8Add7OXxmiGI9Zx3Lz3uXO4BW73Yc3+A=)
                          4: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
                          5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: eByeT1sWYO9oJ6u7n8KHRkdL56CygRSRDgWAdRAumG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5b:00:85:9f:60:38:12:23:ed:8b:32:2c:c5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=891782c5c19df58646514633fbc0ab1d02ba5d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:5b:32:0f:0f:48:e4:9e:51:96:ca:e2:d5:
                    b4:b2:aa:10:bb:89:d7:5b:f8:93:6f:4f:25:d4:18:
                    69:55:1c:a2:65:24:5b:42:3c:55:b3:60:e4:d0:48:
                    27:87:de:4e:3a:6c:a2:0a:1e:89:de:4c:35:73:fb:
                    2e:7d:03:eb:ec:65:bc:24:a1:8d:4b:2e:51:6a:17:
                    67:1b:b7:a4:f4:7b:af:b7:40:72:ce:be:93:ac:cb:
                    3f:ce:c8:3d:c8:6f:19:62:a6:a7:8d:fc:0c:28:b1:
                    d8:41:f4:d1:da:73:1f:77:8f:4a:7d:75:43:6e:3a:
                    fc:80:ee:9f:a6:0b:01:d7:b2:e2:b4:3c:04:9d:73:
                    91:e1:96:dd:86:d2:9f:26:95:90:c9:92:10:01:8f:
                    d4:5d:60:e6:b6:7e:a7:c7:f5:96:51:3f:54:36:ac:
                    3f:5d:01:48:52:3c:b4:41:4f:ef:fd:2b:85:7b:e2:
                    c8:76:20:78:38:68:c3:db:a9:b3:ac:82:50:3f:ae:
                    4f:3e:2d:b2:cd:17:db:0f:17:f7:b9:f2:5c:fb:87:
                    74:5f:09:a7:bb:7c:85:dd:34:7d:12:f7:c9:65:cd:
                    56:a3:b7:2b:4a:eb:c5:5f:ac:27:5a:c0:c9:66:ce:
                    e1:d9:f2:46:31:0a:f3:cf:f8:cb:de:13:33:ca:fd:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:82:C5:C1:9D:F5:86:46:51:46:33:FB:C0:AB:1D:02:BA:5D:62
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:53:61:41:4d:d1:c4:ee:f0:c9:50:50:ca:a4:87:1f:5d:24:
         27:07:b7:b6:67:bc:5f:e7:99:fd:5f:32:6f:cf:76:06:67:13:
         af:58:e1:1e:e6:b9:01:e9:c0:51:19:23:c2:9a:22:e3:97:5c:
         b3:a5:6b:2f:48:a7:86:cc:3a:a1:88:3e:ea:92:d2:2b:b6:ec:
         4f:70:a5:db:d8:71:ee:25:94:af:61:22:66:6f:87:fc:7d:4e:
         29:fe:dd:6e:0b:d3:cf:87:19:fb:5b:f2:80:f7:dd:58:57:54:
         b9:83:8a:6d:3a:78:28:48:85:c1:bd:58:46:25:7c:3e:fd:6e:
         1e:c6:6c:c3:48:aa:5b:45:83:be:ce:5c:0d:5a:5b:5e:6f:ba:
         a5:e5:9d:3d:d7:07:f4:e7:56:f7:9c:6c:a8:46:90:cd:b1:ea:
         0a:ba:b9:df:d2:41:8a:0b:a2:49:9a:fc:36:ad:5a:65:b3:37:
         9e:14:93:39:d4:9e:e9:3a:26:d2:04:75:36:e7:c2:28:0f:c6:
         5a:2a:c2:fe:60:3c:e8:20:a3:c9:cf:60:95:96:60:ec:a6:f4:
         4d:92:5b:3c:fd:f1:57:64:36:a2:ee:6a:75:e4:b5:6e:93:5e:
         a9:9d:ce:3b:f9:fb:38:c9:4c:bd:87:d7:8c:90:b3:89:0f:65:
         6a:7c:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----