Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File:                     uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier:          GxRZ2QeQMmsMs+GZjznIglCWVWLhIGoo1VR5KkH4p3k=
Subject key identifier:   A3:11:99:54:2E:4A:D7:B2:D7:64:8D:FA:E8:08:F3:78:F4:58:B3:78
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer:       /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial:       01962F3DF39D183D3A3C22F4830619569C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number:          01B5
Signing time:             Sun 13 Apr 2025 13:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:51 +0000
Files and hashes:         1: 0WuzB8OkscQpoVJnc-eqQEbTX1w.roa (hash: I1lgjHwWSYgBGe4PnrseSuUsE4vKM3BvC9LtoTLLwzQ=)
                          2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: Jmciqp453lHDlmxbKvRWdDlbPCVyA9EQI3ZVdnN10Ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f3:9d:18:3d:3a:3c:22:f4:83:06:19:56:9c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
        Validity
            Not Before: Apr 13 13:01:51 2025 GMT
            Not After : Apr 14 13:01:51 2025 GMT
        Subject: CN=a31199542e4ad7b2d7648dfae808f378f458b378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:06:e5:ac:7c:dd:e5:cd:6a:8a:c5:98:f2:
                    39:0d:35:b9:8f:2d:8f:d4:29:4d:5e:f2:e2:ef:03:
                    e7:d7:3b:cf:27:00:b2:24:35:93:8c:30:ca:3d:61:
                    0b:e4:4e:3c:6c:0f:5e:e6:2c:a0:b3:69:0b:b2:86:
                    d5:76:ce:c4:43:ad:e7:53:d8:c8:99:4a:d9:21:be:
                    8b:f7:60:69:b8:07:44:2d:aa:07:9c:5f:48:a1:0e:
                    d5:98:59:88:96:3b:ff:ab:81:fa:13:e6:ac:0b:cf:
                    88:d6:3a:0b:4d:32:8d:37:8b:d9:8c:4d:e6:8b:89:
                    5f:60:75:aa:fd:20:36:44:a5:11:fd:e8:19:08:dd:
                    53:4b:8b:b8:a3:5a:65:c4:fc:8e:0a:1c:76:30:4e:
                    9a:79:b7:9a:fc:42:21:eb:97:19:3c:43:a9:76:6d:
                    02:6f:99:5c:80:d3:fc:77:51:58:52:e4:8a:dc:d2:
                    7a:f8:d2:f0:51:31:61:5d:0e:5b:f0:64:85:54:4b:
                    1b:f5:57:a3:47:fa:66:77:c3:3e:de:a5:fd:32:e7:
                    b7:62:de:f7:0a:39:35:4e:19:4b:e0:14:f1:1b:a8:
                    b0:c4:f2:de:dd:a4:9f:f9:31:e4:26:28:b0:47:77:
                    65:4b:dc:b5:fc:33:e9:8a:8e:67:dd:12:37:0e:fa:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:11:99:54:2E:4A:D7:B2:D7:64:8D:FA:E8:08:F3:78:F4:58:B3:78
            X509v3 Authority Key Identifier:
                keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:aa:1f:fb:2e:21:d0:4d:79:19:2c:36:6a:65:7b:93:31:
         24:d5:bc:1c:48:fb:51:b9:b2:d4:49:55:3e:19:ab:9e:69:0c:
         be:71:9c:ab:15:7b:a0:88:90:6a:bd:3b:00:40:12:29:e4:88:
         ed:48:a9:92:bb:bf:3e:43:cc:f5:48:29:12:72:b7:51:de:65:
         16:6e:b7:3b:3b:23:57:4e:f9:c8:09:8e:ab:5a:b6:83:80:75:
         9d:16:3e:16:3e:ea:99:05:c0:93:34:3f:b8:4d:fa:07:43:02:
         47:9e:db:84:57:d9:57:45:b9:70:7f:fb:b8:6f:cb:8a:99:79:
         57:61:d8:66:85:ff:2b:cc:46:79:06:23:aa:a5:03:f0:0d:b9:
         ee:00:46:2c:11:73:53:89:03:fd:a1:73:c6:a2:97:c0:36:49:
         7d:69:5e:9e:43:59:31:af:0d:53:fe:6f:15:15:13:80:30:67:
         4f:f5:a2:e8:f4:8a:d4:a8:41:0e:78:9a:e6:74:3b:52:c5:ed:
         a2:87:07:ba:2a:48:70:f6:48:58:ff:d0:f8:7f:f1:ae:b1:29:
         de:f5:0b:dc:a8:68:8d:9d:f3:f6:51:bd:85:22:2a:fa:7a:cb:
         32:8b:f2:1d:49:36:46:46:29:f5:69:15:72:53:1a:d6:2f:4c:
         a6:b4:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----