Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File:                     uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier:          wJeYRTXaUNry87u48/XocOnhEIfrwgA+kjyglUJOUpw=
Subject key identifier:   18:48:4C:D9:DB:3D:1B:0E:F0:D3:7D:74:5D:1A:1A:A9:B1:C4:9E:E8
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer:       /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial:       01962ECFBDF6E05CBB159F2813A181EEACCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number:          0367
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
                          2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: Opz0RmNXJv0xvR9r79dCbeZ4mpXB3+o3K9xncP30WIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bd:f6:e0:5c:bb:15:9f:28:13:a1:81:ee:ac:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=18484cd9db3d1b0ef0d37d745d1a1aa9b1c49ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:c7:30:c6:84:b8:f8:ff:27:1d:70:cc:e1:
                    bf:b0:92:bf:76:63:e2:e1:93:15:e6:19:a4:47:61:
                    0c:87:e2:72:69:20:31:ad:8d:d3:6b:c4:2f:6a:31:
                    d1:a6:fa:11:2c:07:64:c0:bc:07:d2:cb:4b:38:d2:
                    e5:8d:2b:31:5e:d8:fc:9d:69:5c:47:24:f7:51:e8:
                    42:dc:b8:41:e7:8e:9e:56:54:00:39:8b:2b:96:6e:
                    c5:42:fc:0d:83:b3:2f:78:d6:50:56:a9:98:29:7e:
                    80:f3:f3:44:51:bb:90:ca:0f:b3:22:57:41:d9:73:
                    34:ca:81:75:d6:9b:e0:61:d0:e1:29:45:f3:ce:12:
                    01:0a:d3:cb:a4:f3:7a:6d:07:bd:2f:58:19:c9:6f:
                    40:ad:c9:f7:79:0d:23:e4:1f:92:9a:9d:82:df:cc:
                    eb:d7:5e:d2:05:29:72:fe:1e:a0:9b:1e:d9:1b:45:
                    a6:39:50:3f:e6:c6:7b:a4:f1:f0:4d:0f:b8:e2:0a:
                    d1:96:6d:0d:fa:3e:30:3f:ee:50:47:4a:86:54:b8:
                    06:ed:a1:06:dc:ea:f0:58:5e:6c:7f:74:d2:8a:d8:
                    28:f6:7e:7e:dd:18:c6:06:be:da:38:9d:bb:02:cf:
                    64:af:7a:6d:09:74:cf:6a:70:97:02:cc:19:55:4b:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:4C:D9:DB:3D:1B:0E:F0:D3:7D:74:5D:1A:1A:A9:B1:C4:9E:E8
            X509v3 Authority Key Identifier:
                keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:cf:9c:db:7a:aa:37:a4:b9:ec:1c:66:e0:1a:8e:50:f6:
         ec:51:a2:a7:5d:4c:05:41:de:f8:67:29:fa:48:f0:e8:3f:63:
         60:b1:84:2b:1d:aa:ba:be:47:21:59:b0:24:73:8f:8f:a8:9b:
         4d:74:59:84:0f:7d:40:b9:34:cc:e1:b4:5d:13:79:8a:de:50:
         99:77:98:d0:c8:f0:16:5a:63:9a:e0:58:0f:b0:47:ac:16:c5:
         98:6a:4e:66:47:1e:49:83:dd:2d:7b:10:52:f2:4b:f2:72:f3:
         b5:6e:86:f6:c8:fd:20:af:b9:5d:4f:01:e4:71:4d:fb:e2:46:
         93:89:03:f7:8a:51:de:4b:63:35:cd:9b:83:15:bd:29:ee:32:
         08:63:3b:bf:a1:de:fe:65:b6:05:e6:5a:f4:e4:78:3d:d6:47:
         f1:87:f7:4c:eb:b1:bf:59:6c:06:19:12:a4:04:73:6f:2a:68:
         6c:3e:a1:5d:13:aa:00:7c:5b:db:64:03:dd:3a:ba:fb:b2:33:
         68:74:7e:0d:b5:18:a4:6e:c2:d8:11:0a:45:56:95:01:bd:08:
         4f:80:42:9e:a1:5e:95:79:ca:d2:93:25:54:5e:36:0e:70:8b:
         fe:c6:2b:03:de:51:e7:2d:f1:da:22:6c:d1:2b:46:44:a2:8f:
         85:76:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----