Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          meONqyy70hOuPkbdDtshz/7JBXK9KL8ydN1pAjSt2Dc=
Subject key identifier:   C7:30:5C:D8:D6:1F:5A:A4:4C:08:96:18:75:64:F5:E9:BD:1C:3E:79
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       01962E988FE38B4FF2A084B18B2AD1D7824E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: 4pehEjmsLyO0JUnf7amQQYlMb/2x9DHAa4vqBwWoyPQ=)
                          2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8f:e3:8b:4f:f2:a0:84:b1:8b:2a:d1:d7:82:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=c7305cd8d61f5aa44c0896187564f5e9bd1c3e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:06:e2:e4:a9:11:55:46:17:54:da:29:4e:
                    bd:34:7f:93:a9:f8:5e:8a:3e:52:c1:91:0d:d1:72:
                    e3:5b:16:09:91:6b:a7:79:36:fa:1a:e1:79:e1:b6:
                    fd:c7:c8:ad:fe:ef:e6:2e:a6:b5:06:97:c3:8f:7c:
                    6b:26:f9:64:6d:16:c0:1e:a7:6e:f2:00:68:58:b4:
                    8a:e0:bb:57:6b:a2:b1:92:c6:33:5d:2b:bd:87:84:
                    b6:86:87:9b:81:f2:b0:e6:7d:4c:17:99:2d:e6:33:
                    8c:d5:97:35:8d:67:85:5e:4c:52:98:e3:0b:8a:98:
                    bf:93:ed:64:8c:be:d3:04:79:d0:ee:6f:d1:5b:be:
                    ab:f1:13:72:20:cf:c7:36:7c:1e:eb:26:b0:8c:a5:
                    87:2e:e6:4e:46:30:62:a3:0a:e1:52:96:d1:8a:74:
                    c0:71:8a:c7:71:9e:3d:7b:5c:e2:ae:9d:ef:18:cf:
                    b5:f3:3d:77:ab:11:3d:1b:9f:40:83:62:8a:cb:c4:
                    74:ac:a8:de:a6:e0:c4:c8:3d:44:d6:88:ee:ac:53:
                    35:a4:77:b1:9c:f9:e1:a4:42:27:80:80:e8:27:e6:
                    26:78:b5:8c:bc:ad:50:f2:d8:20:87:56:5c:80:87:
                    25:11:44:12:da:33:26:f5:69:fb:c8:89:3f:fb:14:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:30:5C:D8:D6:1F:5A:A4:4C:08:96:18:75:64:F5:E9:BD:1C:3E:79
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:55:a7:59:48:f0:67:04:da:f7:b4:ba:b4:c7:3e:80:40:
         cc:43:9a:45:9b:37:ce:5d:a4:76:a0:a0:6b:3b:c5:72:8d:7a:
         6f:ca:f0:cd:89:7f:18:09:5a:cb:d6:a0:4d:43:c4:4c:6d:c5:
         1b:26:4b:40:a1:91:33:df:76:31:f1:00:d5:b4:79:82:cf:3e:
         ca:5b:fa:ce:60:c6:c2:e3:b1:1e:38:a1:c7:3a:ea:7f:27:6f:
         e2:d2:ad:14:7c:79:96:e9:21:b9:76:92:14:19:f3:5c:67:24:
         34:00:69:2b:78:de:17:a9:c7:cf:1c:60:1e:e6:19:09:4d:13:
         5f:0f:f4:3a:31:02:f2:3c:aa:39:b1:32:31:a1:5e:00:61:ac:
         d9:3a:f2:55:59:3d:c5:64:fa:2c:18:fa:36:6f:ac:25:6d:d3:
         6b:40:4a:c7:d2:1f:8d:89:17:91:b7:bc:f1:59:94:cc:0b:9a:
         24:04:4a:9d:ba:b9:93:eb:c3:2d:26:70:13:c1:93:ff:85:ba:
         b5:8a:c2:5e:92:ce:ac:ca:54:78:a1:12:48:16:48:b4:03:76:
         89:b9:0a:3f:7a:06:44:af:1d:98:24:7f:a6:8b:6c:a2:db:eb:
         38:37:7d:91:0d:9c:cd:c9:f6:c7:82:37:8d:59:24:1c:b3:b3:
         c4:32:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----