Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          NRMr+Q3uPWhvaQiGcfXU1EqL+nRjtQiLKA/UHtYHomE=
Subject key identifier:   FD:41:2A:0C:CA:2F:95:9A:19:A0:C8:3B:AC:15:35:A0:8F:7C:0F:46
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       01962E98E9AF6C804CDF5446B5D504ECF3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          0C6D
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: kZ4In0/Ns+4KZA6Xca1dGl3cSexrq4kkUCUzLBFEZ3U=)
                          2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:af:6c:80:4c:df:54:46:b5:d5:04:ec:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=fd412a0cca2f959a19a0c83bac1535a08f7c0f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:e8:47:1e:6e:60:4c:fb:c6:ae:02:fe:6a:
                    cd:42:74:70:ca:ea:36:2f:bd:ca:38:71:aa:09:55:
                    b2:51:61:94:b6:17:47:f5:9f:38:0d:1a:68:67:02:
                    ad:49:d7:c5:4e:ee:31:8b:38:67:d7:65:ba:2e:fc:
                    c6:a9:b9:de:82:fd:5e:e1:04:6e:0e:ab:5c:37:1d:
                    f6:c1:3c:20:27:6c:39:3f:cb:89:ad:72:b1:df:e6:
                    23:8c:11:d5:c1:19:98:15:19:3e:47:4e:86:75:b5:
                    84:e7:c6:96:50:12:49:c3:ca:2d:88:00:90:6c:11:
                    9f:b1:cc:ca:39:1c:c5:70:ea:1d:16:c4:a8:24:84:
                    11:73:38:cf:cf:94:7c:cb:24:ea:56:dc:e7:68:17:
                    2f:58:d2:96:22:20:d1:1a:76:a2:9e:6f:9a:1e:f3:
                    cf:d9:8c:16:b8:57:28:91:33:0f:bd:03:09:b7:99:
                    7e:34:25:0f:75:44:50:19:04:6f:f4:cb:e1:6d:e2:
                    4c:aa:7f:3f:6b:f3:6b:de:74:b8:34:13:9d:e0:b6:
                    8e:b2:98:b8:9d:99:21:3b:c8:27:3c:82:be:a5:bf:
                    6b:a3:31:e5:14:4e:b4:84:ea:e2:76:fa:d6:c2:b7:
                    db:8a:97:24:2b:07:70:23:0e:77:a4:af:38:ed:08:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:2A:0C:CA:2F:95:9A:19:A0:C8:3B:AC:15:35:A0:8F:7C:0F:46
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:74:c1:29:99:17:94:4e:6a:d4:68:63:76:61:af:4f:1b:
         31:97:61:67:51:f1:3a:29:82:e0:f7:a7:22:8c:41:f6:59:c9:
         31:db:92:8e:ff:2a:80:3f:89:7a:43:b8:6a:e4:30:49:68:8c:
         c4:de:10:b3:6e:20:15:ca:bf:80:42:ec:5d:08:54:92:91:30:
         2e:97:0b:e6:ab:8f:e9:19:3c:e5:57:49:c7:c8:2b:88:f9:6f:
         03:e8:d4:7b:76:85:6d:d9:31:4b:4b:11:ae:41:dc:77:5d:3b:
         25:55:d4:77:12:c8:95:66:2f:00:02:e0:e3:90:a5:27:b7:2b:
         8a:8d:00:41:35:2a:76:bf:9f:b8:f2:20:65:ac:07:10:85:1e:
         3a:a2:0a:5e:9f:13:9f:60:97:6d:af:3f:4e:29:e5:41:a9:e4:
         03:67:48:cf:68:06:e2:14:c7:d3:1d:60:00:38:ce:20:d1:a9:
         12:80:34:21:be:5c:73:5d:89:75:e3:d5:e4:ad:8f:e7:6c:37:
         46:27:77:ce:eb:53:ed:c1:e9:a6:f1:6e:c1:8a:a0:85:e3:e1:
         93:0e:b1:16:7b:da:0f:23:40:07:0e:b3:45:b5:17:15:3c:53:
         7e:71:3c:c6:a6:00:5e:37:53:93:a0:12:88:ad:4f:86:86:bc:
         e4:8b:d5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----