Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          KAYN03nNhm5p6anhqf97+IKU74oC2hY/u4ji46dmuR0=
Subject key identifier:   11:F2:51:A9:AA:A3:E7:F3:7E:76:89:87:F8:6A:48:7E:4E:0D:8C:54
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       01962E987B55E2630CA54EF605A6615E1F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: 2NZL8PBoVJJt47a8N+/NuHfDHbro4HgpoDZar3a47GA=)
                          2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:55:e2:63:0c:a5:4e:f6:05:a6:61:5e:1f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=11f251a9aaa3e7f37e768987f86a487e4e0d8c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:49:eb:a1:6f:ab:21:03:5d:a5:5f:97:a4:
                    5f:fb:87:db:da:92:d1:5d:c4:fb:bb:ab:24:01:ef:
                    bb:80:d5:cf:d4:6f:f4:c0:cb:b0:16:fa:2f:f7:c2:
                    df:c0:a4:3b:77:3d:6e:b5:25:87:bf:e2:f2:17:74:
                    cd:72:00:7c:9a:de:0d:07:bc:e7:e6:7a:43:20:09:
                    28:3e:b5:11:a8:b2:60:71:9c:f0:30:e9:5d:7c:47:
                    2b:31:5e:00:54:aa:46:f9:a8:15:40:0c:eb:e7:1e:
                    f4:81:c1:80:ea:ef:fe:f0:41:e4:b9:ec:81:d6:b0:
                    46:51:2e:13:51:4d:21:53:f2:b0:6b:7d:e8:51:c9:
                    6c:12:90:06:94:a3:d4:53:3f:ed:44:92:d9:c4:b8:
                    38:d3:66:ae:1a:3f:c9:49:c7:61:35:e7:5e:fc:b2:
                    4f:8e:a3:a2:c3:8a:14:d8:8f:89:35:06:9f:91:2d:
                    24:0b:08:b5:ae:68:e6:b8:ce:59:53:a1:3a:76:42:
                    5d:c3:dd:d3:57:ac:27:27:dd:c8:7b:55:bb:73:80:
                    2e:ab:f1:f3:18:4d:cd:e7:b7:c6:d4:36:a5:70:44:
                    2c:67:65:98:6d:e8:d0:e9:d6:e6:5f:b3:86:e2:93:
                    db:17:98:4d:2b:a7:a2:f6:1e:02:b1:f3:5e:df:88:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:51:A9:AA:A3:E7:F3:7E:76:89:87:F8:6A:48:7E:4E:0D:8C:54
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:31:ca:5d:42:51:54:e7:bd:33:e0:3c:80:d9:23:9e:cf:55:
         06:c8:a4:21:fb:35:b8:35:ff:72:4b:24:04:f9:fe:65:be:a0:
         43:30:62:61:3a:17:84:ea:d2:fc:41:4a:74:f3:c0:3a:37:ed:
         24:ba:91:bc:d2:d9:cc:12:cf:20:ec:06:00:3c:96:fb:7e:34:
         32:9d:fd:e5:40:4b:de:34:95:87:68:2d:9c:76:aa:33:95:29:
         e9:5a:f7:dd:5c:df:31:d0:9f:2a:d8:ca:ea:44:2b:74:b4:1c:
         e4:c8:e4:9c:46:b7:89:2d:4c:50:eb:cd:cf:05:4e:c0:e1:98:
         6c:d3:3d:56:a5:f0:ad:ab:c3:ac:4c:03:b6:68:e7:cf:20:fd:
         51:b4:51:d8:fd:fe:0b:b2:65:bf:8f:23:22:c1:1b:66:7e:53:
         57:17:6c:97:8f:a2:96:f3:f6:49:ea:f8:94:90:c4:c7:b4:6d:
         03:aa:b3:f7:f3:da:ba:df:6e:0a:51:1b:2f:b8:94:10:be:27:
         a2:73:de:69:54:31:f6:08:36:85:ed:7f:25:0d:fa:5b:89:77:
         3d:ea:33:60:6c:21:c4:09:7f:46:d5:02:5d:bc:d6:9a:dd:6a:
         88:84:04:c5:0b:62:5e:4d:ac:ba:7a:51:7b:13:97:44:4e:c6:
         18:ba:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----