Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File:                     U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier:          OFeE8PT2LjlJC5lk5LJrr4bx/O0uI1/OaBxMTrR6SzI=
Subject key identifier:   81:DC:59:70:01:5A:87:8F:8B:8F:D1:7C:49:00:7C:8A:C4:33:B3:61
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer:       /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial:       01962F3D607EA27E0E71F58086BB5FE12DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=)
                          2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: BPras0DlxYz+BPPJYw1CT8j5VgD7DhPEW3fgu18e0NA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:7e:a2:7e:0e:71:f5:80:86:bb:5f:e1:2d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=81dc5970015a878f8b8fd17c49007c8ac433b361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:ff:b1:07:a1:40:01:10:30:74:94:b1:98:
                    b1:d3:d6:68:ad:c2:78:ec:0e:26:6b:9f:c4:bf:fb:
                    c4:dd:4e:b0:66:47:36:37:f1:21:48:fe:65:14:b4:
                    1a:63:fe:80:0f:1f:ef:99:34:16:79:a0:ca:c3:1f:
                    88:a4:13:aa:53:77:b4:85:55:70:d3:c3:a8:e5:80:
                    9b:a4:96:45:11:d3:23:28:d8:b1:05:e9:01:55:83:
                    55:6a:62:f0:24:b0:86:52:a6:e3:f7:bf:c5:08:5d:
                    6a:33:98:8a:3d:6e:22:e9:24:5d:3b:bf:f0:9d:26:
                    f4:94:83:48:38:a0:d0:2e:f4:81:6f:22:03:80:1c:
                    29:23:ef:b8:6b:4d:2c:fa:4d:b9:05:03:7b:1c:ea:
                    6a:21:b4:44:07:0e:75:19:83:f8:73:16:63:03:53:
                    a2:9a:4d:f9:9d:17:33:0e:de:d2:11:5d:47:ae:4e:
                    05:cb:1c:54:a4:8c:05:ca:e0:7f:ce:0d:8a:84:b9:
                    73:c8:3c:b8:1d:30:b4:58:7a:63:64:c3:be:00:63:
                    16:89:d6:b5:0a:07:4c:30:61:5a:e6:64:be:01:30:
                    87:7e:97:c4:ff:03:79:12:1e:00:2b:3d:1c:a4:fd:
                    16:28:ec:1c:48:71:83:d7:26:1c:9d:a8:7b:ba:5e:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DC:59:70:01:5A:87:8F:8B:8F:D1:7C:49:00:7C:8A:C4:33:B3:61
            X509v3 Authority Key Identifier:
                keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:ad:13:a1:10:6d:59:b7:b9:45:2d:52:90:d0:8d:81:e0:
         9e:5c:a4:bf:13:f9:41:c1:6e:29:da:3c:93:67:da:c7:27:2a:
         29:0c:42:6d:0c:94:ab:04:87:93:1a:24:4f:72:34:0c:6e:e9:
         9d:2a:b9:a9:54:d8:60:48:62:2f:af:29:48:43:b7:d3:b5:81:
         43:95:0f:99:50:91:83:62:94:81:ad:18:35:fc:9b:52:e1:5c:
         01:c1:65:66:c1:85:05:90:ab:d6:30:3e:11:7f:7d:cd:a3:8b:
         42:11:7a:d4:95:4b:20:c0:c0:c0:01:e1:b1:99:14:bc:45:18:
         59:3a:58:b7:0d:65:0b:96:18:de:ea:74:9f:4d:6a:28:3d:cf:
         19:28:13:dd:d8:6f:b5:69:94:a8:23:92:79:d2:c5:04:13:6f:
         73:a1:d9:61:d2:3b:06:1b:ae:f4:91:cc:8b:df:4e:70:e8:19:
         0b:72:0f:a1:c7:73:d5:3b:33:fb:a2:74:d0:dd:4a:04:94:35:
         68:1d:b8:81:6b:af:87:10:75:8a:08:19:65:07:22:04:21:ad:
         e8:32:39:c1:bb:8a:9a:d6:40:91:58:56:a1:2e:2d:18:3e:0d:
         5c:04:92:ca:6f:3c:ce:70:63:a7:30:0c:f6:af:06:ff:71:ec:
         cf:f7:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----