Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File:                     ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier:          tNZ+SE9ozUWh6CYclVTqUeIosYSExR3DoKUpoj2jQkk=
Subject key identifier:   8B:2F:E9:07:57:53:5E:B0:85:49:07:AA:CE:7D:E6:40:4F:E0:E9:31
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer:       /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial:       01962E2AD6D96A8D5E1E1F802D6FB7AFD927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
                          2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: u+ELomqDXqdiSlY5mSSNW3kMaGA2MpusC7iZ20e5FtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:d9:6a:8d:5e:1e:1f:80:2d:6f:b7:af:d9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=8b2fe90757535eb0854907aace7de6404fe0e931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:e6:a9:2a:f7:2d:42:16:24:76:dc:99:0c:
                    49:02:85:95:56:0b:6f:d8:13:bc:9f:f2:ba:06:9c:
                    8a:10:fa:23:33:88:28:00:0a:03:2b:cf:23:f6:02:
                    a0:e0:60:b7:d5:8d:63:74:63:3a:4b:ba:c2:db:2b:
                    6a:9b:5c:fa:5b:12:6d:ed:8a:32:30:3a:e7:12:f0:
                    51:60:8d:18:09:95:90:2c:ef:31:ba:bd:64:13:79:
                    fd:e3:4b:9d:a6:5f:20:a8:29:e6:25:99:79:92:09:
                    e0:e1:ef:57:b3:95:94:fe:b9:cf:f6:94:a3:b6:88:
                    b1:d3:24:42:fb:37:51:d8:29:e9:14:51:72:90:f8:
                    2f:f1:e6:44:31:88:ad:99:c0:be:fe:a7:fa:3f:9a:
                    77:40:55:f3:82:67:26:54:c0:11:de:7d:d3:d2:ce:
                    59:7a:16:f6:16:a2:c9:39:5d:f3:62:9f:48:10:a1:
                    7a:fb:da:de:4b:d1:a5:bf:08:6b:ef:cd:28:7a:09:
                    0d:a9:72:30:9b:76:86:3d:e3:7c:d2:35:ba:a1:7e:
                    47:70:f1:ef:d7:12:58:bd:e2:af:90:b7:82:8e:88:
                    6a:b6:5e:58:b2:fc:71:b7:9a:9e:8a:25:45:81:be:
                    66:41:79:80:38:b2:5f:b6:8c:eb:b7:87:79:18:13:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2F:E9:07:57:53:5E:B0:85:49:07:AA:CE:7D:E6:40:4F:E0:E9:31
            X509v3 Authority Key Identifier:
                keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:d0:11:dc:13:55:29:14:89:87:06:7b:34:8d:78:ab:48:
         30:38:57:e7:b3:26:a8:45:a6:35:9d:da:06:2c:20:ff:36:c7:
         dc:be:93:ce:45:d4:ec:b7:d2:36:1b:3e:56:10:76:7c:75:2f:
         dc:f2:2f:10:d6:6a:4d:c2:57:f1:85:b5:fe:76:37:83:75:87:
         57:11:a5:93:d2:3c:c9:17:8f:b7:e9:0e:88:4c:47:4e:9f:b1:
         a7:61:e1:cd:12:5a:c3:d1:80:54:d4:40:f1:b7:a1:e4:7e:ca:
         53:04:31:46:3d:5b:66:3f:d1:f1:4a:f3:0c:11:61:c7:92:68:
         cb:b2:e9:a8:98:19:62:a8:10:c0:3d:fc:d4:50:e1:91:38:3f:
         d1:0e:6b:0c:46:2c:50:57:4c:86:ff:b4:d2:fe:63:50:c3:8c:
         a1:fa:79:b6:8a:11:af:95:92:72:43:0a:d1:92:9f:29:ae:b0:
         5c:16:34:e2:b8:99:97:d6:ca:1c:e6:c7:ee:db:24:5f:88:c4:
         15:82:68:0d:69:23:f1:79:c2:6d:45:f4:19:86:6e:7b:64:c4:
         e5:dd:aa:51:68:11:e0:43:61:60:14:7b:6f:02:87:06:77:e6:
         ce:d1:0f:fa:7c:bc:d9:49:8e:5c:18:ee:15:e9:61:fe:b8:28:
         41:6d:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----