Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          1PSmpxQwPwkf+4Gqo+/u2nE4SGRzR1yzz/PeQT2NZw8=
Subject key identifier:   16:8C:E2:14:B3:C8:E3:27:48:2D:E6:08:D3:6D:69:72:D8:CC:5E:49
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       01962F06524655FB803A6715D31E7DF64823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          1050
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: bGID9MISfapCQvxtnoK2mwgER1c.roa (hash: 48jEs1SYz7H/DF1j6XjhPt2MSQotOuG8cV4gNdbAuRU=)
                          2: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: K6qtHd440YywPZq5/9YoJVs3Ka25YClNT+SpEqh9xAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:46:55:fb:80:3a:67:15:d3:1e:7d:f6:48:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=168ce214b3c8e327482de608d36d6972d8cc5e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:f3:df:72:0c:ef:a7:84:ba:63:6c:eb:14:
                    20:36:a1:77:ff:22:a9:0d:66:58:47:b8:52:43:4f:
                    c5:68:f2:7c:43:fa:cf:0a:7e:26:d6:73:e9:2f:27:
                    e9:f8:6d:52:6f:22:64:78:e1:f7:c5:66:d8:57:10:
                    9e:a9:01:e3:73:69:e6:de:bb:ce:d9:31:63:fa:37:
                    46:8c:de:63:31:9f:b8:fd:55:05:dc:66:12:42:dd:
                    5f:cd:6f:d9:4d:c0:ac:90:9d:b4:60:cf:dd:f5:f2:
                    d1:30:50:cf:6d:f9:5e:49:6e:d0:9e:05:81:18:b1:
                    cc:e8:21:25:83:f7:6e:52:7e:36:49:e9:1d:de:3c:
                    6e:b4:8b:f5:9e:4c:ea:47:f3:92:db:34:a8:ce:0a:
                    12:e8:f0:de:34:75:48:f7:48:67:de:9f:26:7e:90:
                    57:b8:a4:b2:83:6e:a5:81:0e:f5:80:55:16:0c:bc:
                    e5:3e:a3:ae:03:39:b0:cb:47:ca:97:03:e1:b0:e4:
                    2a:47:22:fd:d7:4a:e6:99:53:ae:d9:7e:e7:45:d3:
                    c5:0c:54:1a:4b:c8:1a:3f:fc:42:5e:34:4a:72:99:
                    0e:d1:4f:52:b4:9a:ad:a3:8a:99:a6:8f:a0:ea:51:
                    04:ed:49:c4:47:20:bb:4f:ec:42:13:e9:51:e8:a7:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:E2:14:B3:C8:E3:27:48:2D:E6:08:D3:6D:69:72:D8:CC:5E:49
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:02:58:fa:56:97:1b:ab:42:8a:63:74:82:a5:2c:5c:38:
         9d:9a:71:ed:98:b0:80:00:16:50:7c:2f:02:04:22:52:70:ca:
         2e:03:17:1d:38:74:d5:a3:c7:6c:f4:99:ad:7b:01:84:5f:39:
         a5:ef:31:ea:bb:93:8f:1c:a0:75:1d:1b:2a:cb:08:c5:7f:14:
         e7:a1:c3:98:09:f6:d0:90:20:a2:6c:11:f7:43:da:09:6f:ad:
         c9:e3:20:2d:1c:f1:80:f6:47:dc:c1:c3:10:16:32:12:cf:4d:
         c9:c8:66:f9:36:75:f4:4b:ed:11:84:40:dc:ec:86:8b:ba:fe:
         7b:df:83:d1:ba:6c:d3:ff:cb:50:41:b1:03:5c:76:7b:48:e0:
         49:e7:8d:f9:e4:8c:59:19:5e:e9:30:6d:13:65:e3:b5:a0:3d:
         b1:c3:2c:c8:f5:b8:64:51:11:a5:28:07:89:d2:c4:b7:cd:3e:
         f2:c0:c4:6d:10:c4:b3:1f:00:a2:db:d3:d0:4c:3b:c4:46:e9:
         c8:79:12:5d:30:6c:f3:c0:e8:7d:16:1c:f7:ce:01:ca:b4:4d:
         f5:be:47:45:13:52:b7:48:3b:76:f7:5b:d2:5d:e4:c5:69:26:
         9e:be:8f:60:21:7e:7c:0c:6d:0a:a8:61:e2:65:09:4c:9c:0d:
         4e:b2:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----