Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
File:                     1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft (raw, json)
Hash identifier:          AhoeqDKJXWRbuLHgyw/8K/cinf8EqhrS7MoDnMgkDyg=
Subject key identifier:   01:63:17:DE:15:04:21:5A:74:DF:2C:F7:1C:B9:40:9F:0E:89:4E:7C
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Certificate issuer:       /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial:       01962E98B5C53E0347BA6B338CE1A8892E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
Manifest number:          1208
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl (hash: UdzT6W8M8wE1rjOThKYOscL4RHiIFnBSyRVIucVbNHA=)
                          2: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (hash: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=)
                          3: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (hash: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=)
                          4: mEGQsBNEE6R4v2nvqd09POEfynA.roa (hash: lk6cIpuyIvmnE5ZP8kUz8Ag2VnywuJlr74x0buev+f8=)
                          5: pbC0h4-ZQBAU6ItrChfkOJ1ZY10.roa (hash: PH8eMe1Sc0Ex/e3D9TFvy3te90ULqyE7p3IjYiFbYKY=)
                          6: rKizpanRwBJzijXvx7bJn1rhw_o.roa (hash: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=)
                          7: s1Pt-54WEyVmli6rDAOg5exksLI.roa (hash: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=)
                          8: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (hash: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=)
                          9: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (hash: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:c5:3e:03:47:ba:6b:33:8c:e1:a8:89:2e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=016317de1504215a74df2cf71cb9409f0e894e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:50:80:f0:3b:94:d5:22:61:e5:cf:72:59:
                    0b:75:a8:f8:be:2d:80:c8:f3:a1:fe:4a:38:9e:07:
                    69:5f:01:ae:07:c0:c3:93:71:c8:d9:04:2a:cb:d9:
                    21:fa:c3:0b:ea:9c:66:1c:bd:67:1b:2a:8d:81:5e:
                    9c:fe:07:44:7b:38:51:05:db:c1:2a:a5:db:f1:ef:
                    b2:65:39:a0:25:93:17:08:51:72:f1:1e:26:81:44:
                    de:ba:21:54:70:64:46:7b:6b:f8:e4:9f:ba:f6:db:
                    a1:19:5a:1a:cc:45:90:9c:9a:7d:0b:b7:29:71:62:
                    10:25:27:f5:2c:66:ec:27:3a:6f:8c:33:c6:e7:2c:
                    ac:43:a4:35:05:20:0c:11:53:c7:e0:f3:a6:ee:ee:
                    27:c6:6a:c3:65:dd:88:62:7d:68:e7:db:bf:77:24:
                    80:b3:ea:c0:51:a5:76:85:3d:7a:5e:a4:1a:5d:9d:
                    e9:3f:09:32:e9:af:a4:c5:66:6e:ca:ec:31:36:25:
                    80:3e:d7:d6:83:a8:d5:13:f5:ee:d4:a6:04:81:ba:
                    1c:0a:8e:54:6c:34:bc:21:a1:06:0d:80:33:a5:46:
                    40:92:58:d3:35:48:92:dc:2d:9c:1a:f0:13:a8:86:
                    b4:f7:56:46:a9:2c:0a:f4:5c:6a:e6:d3:38:38:5d:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:17:DE:15:04:21:5A:74:DF:2C:F7:1C:B9:40:9F:0E:89:4E:7C
            X509v3 Authority Key Identifier:
                keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:90:00:64:39:c7:5f:db:be:51:ec:44:52:13:8c:f9:5c:
         61:4a:4a:4a:39:f4:77:88:f1:6f:98:fd:12:ff:14:4e:de:2e:
         3f:52:75:c2:e3:6f:bd:73:9e:a5:e2:14:74:0d:3c:f1:48:06:
         2d:53:ae:3f:a6:7c:84:43:77:8a:26:25:7a:8e:d8:9f:1e:c1:
         ce:84:b5:51:45:42:65:8b:e2:f3:b2:29:47:78:81:62:72:fe:
         87:bd:b1:d1:37:ba:8a:d8:70:6c:fb:c5:a2:9a:07:5c:f2:7f:
         56:83:89:26:bd:dc:d5:ad:30:46:97:57:d3:d5:c8:1b:b4:14:
         40:d4:6f:ce:0a:9e:84:52:31:fa:42:2f:17:ad:33:56:a9:47:
         60:a6:bc:95:07:11:26:94:19:54:11:37:ac:74:7d:93:a8:f7:
         cb:e0:11:c7:a8:df:2a:4b:20:76:27:49:c5:0b:a7:8e:9c:7b:
         a9:79:ca:90:d5:f0:e9:f9:7b:6e:8f:fe:10:ed:10:ab:11:9b:
         80:b1:57:5f:bf:2a:7d:5d:1b:ec:b2:9b:a1:7d:75:b6:4f:b7:
         0d:63:e2:eb:26:53:08:81:16:0f:37:52:fb:02:f6:76:b3:e2:
         00:cc:23:75:f5:09:1a:53:64:6c:87:29:c6:c7:c2:4b:ff:7b:
         b3:e2:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----