Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File:                     U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier:          DR4L76zpcGetS/FswPaYbtPbdingm/t6XegKp8H93fQ=
Subject key identifier:   E3:7F:CE:47:BD:15:17:DA:E4:C8:D7:F3:5C:92:23:1A:89:86:A2:93
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer:       /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial:       01962E2AEE843ABD256EB3C1C0A3E5575659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number:          0775
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: If5j4KjsWFg3kwDUxrHpbFCCjpg.roa (hash: iGbVOgQjxfoZ4tZTHfIMlZvCv27war8Yd/ywUcGl39o=)
                          2: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: MpkxjcFVVQZ780KoCQqaia0dJe7iRHhkRl7ZBPWfRTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ee:84:3a:bd:25:6e:b3:c1:c0:a3:e5:57:56:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=e37fce47bd1517dae4c8d7f35c92231a8986a293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:dd:2c:3a:de:fc:4f:1e:17:61:f3:fd:f1:
                    8b:0d:ab:44:52:c7:22:7e:d9:00:d9:36:e9:9d:c1:
                    48:6a:37:6f:f4:d6:77:9f:c2:b7:0c:bd:b7:1f:58:
                    1b:00:d2:93:59:97:b4:23:81:16:42:22:ca:d7:14:
                    a4:60:43:fd:91:2e:46:65:69:2c:a4:44:f4:d7:68:
                    93:97:4c:5b:42:06:9a:43:14:c0:77:8a:83:7c:e8:
                    34:6c:00:2c:36:25:5a:ac:48:b9:a9:03:dd:34:e4:
                    33:ca:8c:8b:fb:aa:99:9e:22:2a:58:eb:45:a6:13:
                    49:c7:1b:5c:7e:35:5a:10:65:87:45:6e:5b:c7:a2:
                    87:73:aa:f9:d8:9d:d7:68:ed:3e:58:ea:e7:e7:88:
                    79:97:49:a0:5b:3b:38:32:48:f2:9d:7b:73:ec:f9:
                    77:b5:ef:39:8e:14:62:b0:96:dc:11:37:26:8b:e6:
                    ac:24:d8:8c:01:e5:7a:d9:54:bf:fe:67:cd:26:09:
                    9e:17:f1:f7:41:2a:a8:6e:d8:dd:99:a1:3d:8f:39:
                    66:ad:cc:46:37:57:43:8f:6d:6f:b6:a4:f8:08:6d:
                    49:c0:98:26:33:6c:3c:0f:32:4c:35:ed:8c:66:3c:
                    fb:a1:00:63:9f:b6:3f:70:75:98:6a:ac:89:83:58:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7F:CE:47:BD:15:17:DA:E4:C8:D7:F3:5C:92:23:1A:89:86:A2:93
            X509v3 Authority Key Identifier:
                keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:66:86:bd:29:8f:d8:60:57:ed:1c:38:b4:6a:b1:27:70:5c:
         06:5f:61:18:6a:aa:e3:19:e6:db:12:20:2f:56:99:fe:4d:11:
         16:d4:96:0e:7f:31:e8:c6:96:3e:dc:f0:86:7a:26:9b:f1:99:
         cd:42:19:82:f8:6c:ba:7d:70:24:e7:76:54:d1:82:b3:5f:2f:
         8f:14:c4:92:8d:80:25:98:7a:81:9a:54:71:aa:12:f7:4e:b9:
         4d:7e:aa:a8:d7:66:76:07:12:2c:09:1b:8f:20:7b:78:f3:42:
         a0:d1:15:2c:65:44:e6:99:c3:3a:36:55:f6:02:0b:a8:96:23:
         cc:fb:60:03:64:ef:ea:09:60:03:a7:9c:bd:b2:a4:2d:0f:df:
         74:b8:e2:6f:1f:c5:97:d6:4c:ea:f1:30:0e:77:02:67:41:40:
         6f:35:e6:76:ec:0a:14:ba:78:92:32:e3:c8:4f:2a:71:6f:e8:
         dd:7c:cc:f4:f3:78:0f:b1:43:1f:68:8e:98:dd:6d:39:31:5c:
         0f:40:3d:0a:bd:cb:26:aa:3a:fb:0a:73:fd:1b:75:d4:e7:0f:
         fe:e8:72:a8:c4:e3:22:31:39:5b:f9:b2:e0:85:63:98:ae:01:
         ab:5c:f0:4f:84:5d:9d:27:bc:b9:67:4b:1c:a4:1f:20:0a:1e:
         bb:08:dd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----