Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File:                     uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier:          Y15otG4xQhry5iJU/hTe7P2hw3Vy6A4uHWQUTPq0lWI=
Subject key identifier:   A0:15:EE:68:F7:5A:DD:49:71:85:C5:67:98:4A:72:88:17:69:09:6B
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer:       /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial:       01962E2B071ACCCEA34EB29C3D6849787525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number:          0C2E
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
                          2: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: AdWcbgqLDW/YDQvi7JtNZRn12hG8/Wte11HmWJ3qgDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:07:1a:cc:ce:a3:4e:b2:9c:3d:68:49:78:75:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=a015ee68f75add497185c567984a72881769096b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:8f:a0:f9:85:da:22:45:83:2e:5c:db:ab:
                    ff:9f:b1:c8:a2:36:be:49:d7:4a:49:1c:5d:96:d6:
                    eb:56:82:d8:ac:0c:f3:d1:da:56:1a:1d:d2:d2:45:
                    60:35:9d:d5:be:78:3e:37:13:b4:8b:0b:df:5a:92:
                    55:2e:47:36:16:b8:a0:a8:06:a4:b3:a9:b0:9a:eb:
                    3c:36:d2:93:d5:6a:d1:e2:5a:42:1d:3a:65:f6:1b:
                    0d:62:4c:25:cc:fe:37:1e:24:b8:f2:0a:0f:41:73:
                    89:6b:a3:42:3c:4f:e6:84:db:6e:90:2c:c2:27:58:
                    32:7c:55:42:7d:dd:b0:82:00:c1:8a:b5:f9:70:13:
                    51:a5:22:c7:c9:03:c3:37:5d:6a:5d:5f:87:a8:5b:
                    0e:b9:6d:96:10:da:c6:a5:a6:d1:30:7b:29:5b:2c:
                    c7:07:84:e7:66:7a:a4:56:8b:b5:a0:da:c9:b7:f2:
                    3d:e7:01:23:10:14:7b:97:45:34:c2:21:d9:56:f9:
                    ff:47:4c:79:7f:90:18:f6:6d:31:1a:81:e9:21:aa:
                    90:ec:4b:53:3c:43:d4:a0:08:f8:a9:e2:1d:50:eb:
                    8f:95:fe:3b:90:8b:df:56:89:49:cc:f1:64:a0:da:
                    00:fe:c1:d2:b6:da:fe:91:d5:b1:3a:89:39:e2:75:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:15:EE:68:F7:5A:DD:49:71:85:C5:67:98:4A:72:88:17:69:09:6B
            X509v3 Authority Key Identifier:
                keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:31:57:e6:7f:a0:da:58:bc:78:b1:62:07:86:99:bb:9d:c9:
         20:98:3d:eb:1b:e5:8c:09:21:96:f7:48:fa:61:50:06:4f:14:
         bf:cd:26:07:d6:78:25:d8:d0:19:b2:0f:fd:33:ab:97:1b:51:
         64:3a:fc:f6:e8:a7:2b:40:f8:d5:a6:22:73:78:da:ba:80:7f:
         ff:2e:6e:15:d2:ae:7d:fe:34:a5:11:71:15:20:92:fb:17:70:
         d1:93:fe:76:9b:c1:f3:28:12:6d:cf:05:5b:e8:9a:d1:10:c5:
         ce:59:34:bb:4d:c9:08:f8:bb:1e:2e:01:4a:04:96:3c:61:63:
         71:9e:25:4b:d7:27:98:c5:c7:1b:dc:b7:d6:1f:cb:8b:ea:f9:
         44:d4:98:b7:cd:83:74:e9:cd:14:2e:9b:a6:65:1a:fb:eb:d3:
         5f:08:7c:a2:22:91:b0:9f:d9:e5:92:4e:9e:1f:5a:63:cb:ad:
         b1:f2:b4:69:02:3a:7f:a1:08:8e:38:47:e9:d3:24:b5:80:37:
         74:cc:e8:bb:8e:28:51:43:7f:47:01:4c:eb:29:a5:44:62:79:
         0e:f6:5e:40:aa:07:d4:27:ad:ae:a1:e1:fe:dc:cb:3a:0a:cc:
         8e:9f:68:56:f9:3b:64:f2:ef:04:34:1e:43:cc:70:af:61:1f:
         9b:c8:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----