Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File:                     uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier:          3peG/wuyQ6FSFXAg1xDdstijZzbVcACz+Dfo3j7T7WE=
Subject key identifier:   3A:87:F9:46:31:B8:24:A3:39:57:3E:94:C7:D5:A0:BC:E1:84:79:5D
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer:       /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial:       01962E98C1AA39D8182835A676B2C644EF6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=)
                          2: fEaK7ErCTm7Fivri0S-qqcMkyMU.roa (hash: IfCVzZn66SOIRBGzYSq04PtQc+Pau+GA8F1M7N7TehY=)
                          3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: C9en4+RvfniBpdXWbLoIK3HjJG5PPVKVFaUqg1jzy+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:aa:39:d8:18:28:35:a6:76:b2:c6:44:ef:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=3a87f94631b824a339573e94c7d5a0bce184795d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:8e:ac:51:60:c3:ba:d9:cd:0b:44:21:ec:
                    fb:01:b0:a4:ea:98:8d:b5:ec:fa:8e:49:20:72:18:
                    3d:f2:cb:46:1a:6a:2a:89:66:25:c8:2e:08:9d:89:
                    6d:f2:62:ff:2f:a4:59:b3:a8:70:9f:cf:b7:3a:89:
                    87:ec:96:3c:c4:a3:48:84:4c:d6:d7:de:c0:c0:04:
                    10:1b:f9:03:69:f1:c5:25:70:d8:f6:9b:3b:34:ad:
                    38:6a:f7:f4:d3:f4:b1:13:9a:10:2b:9c:02:bc:ad:
                    02:49:31:92:7d:3b:42:9b:a1:c9:45:f9:f6:1a:ed:
                    08:01:e5:ec:75:1c:fd:d2:8e:0f:23:bc:e3:b0:f8:
                    ed:ce:8f:4e:94:85:a0:c9:25:71:29:46:04:92:4f:
                    8e:66:36:8a:d1:42:75:af:d4:b6:0d:5c:a7:33:56:
                    33:57:52:84:53:01:0d:f3:cb:3b:18:05:71:53:97:
                    4e:a6:d8:37:e3:70:82:7d:8d:15:8b:db:1a:b8:80:
                    2d:dc:a9:51:c2:10:2b:e2:33:18:b4:03:10:00:ac:
                    96:2a:a0:c2:de:f1:9b:73:ba:97:b5:d0:33:3b:f7:
                    15:6c:8f:73:3a:ad:70:9c:b3:15:4c:34:21:22:e2:
                    16:d1:c6:ef:f3:1a:3c:f4:b0:21:3d:fc:6c:91:4e:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:F9:46:31:B8:24:A3:39:57:3E:94:C7:D5:A0:BC:E1:84:79:5D
            X509v3 Authority Key Identifier:
                keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:9a:f6:52:43:0a:92:14:f5:1b:06:57:29:07:48:21:ef:
         36:24:21:da:13:49:52:4a:28:dc:81:7b:f8:a4:7e:9f:fa:80:
         fc:33:fa:8c:b9:28:db:f5:57:cc:d4:a8:6b:4b:b6:c3:dd:79:
         c6:8d:44:2e:40:73:58:ce:21:b5:94:7f:a8:83:38:eb:34:cd:
         1b:c3:34:18:f5:8e:c4:24:d7:b1:d5:8a:98:41:4c:db:ad:8e:
         4d:7f:1d:ca:be:be:72:d3:b9:06:7e:93:3f:6a:f2:7a:f6:5d:
         a7:95:3c:19:b6:94:55:b9:c9:c7:b7:e7:33:ac:c4:16:cf:27:
         11:f9:36:10:3e:78:51:39:89:51:06:2f:8d:13:bb:c3:89:33:
         b8:02:21:92:d9:25:86:f5:e1:45:a4:01:bc:93:1d:c1:aa:ab:
         6b:b8:10:d0:be:74:14:fc:1f:88:e2:55:c8:5f:68:8d:9f:c2:
         42:4c:21:18:8a:b7:ac:bb:ea:62:f3:cc:12:a5:27:d8:18:5e:
         7d:d5:0e:2f:ba:d6:cf:a8:1a:55:78:a4:36:8a:77:0d:35:21:
         56:e2:6b:92:18:80:18:33:05:81:88:54:f6:b8:7e:36:2c:13:
         42:e8:4b:38:42:c1:fb:0c:f8:1a:aa:fe:cb:a2:ec:2a:23:64:
         5f:89:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----