Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File:                     uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier:          u25BvTXawF17Qk4qJH+dKTYP3Aa3GRDS8w2+t+9fDa4=
Subject key identifier:   D2:D0:BC:1D:6F:C9:A0:D0:BE:AE:9F:AB:AB:97:65:37:7B:BC:55:45
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer:       /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial:       01962DF3EA9D6F63AE31F4F73043A4428779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number:          0E8A
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
                          2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: dBEOWf/VInMY7R2Z84//WejZCLzhOhgPz6jqZrBESxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:9d:6f:63:ae:31:f4:f7:30:43:a4:42:87:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=d2d0bc1d6fc9a0d0beae9fabab9765377bbc5545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:50:97:de:6c:c0:cc:0e:1c:b4:7f:39:57:
                    21:ab:c4:78:2a:60:8c:d6:2c:a4:69:06:16:1f:cd:
                    43:38:17:7a:34:10:5d:6f:82:55:75:74:ae:bd:34:
                    50:a1:d6:1f:c9:dc:6b:4c:12:e1:f8:a1:d5:0c:38:
                    03:e4:4c:d3:db:1a:a2:fb:6a:48:16:a1:85:6a:a1:
                    ca:f7:64:02:41:b7:7c:f3:80:16:b8:b2:5c:6a:56:
                    b8:30:92:40:2d:2c:e9:28:7e:08:29:66:c8:84:cb:
                    df:ec:78:f6:2f:05:d0:07:50:5c:1f:3c:fd:36:2e:
                    6b:86:6e:50:3e:b1:be:3a:99:24:4b:d0:4c:b4:dd:
                    42:86:62:0e:11:cc:09:23:50:7b:18:d5:42:8f:8a:
                    19:11:9c:8f:37:df:a4:7d:88:82:9a:c0:e9:6d:58:
                    06:13:fc:41:e2:39:a9:1c:bf:44:b5:0c:1d:68:ee:
                    de:5e:48:ab:13:ec:93:dc:f5:18:8a:0f:8e:ce:f2:
                    d7:64:53:cc:50:39:14:46:86:dc:97:b8:b0:d7:0b:
                    be:73:3f:c0:35:f7:b5:57:97:d6:62:20:34:44:41:
                    df:f9:b7:5c:c6:90:39:7f:93:3e:57:28:86:2c:fa:
                    41:6b:61:69:af:13:6b:6b:9e:ec:b8:c2:d5:64:e5:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D0:BC:1D:6F:C9:A0:D0:BE:AE:9F:AB:AB:97:65:37:7B:BC:55:45
            X509v3 Authority Key Identifier:
                keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:da:87:63:34:45:ee:e1:02:be:52:fb:92:27:19:1f:32:f8:
         2d:74:64:7b:fa:cf:d4:34:1c:90:88:38:f1:78:7d:f1:ca:96:
         63:e4:ca:35:71:ce:21:e1:71:e5:ea:8e:dd:59:ac:c9:cc:47:
         43:c8:b1:6e:1b:a3:65:8e:41:f3:d9:3a:5d:73:d9:6c:02:c8:
         4f:c4:98:b9:01:52:03:de:78:40:aa:f0:0a:3a:da:3b:2f:a7:
         eb:a5:35:94:8d:ad:8b:92:54:04:cf:1a:2e:cb:ee:a8:cc:65:
         62:71:67:1e:6d:aa:33:13:1f:ce:ba:39:15:40:8e:27:74:36:
         e1:ab:b2:56:cc:40:99:3d:87:64:d5:44:63:52:da:c5:c0:53:
         c5:6e:42:1e:96:46:91:6a:26:56:4e:b6:fb:ee:0e:75:c4:ee:
         ed:b1:aa:58:cd:3b:af:ed:76:e2:b0:8d:d8:ec:ca:c7:d1:bb:
         0b:8e:e7:d5:f9:a2:bf:59:bb:e7:a6:96:91:0c:c2:c6:40:b1:
         fe:87:48:fb:a0:bd:0b:73:e1:08:ad:ca:16:60:ae:dd:73:82:
         66:e9:14:a4:27:17:ca:75:88:f1:c2:6a:14:75:0a:22:be:79:
         31:c6:0d:d2:19:80:d8:a7:a7:3f:cf:71:3c:02:bd:81:90:28:
         98:e5:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----