Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File:                     u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier:          Zo5kBfSDL6qQjjEatsW7UwHX5mSzFxddGIeHBvScCkI=
Subject key identifier:   81:43:81:F2:AD:A1:7B:0D:02:1E:01:43:9E:DA:15:5B:9B:FD:65:F7
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       01962E9898F532BE2E659260E97FDC40899B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number:          1325
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: ChY1pYRmqo4gHf3bQwXo87kO4Nw.roa (hash: b4fVB4MFOUGQYpV3kbDWZEsf3wE2N+b11phHSCf2ye8=)
                          2: Y0Nk9tl-qCa8DorGiEDjwrSmX0s.roa (hash: mzQKn7Y6MiSFmMsypQQoGywZaZjgp8BP9HplYmIAhgw=)
                          3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: 9HzZmIsD0/OVVuMgP7fhWTtD1Ct90G6ZC2UEY94El7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:98:f5:32:be:2e:65:92:60:e9:7f:dc:40:89:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=814381f2ada17b0d021e01439eda155b9bfd65f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:cc:5f:1c:0b:9d:9b:6d:14:cd:a5:52:6d:
                    06:b2:43:e4:57:1c:fa:5d:d8:92:6a:4b:2e:c7:dc:
                    9f:81:a0:67:01:8b:cc:92:46:46:48:17:c2:61:63:
                    53:29:cb:de:19:5c:15:7e:0e:c6:b0:e8:19:4c:bd:
                    4e:8b:70:8c:54:b8:06:18:72:c3:d1:e5:ec:3a:a9:
                    45:32:2c:10:0b:4c:6b:8e:71:8a:28:21:df:a6:3f:
                    15:88:b3:c3:12:ac:33:3e:3a:69:01:92:f1:15:a1:
                    3c:5f:ea:ec:06:3e:89:1c:4d:aa:2b:a4:e4:69:7f:
                    cf:77:12:96:6a:8c:2f:b9:b5:fe:1b:bb:fa:66:bb:
                    23:ea:90:66:51:f1:2b:0a:99:82:d7:1a:ec:91:ef:
                    3f:5b:66:c7:65:e0:d1:b9:25:9c:ac:94:da:6a:b6:
                    38:44:ae:22:e6:dd:bb:bd:e5:9f:7b:bb:30:a9:75:
                    1f:8b:3a:62:9e:29:27:d7:10:8f:74:2d:d6:86:e3:
                    90:6b:58:ad:49:65:78:c2:f3:c2:39:c0:23:f4:2a:
                    45:d4:d8:bd:9a:61:70:62:fd:f3:50:9e:1d:4e:e2:
                    59:0d:ba:50:37:c4:02:58:b9:70:e5:29:a4:59:71:
                    d0:62:38:19:d1:11:5e:53:5c:8f:0b:bf:d3:b1:7a:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:43:81:F2:AD:A1:7B:0D:02:1E:01:43:9E:DA:15:5B:9B:FD:65:F7
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:66:dd:1a:ab:8b:a0:f6:03:5b:c8:ca:77:fd:38:45:2b:3c:
         9c:78:2c:4e:cd:05:d5:38:fb:27:82:71:0e:81:09:a5:f0:07:
         c3:c0:0f:e0:f4:3a:a2:37:d3:a1:7c:01:22:b6:73:73:85:c1:
         5c:ee:da:33:34:af:cb:9d:8c:67:47:d4:55:8b:47:e2:ba:35:
         77:f3:f4:23:c6:a6:c8:ac:61:8c:33:ed:29:c4:61:ab:e2:30:
         94:1b:97:f1:86:14:a3:21:1e:bb:fa:03:c3:55:9e:7f:ba:0d:
         4e:32:d3:6f:15:fb:03:a6:24:f3:c3:4b:17:42:a2:8a:14:f1:
         78:5e:6b:7b:00:2a:b0:7d:1c:6c:57:81:b3:34:11:8d:3c:9d:
         83:c0:b8:69:0d:e5:95:76:e4:85:34:bc:45:3f:c5:79:52:0b:
         07:5e:0a:76:3f:64:c1:b7:49:2a:7d:54:60:41:b9:42:16:fa:
         57:a2:9e:aa:a4:7c:0d:a2:b4:17:07:5c:01:61:b4:1b:c1:ce:
         42:65:86:d0:32:4c:56:4f:f3:ef:fb:26:7b:4a:f3:d8:b3:2c:
         48:99:ec:e1:cc:7e:91:23:38:79:33:90:f2:5b:d6:6b:94:fa:
         aa:8c:aa:14:f4:91:43:b8:d6:5c:87:9b:31:0e:26:0c:00:fa:
         1b:7f:3c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----