Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          /FoIHJc5chmaXa6Sm1fjd0pQS3UzhjDpnoqLZ3RVul0=
Subject key identifier:   6C:22:BF:50:0D:80:8D:F1:6F:F5:69:63:53:09:DE:BB:ED:15:75:E6
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       01962F0674CFFE140660EEB81C594607055A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          0D1E
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
                          2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
                          3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: H4l0m5vA+emzHsMCSm/QWv8pABvSE2hGp+607IqIdBc=)
                          4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:74:cf:fe:14:06:60:ee:b8:1c:59:46:07:05:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=6c22bf500d808df16ff569635309debbed1575e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:75:9e:0c:4a:38:4d:7e:00:e6:e0:33:fb:
                    64:9f:b2:31:c5:e2:26:26:4b:66:03:2e:c7:58:bb:
                    46:64:5d:d0:7d:7b:7a:5e:a4:58:ec:a0:ca:ec:2c:
                    93:4d:87:a5:9d:24:7e:1d:aa:86:60:ca:53:a7:c1:
                    2b:8e:76:54:a3:f5:82:2d:fb:95:c5:ee:64:9d:46:
                    a7:ee:4e:c5:38:22:36:a6:e7:6a:42:1a:a8:85:87:
                    5a:99:d0:2b:9c:76:98:ae:fe:67:a4:06:80:1f:3d:
                    06:9b:dd:5f:3a:ee:d6:bc:b6:c2:a0:fa:9c:f9:77:
                    05:c2:08:af:c7:48:25:69:26:1e:2d:ec:94:ab:f4:
                    bd:41:58:a9:9b:e3:be:47:73:0e:28:cd:60:b6:4b:
                    a4:42:06:ea:e1:b5:25:57:95:ec:90:25:35:c0:ad:
                    6e:a9:9c:30:71:93:dd:82:bd:48:9b:4a:63:5f:ad:
                    75:59:a5:e7:71:5f:6a:a6:ee:0d:a5:01:8a:7a:12:
                    43:17:c2:e2:b7:0d:a5:32:24:97:47:7c:8c:7a:58:
                    27:9f:3a:25:e9:49:53:ac:98:f9:91:b7:fb:69:d7:
                    2a:72:c9:7b:22:f2:8c:02:2d:00:0f:c2:22:d1:5a:
                    53:96:15:bd:ec:39:5c:57:b0:35:82:13:30:a5:c7:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:BF:50:0D:80:8D:F1:6F:F5:69:63:53:09:DE:BB:ED:15:75:E6
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e0:4f:92:de:73:8d:bb:da:46:73:6e:9c:84:3b:dc:d9:c1:
         14:78:47:6d:aa:5a:4c:c0:4a:91:1c:ef:da:d5:d4:64:14:5d:
         eb:29:72:3b:0b:69:75:69:99:3f:d6:fd:94:5d:72:65:f2:c6:
         59:87:de:21:e8:fe:5e:00:38:fe:17:7b:9e:ae:ab:06:bb:4e:
         8d:ec:d7:f9:2c:ca:f6:fb:46:b4:18:84:5b:bc:76:6f:b6:0c:
         bf:cd:0e:90:57:49:b7:84:e8:44:94:f6:bc:53:dd:8b:5f:28:
         b9:86:6f:ae:e8:e4:44:8a:1d:1a:19:13:bd:a5:01:ae:f7:e5:
         7d:9f:9e:cd:ee:1e:3b:88:60:77:e9:10:69:d3:ce:4b:b4:c5:
         b2:b7:42:8f:46:d3:f5:85:f8:f9:4a:88:06:e5:8e:b3:d3:84:
         5d:38:4b:77:53:26:75:78:6a:87:28:57:9b:c1:c3:b5:f0:8c:
         e9:8e:dd:8e:b6:bd:7c:80:f5:b8:7d:56:ab:ca:13:c3:e7:97:
         2e:86:3f:bc:8f:74:21:28:43:47:fb:70:84:67:24:16:f7:f7:
         a2:27:31:04:f1:50:59:07:a8:d2:99:b2:b5:7c:8a:ee:80:cc:
         bc:92:8c:84:22:58:62:3d:b8:d3:3e:66:2f:3c:59:b1:02:63:
         cc:f6:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----