Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File:                     uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier:          AYRWD0LGGf20JJ8uxtbJwkmzYTbbwqr+6hHiBHXf7lI=
Subject key identifier:   0F:DD:FE:8F:42:D6:1C:83:E5:6C:75:4C:68:14:81:E9:78:20:C7:B4
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer:       /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial:       01962F7467669406D2C30FB18D169593B446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number:          085F
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
                          2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: LWfbnyyTUwX+u/FhiBEex0vggLJ6GyoFAGq4pXhmzEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:67:66:94:06:d2:c3:0f:b1:8d:16:95:93:b4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=0fddfe8f42d61c83e56c754c681481e97820c7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:0a:6c:0e:4f:f9:7f:c1:e1:7f:73:4c:4e:
                    d5:f4:ae:ad:e2:57:57:7b:36:83:31:28:b3:7c:46:
                    1c:ea:22:d3:19:1e:3d:d5:ad:8b:bd:5e:79:a3:90:
                    48:5f:a6:3b:31:7c:81:98:fd:44:a5:03:37:84:9a:
                    9d:fb:d8:c7:7c:15:c2:68:93:32:5f:07:33:bf:be:
                    45:15:6a:36:4b:cd:41:05:99:52:bd:4d:b9:db:fc:
                    12:13:82:d8:1d:60:d9:86:2e:66:7a:e1:74:2d:d3:
                    fe:df:a9:ce:31:31:61:a3:b9:7a:6a:6b:b2:34:6e:
                    45:de:b9:ca:11:d7:c1:09:56:c0:13:04:29:60:68:
                    52:8f:f4:8b:a6:f7:f2:a2:6c:e4:5e:2e:d6:00:7b:
                    83:29:13:9f:7f:06:a4:19:0f:57:49:38:17:33:b1:
                    96:41:f2:67:f3:41:97:6d:e8:5b:a2:18:a6:07:3b:
                    81:b4:1f:a1:c3:e3:ea:f3:24:d1:09:fc:60:77:cc:
                    ad:b5:a8:76:36:df:c8:51:22:aa:59:bb:a8:e2:ac:
                    f0:9e:fe:83:9d:81:23:b1:66:e1:68:15:f5:9f:d7:
                    e8:76:29:f4:53:9e:b3:94:83:13:ce:73:26:be:35:
                    e1:4c:a9:bb:3f:31:21:18:3c:4a:31:4b:db:43:07:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DD:FE:8F:42:D6:1C:83:E5:6C:75:4C:68:14:81:E9:78:20:C7:B4
            X509v3 Authority Key Identifier:
                keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:40:53:d6:1c:cb:01:f8:47:d7:01:6c:15:1d:1c:5d:24:
         c8:5d:0a:56:4e:01:95:81:05:d3:08:e9:1c:fd:40:74:a4:b5:
         62:b7:dc:10:47:0d:30:aa:fb:60:55:69:b3:63:33:f8:d4:28:
         1b:bc:3a:d4:11:e6:d3:ae:69:2d:2f:45:58:eb:b2:1c:7a:c0:
         79:cb:77:24:a1:ef:ec:11:ad:d0:30:82:ee:6b:51:39:b9:a5:
         ff:90:0e:b9:2f:47:59:b9:9c:4d:27:dd:3c:10:60:9f:eb:02:
         0e:32:dd:c7:91:4e:c8:29:8f:2b:ae:d9:c6:09:fb:66:9f:2b:
         25:7c:97:7f:92:6f:a8:05:49:21:db:b5:37:ab:01:19:ef:08:
         03:e1:29:61:10:b8:20:32:4d:b5:84:17:36:36:e7:84:b3:0b:
         d2:07:c9:12:d8:ef:df:5c:be:6c:70:12:5d:27:0b:2b:bc:3f:
         c4:c2:3b:f9:0e:4f:bf:1e:c2:a9:93:99:cf:85:85:16:b4:e4:
         0f:8d:22:d3:78:31:77:ee:ec:d6:a2:79:5e:ca:3b:6e:88:fe:
         66:27:6d:68:e5:ad:79:c4:80:62:66:53:ff:50:c1:6b:c5:f5:
         a5:e0:0e:7f:48:c4:26:c9:9c:77:8d:55:e4:a9:8a:5a:50:95:
         f2:c1:67:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----