Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          IVdqYgulnFhzrKrSqLUQTLkFwxrIKMB2CvnrBMn/4CE=
Subject key identifier:   DC:CC:6E:18:76:8D:6F:8D:B3:7D:CB:BD:2F:3D:AF:AB:61:AC:AC:3E
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01962E99B747EABCEAD294F80C4059D71471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1162
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          2: bBmwPBIN2Tw9ch2JTb-Jk1aFkow.roa (hash: JohsMKzc7NS3iKOPkRn0oanEwpp18WubB1nHsAAF+rk=)
                          3: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (hash: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=)
                          4: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          5: rpVEI9UEI1-WJFYPN_yr9LMGvvc.roa (hash: JaM6/GuUVucxk5DxvvEe7MfBQN9s9ZArtYnX5zZQ0E0=)
                          6: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: Ibansmu0c7UxtWUqIPQNFD1ikcGyLfdDo0xjvdjKnEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:47:ea:bc:ea:d2:94:f8:0c:40:59:d7:14:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=dccc6e18768d6f8db37dcbbd2f3dafab61acac3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:53:f7:c5:5c:70:6a:4e:cf:f7:fd:9a:b9:
                    e8:46:7a:40:62:a5:2d:ce:d7:fc:c1:1c:6b:c6:49:
                    6e:79:ba:66:d6:5f:df:a5:83:9e:40:99:7f:71:bc:
                    3a:39:bd:3e:aa:e7:0b:8e:cc:21:bd:08:2b:bc:e8:
                    a4:be:ea:2c:df:0a:19:2d:d4:2b:8f:30:fd:a9:f6:
                    62:2f:b5:1a:b2:de:c1:4f:92:60:77:7e:2e:20:23:
                    f7:97:ab:c5:fe:4a:bc:42:b0:9a:f6:a9:8b:16:41:
                    40:21:54:be:d8:ee:98:53:c4:7f:cd:fc:fd:ce:0b:
                    31:c3:14:a2:ff:37:2c:b0:62:1e:90:04:fa:5a:99:
                    7b:bc:fd:8c:15:85:cb:66:98:80:96:6c:36:6e:37:
                    70:39:4f:f9:1f:f1:0d:44:3e:82:ea:7c:6d:58:09:
                    f1:04:9f:00:28:a5:49:80:8c:c3:55:1f:99:4c:8e:
                    37:eb:f7:61:9e:88:a4:b9:b7:11:fc:be:e1:0b:53:
                    f9:60:b8:ed:fb:84:06:97:e3:ce:74:d6:6f:fa:e9:
                    be:00:f9:3f:2a:a8:4c:06:13:4f:d1:f5:6a:18:a8:
                    cc:bc:db:99:3b:6e:b4:c6:5f:97:d8:91:1b:8c:08:
                    d6:8a:57:95:b8:a8:4b:42:4c:4f:df:4a:0c:76:02:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CC:6E:18:76:8D:6F:8D:B3:7D:CB:BD:2F:3D:AF:AB:61:AC:AC:3E
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:ce:22:0a:eb:ae:60:24:65:d3:ad:e6:2d:b9:79:11:c4:
         d0:10:2f:14:ea:b5:bc:62:98:63:d1:16:53:e8:19:51:cb:a1:
         bb:26:5c:b8:c5:a3:b1:60:03:ff:88:67:68:9d:6c:a1:e8:a5:
         c4:82:ed:ef:e9:e7:ac:02:d3:1c:d3:56:2b:13:3f:97:c8:df:
         68:b0:ea:04:03:53:49:cf:f8:06:78:3b:0a:2a:12:e7:bd:80:
         d1:e8:f5:9e:ec:b1:96:a7:3c:f9:cf:4f:42:35:92:c2:6e:8c:
         08:2e:7f:24:93:6c:3a:74:ee:48:78:ad:53:09:9e:0a:b7:5b:
         07:0a:55:a6:f9:4f:2c:44:6d:f2:6b:01:17:ee:48:aa:de:65:
         77:34:cb:fd:46:58:e1:c0:60:d7:5e:03:ed:8d:a7:48:75:25:
         8f:cc:34:5e:f9:9e:81:72:3e:4f:35:56:48:62:9a:c0:87:33:
         70:c7:7c:79:eb:ea:d1:d7:ee:02:25:ee:0b:34:37:a5:23:4d:
         de:4c:e7:95:b6:8d:26:da:ec:2f:ff:d5:35:3f:fe:e6:a0:b2:
         d2:2c:aa:d8:35:64:18:7a:b1:e3:dd:42:48:c1:c0:2f:e8:84:
         42:2d:a5:9d:03:84:67:92:a0:36:3b:b2:1d:bc:9f:5f:d9:d8:
         04:13:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----