Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File:                     u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier:          JxkxHEmsYtoa83XQwrpIiCh5spyuTZry1nCEbrL1LnA=
Subject key identifier:   AD:88:F4:F7:07:AA:16:BE:7B:57:21:FA:F8:F1:41:E4:13:B1:D2:CB
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer:       /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial:       01962DF3F3CA1438C121C0CFE660F5C6EA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number:          143C
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
                          2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: zHtgj232FSJ8nru3TV0DCF9OSA26+5aBfzDedtM6ujU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f3:ca:14:38:c1:21:c0:cf:e6:60:f5:c6:ea:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=ad88f4f707aa16be7b5721faf8f141e413b1d2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:c2:4e:33:14:1b:7c:2b:93:ec:4b:3b:1e:
                    47:1a:43:c8:68:b1:0f:ee:66:2c:17:03:9f:75:d4:
                    94:36:f8:c9:4e:2d:87:86:b1:49:b0:78:4a:3c:f4:
                    e6:13:aa:7b:51:9f:18:b6:3b:dc:3b:27:68:95:c9:
                    a9:f7:0d:7e:f6:e0:3d:a9:44:ce:ee:4f:97:8c:35:
                    28:40:0e:8d:d4:ea:67:c8:99:9f:13:98:b5:57:6a:
                    43:00:f3:e6:b3:14:da:48:53:d5:72:18:9b:04:d4:
                    0f:ba:f2:2e:c3:aa:68:f2:ba:d0:75:39:59:af:88:
                    72:f7:ae:90:d2:fe:d3:a8:7b:e2:17:22:32:3a:cc:
                    eb:21:7f:be:f8:36:9a:ed:ed:a1:f6:2d:d5:e9:50:
                    6e:67:8a:74:e8:90:a7:bb:4a:8b:dd:a7:76:17:b6:
                    92:06:da:c4:3c:ee:d1:7a:0c:f6:af:98:10:47:e2:
                    1b:b2:85:5d:98:34:1b:1a:20:9f:03:53:76:20:aa:
                    92:c2:d7:1e:43:2e:32:39:31:9a:20:79:cd:da:aa:
                    66:3e:bd:81:4a:dd:5a:9d:41:f8:7c:62:f0:55:3d:
                    51:61:69:af:35:64:9e:19:4a:d4:87:89:cd:72:9c:
                    1b:b9:e1:78:e7:38:d1:24:8d:2e:2b:e0:ee:80:75:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:F4:F7:07:AA:16:BE:7B:57:21:FA:F8:F1:41:E4:13:B1:D2:CB
            X509v3 Authority Key Identifier:
                keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ba:03:82:12:80:fe:30:a7:80:c8:e7:0f:ec:97:ed:88:0d:
         2a:9a:b6:26:e5:dd:ee:6b:2b:05:bf:18:e2:86:55:15:ef:f4:
         5c:5b:ae:cb:ea:ee:86:c6:f2:3a:d2:06:5e:08:1f:81:d2:89:
         f8:88:0b:37:ed:20:08:cd:07:9b:56:dc:18:e2:ba:3c:4b:cb:
         40:7a:07:de:ac:b6:49:8d:d6:90:6a:ab:ce:61:b0:86:59:c9:
         d7:30:a9:ed:42:3f:04:6a:0f:ea:58:75:6d:2d:b8:ea:2a:7f:
         0f:06:1c:31:65:b1:d4:c7:10:5b:b8:a8:55:8c:3f:e7:7f:a4:
         d1:37:29:5c:72:83:a0:99:72:0b:82:be:70:d7:f6:be:e5:aa:
         0c:20:b7:0b:95:77:e7:03:de:5f:8a:bb:77:43:f7:79:26:de:
         20:e8:95:a2:85:dc:ad:90:b9:c0:36:4c:73:eb:f1:35:8f:72:
         d5:0a:ae:61:06:8d:42:e9:68:4f:48:2f:15:ba:a3:71:d7:53:
         f7:1c:b3:09:bf:68:0b:b1:c9:0b:1d:10:6b:c0:bd:9d:44:3f:
         5c:ca:4b:ed:23:35:07:bb:e2:53:62:06:32:b8:5e:e4:fb:7c:
         c7:51:91:dc:d0:0f:74:11:b2:c6:03:ba:a0:c5:7f:0d:4a:04:
         41:90:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----