Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
File:                     uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json)
Hash identifier:          YghZvUkpKfkZdBL+lcWLHFyxTEWabOcqRDtBoukw/Ys=
Subject key identifier:   45:A7:BB:F5:F7:65:2F:02:D9:58:38:E9:42:9D:A9:3F:2E:C4:97:07
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Certificate issuer:       /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial:       01962F3DBEE48B4550606308C358C3750951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
Manifest number:          0CDE
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=)
                          2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: 88cbD4XH2I+MO6julJV9mfdEgi8DF9Rfri1r5+He1ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:be:e4:8b:45:50:60:63:08:c3:58:c3:75:09:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=45a7bbf5f7652f02d95838e9429da93f2ec49707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:58:06:91:e8:d2:d5:5c:d9:cb:7a:24:b5:
                    ea:94:ce:5c:9e:04:77:20:b3:15:ae:d8:1b:09:2c:
                    2f:bd:cd:07:02:24:74:bc:1e:9b:68:52:a5:f9:7d:
                    ec:3c:76:b2:12:95:85:58:63:02:ba:bf:c9:c6:ec:
                    d3:af:43:de:55:71:f6:1e:92:4e:f6:99:36:21:36:
                    c8:12:a2:72:7b:2e:70:89:79:0b:2a:21:7a:5a:1a:
                    a4:1a:dd:d1:47:50:4b:2b:45:42:12:a7:4f:2b:db:
                    06:a2:44:4e:69:0b:63:f4:ee:b6:d2:18:da:a2:53:
                    a8:08:e7:14:33:f2:61:d6:4a:c2:19:5e:6b:d4:1a:
                    2d:ef:9a:88:e9:cc:1c:d9:12:00:0a:70:6d:15:98:
                    d8:7e:73:c1:ab:0e:3a:28:fe:c7:be:46:93:3f:d2:
                    67:bc:cb:f4:fa:a8:ef:a7:f0:02:93:06:13:ef:07:
                    89:a0:f4:ae:ac:6c:0b:67:ac:06:b1:29:98:28:9f:
                    6d:fd:2a:6e:00:98:d7:6c:90:d6:97:b9:e6:0e:c3:
                    6f:3f:55:97:7a:e5:87:2e:2e:8c:2a:0b:ce:82:4d:
                    c4:e0:fe:43:aa:68:49:e2:57:4d:22:b3:10:b4:9b:
                    0a:64:9c:f7:21:5b:da:2e:77:17:04:0b:53:59:4f:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:BB:F5:F7:65:2F:02:D9:58:38:E9:42:9D:A9:3F:2E:C4:97:07
            X509v3 Authority Key Identifier:
                keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:15:70:8a:0e:24:74:71:04:47:d2:04:fa:1c:0f:c4:43:
         ed:93:56:b1:ed:d7:12:5b:3b:a5:99:f7:0b:57:12:f5:5e:db:
         0d:72:41:10:8e:f4:20:8f:42:60:ba:59:9d:44:63:f4:80:75:
         f0:1c:b7:c7:6e:f7:75:fb:c0:de:86:84:60:6b:0e:b1:13:7f:
         1c:a9:ea:78:47:34:e2:6e:cd:b5:73:8c:a2:f3:2b:73:58:ea:
         ae:f3:be:fb:08:fb:d6:a7:25:01:45:11:3e:8e:63:ee:00:a5:
         44:2d:ad:62:7c:cf:c1:c9:94:50:2a:c8:42:20:1b:e0:27:d9:
         94:4e:26:26:3f:8b:51:8e:a2:21:5e:2d:7c:c4:ec:1a:a1:a9:
         39:d3:af:ec:20:20:b6:1e:2b:40:4e:21:38:c6:69:5b:6d:44:
         1c:37:3e:bd:16:0a:92:4e:75:b5:5c:4b:ca:46:ee:76:3c:5d:
         f8:e6:df:4e:7f:fb:54:5d:99:a4:4e:b7:de:f1:d3:b2:0f:c0:
         9f:07:6b:bc:8e:c6:c2:18:6d:32:1e:fb:c7:5c:1b:6d:dd:f8:
         e2:ff:cb:91:80:f2:1e:1d:d0:95:62:84:8a:d8:d8:f5:7e:f4:
         26:30:ca:73:32:27:ba:29:bb:a5:fd:06:4e:26:0a:4a:bf:db:
         f9:3a:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----