Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File:                     uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier:          Zio0NXpHu0HTpGd+hnZLKnv+VDfS9brZT0VvZPEBwxo=
Subject key identifier:   FC:86:53:5A:77:70:D3:A6:F9:70:B8:7D:3C:22:BC:25:5E:66:8D:34
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer:       /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial:       01962E2B2EEDC894093793A1761E9DA5FC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number:          0727
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (hash: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=)
                          2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: grVlTvXcVuxYtwKTsLUyPn/g8P8ZqpperhcJGi/D3Cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2e:ed:c8:94:09:37:93:a1:76:1e:9d:a5:fc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=fc86535a7770d3a6f970b87d3c22bc255e668d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:4b:f7:9a:37:26:dd:19:62:d9:46:f0:42:
                    24:74:12:51:27:27:1d:55:cc:99:c5:8c:25:a0:8a:
                    fd:2b:95:2d:63:6b:84:e0:97:91:43:d1:5e:39:b9:
                    cf:3e:2b:0b:23:dd:a3:c1:18:67:70:f6:0e:66:9b:
                    53:3e:a3:f8:ed:ec:cf:32:20:3f:eb:5a:70:6f:28:
                    88:3c:22:f9:18:52:7d:a0:27:7c:70:72:ce:d4:cf:
                    84:45:88:99:e2:56:59:82:af:be:05:e9:19:2d:3d:
                    84:d7:2d:ec:f6:c2:cb:7e:43:72:d0:cb:17:ae:8f:
                    11:9f:5d:23:7c:08:cb:27:f6:cc:bf:ab:43:6d:f8:
                    68:6a:ac:7e:38:15:18:2b:c0:7c:db:b2:ff:33:5e:
                    3d:52:1b:42:35:6a:90:cc:60:a6:ea:74:e7:4b:ed:
                    20:ba:6e:2d:66:83:8f:29:a4:29:22:32:e2:c1:a6:
                    81:23:8f:c4:a0:10:1e:f6:98:bb:0b:66:2c:ac:6d:
                    0d:2a:d6:a9:f0:b0:90:90:21:76:7b:f7:11:8c:73:
                    e6:c2:51:c2:79:cf:2a:35:03:72:ef:ef:01:5e:86:
                    fd:27:da:24:d9:52:04:97:d2:82:34:c6:6a:6e:67:
                    3e:e1:95:8f:2f:20:94:9f:59:76:32:44:e0:d2:72:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:86:53:5A:77:70:D3:A6:F9:70:B8:7D:3C:22:BC:25:5E:66:8D:34
            X509v3 Authority Key Identifier:
                keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:75:4f:ef:46:af:d2:7e:02:ef:b6:b1:1a:a7:ab:45:6b:5b:
         d6:cb:d1:0c:79:17:48:ea:c8:46:28:92:71:50:8e:e0:83:12:
         8b:23:ab:67:49:08:a7:92:f8:cc:d6:20:14:25:73:a3:11:ec:
         39:5b:c4:1e:6a:09:3d:4b:a1:3c:ab:e6:1b:89:24:db:31:0e:
         ef:25:de:d2:f6:57:b6:66:40:59:32:53:51:55:06:63:07:56:
         85:56:5f:6d:9e:83:ed:89:29:6d:73:54:c5:c5:c4:f2:55:02:
         7c:02:bd:3e:08:a4:74:31:ff:08:e2:35:16:09:7f:88:47:41:
         a4:46:4a:48:c2:d1:4e:7b:83:e6:3f:7f:1b:66:0d:b6:9c:c1:
         b8:89:72:c8:12:3c:1f:10:f8:19:5a:c2:18:58:84:76:ed:76:
         0e:f8:98:74:64:58:d5:eb:2c:14:d6:64:6d:8e:38:e1:94:db:
         81:c7:04:e6:d8:53:00:b3:49:ed:1a:cc:0b:36:da:16:27:53:
         28:a6:91:2d:37:f5:7b:e6:fe:98:87:d9:21:97:91:db:25:02:
         44:f7:57:11:85:3a:66:65:9b:89:c5:a7:14:b0:f4:e8:9b:b5:
         94:ab:7d:49:89:ac:7e:d1:e9:50:e9:35:93:ce:f6:be:1a:3b:
         c6:02:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----