Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File:                     ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier:          ALTlqQNMTIK8U/kn8xkfHHmB3ehSdCuu5Iin8R+qylQ=
Subject key identifier:   B4:71:F3:28:33:B9:67:2B:49:D1:61:2C:E9:0C:16:D8:88:32:E4:E5
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer:       /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial:       01962ECFEF95A2F50F1FBA19B94EE8313861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:41 +0000
Files and hashes:         1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
                          2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: ghC98NRLSGe9tzjLTq/TK6PYV1wHMmBHHi0+ZSoW2yc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ef:95:a2:f5:0f:1f:ba:19:b9:4e:e8:31:38:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
        Validity
            Not Before: Apr 13 11:01:41 2025 GMT
            Not After : Apr 14 11:01:41 2025 GMT
        Subject: CN=b471f32833b9672b49d1612ce90c16d88832e4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:79:f0:ad:0d:1d:26:22:fb:ab:62:e8:cb:
                    e3:50:f4:27:c0:ad:e1:32:84:92:df:9a:12:59:f9:
                    cb:dc:a3:75:4a:18:c3:3b:95:7e:97:f0:b8:68:3e:
                    fb:11:e0:7e:a9:f9:bb:30:ce:f4:d6:02:6f:f7:be:
                    68:90:cd:6a:57:ab:09:d9:48:08:c0:df:63:21:d2:
                    2b:e5:ad:06:0e:8d:4d:7c:bf:7b:30:1d:79:05:0f:
                    fb:ff:81:81:a2:c0:9e:d6:d6:4c:7b:05:84:34:4f:
                    29:6e:ca:02:cc:12:2a:a9:9a:76:06:e5:96:cb:b3:
                    0e:68:4e:32:35:02:11:06:75:9a:60:28:b1:3a:75:
                    cc:e4:ae:13:9c:49:90:af:4c:a0:6c:0d:d6:f8:50:
                    5a:d6:29:8b:96:41:d3:05:47:5c:e7:a5:54:c7:16:
                    ce:82:bd:4d:9c:b8:ba:b9:38:3b:c5:1a:40:ff:5a:
                    70:d6:46:7b:80:03:0d:29:93:1c:53:01:e4:9f:0d:
                    a1:cd:99:f7:1c:32:e9:ee:54:f2:9d:a4:9c:3a:68:
                    ec:ab:a3:33:65:33:f3:a5:17:45:85:1e:ed:8d:52:
                    8d:83:f7:d1:af:8b:d6:d9:bc:4e:54:7f:50:29:ca:
                    4e:77:aa:02:91:4a:11:24:83:65:8d:3e:f4:05:34:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:F3:28:33:B9:67:2B:49:D1:61:2C:E9:0C:16:D8:88:32:E4:E5
            X509v3 Authority Key Identifier:
                keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:11:99:bb:f2:64:2f:72:83:09:19:3a:1a:01:d8:c0:cf:
         fa:09:a9:1d:e8:d1:30:41:79:35:66:55:98:6c:a3:d2:f6:c0:
         5c:ca:6f:9e:bf:34:3d:e3:66:44:f2:2e:62:42:c1:f3:19:71:
         5a:ae:07:89:e5:12:f8:70:77:2e:32:cf:65:07:9b:9c:96:37:
         c6:08:46:ad:40:93:0b:68:25:8b:05:ba:68:4e:6b:c1:91:db:
         f9:84:d7:39:09:35:35:8d:0c:77:1c:11:87:8e:97:5f:63:f6:
         57:4e:f0:7c:c7:96:e7:02:0f:93:98:c5:95:a5:d2:d9:3c:0b:
         26:3c:2c:cb:a6:3c:9d:04:8b:81:8d:62:4f:7f:18:28:de:cb:
         e9:ff:aa:a2:5c:7e:eb:f0:55:da:3b:39:31:d3:99:ef:88:dd:
         68:77:96:5e:00:6e:80:13:5d:46:2a:f2:ea:15:c1:83:f2:04:
         d0:f2:6d:42:49:fe:6b:8c:24:24:f5:fc:ae:da:be:9f:20:bc:
         ce:89:15:90:6a:08:b1:3e:47:11:5f:bb:ce:26:ad:74:ea:9c:
         d1:6e:75:bd:d5:16:e5:3e:7e:2d:5f:d6:39:b2:5b:08:4e:31:
         26:7c:0d:29:99:c3:2b:47:ba:6d:03:5c:41:c2:67:74:cc:1b:
         72:4c:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----