Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File:                     uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier:          +J0QLY4GyNO3TJ9ta+mvorkjpc8IYKd4WOzXj4SibQw=
Subject key identifier:   E1:8D:C2:6B:DC:55:F6:E6:81:06:47:D0:3D:4B:AD:D6:C5:1F:03:77
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer:       /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial:       01962F3DB21426B1F0190C05C815B5692B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=)
                          2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: CydFPQuOZo1RTu8LIan8jxK5X7AcIvXKUjItImgvPWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b2:14:26:b1:f0:19:0c:05:c8:15:b5:69:2b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=e18dc26bdc55f6e6810647d03d4badd6c51f0377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:b9:0c:85:64:fc:97:65:42:f9:f5:f4:46:
                    7c:1b:ed:79:03:3c:6c:df:87:a9:c2:da:19:ad:af:
                    bf:31:85:f8:59:3b:3b:93:1b:64:79:94:df:d5:83:
                    e2:11:a7:1b:ee:59:2a:94:41:43:2f:b4:07:22:48:
                    47:bf:8c:d5:d4:42:73:9e:cf:7f:72:83:ca:b0:3c:
                    a1:a4:c9:5a:73:30:7a:6e:25:51:fc:1b:14:0e:d5:
                    b1:e7:d6:78:dd:b2:8d:82:bd:61:93:d7:75:c2:63:
                    ef:21:ff:f2:2e:29:4e:17:60:d7:2b:9f:3b:82:a9:
                    e6:c4:35:26:1d:01:95:ab:cc:3b:33:ea:39:8d:ea:
                    94:b5:8d:b9:21:bf:9c:de:26:63:eb:5f:62:11:52:
                    03:25:ab:64:95:25:64:f4:f7:fc:55:a9:d4:ae:8f:
                    19:86:5c:a8:25:89:fa:65:ba:ff:ee:a7:89:41:05:
                    fe:b3:65:5a:22:d1:c9:30:77:23:63:d6:1a:36:80:
                    3c:aa:63:f1:7a:cc:f9:ff:e9:ee:83:07:28:e1:f1:
                    e8:a5:2c:80:b8:5e:c2:e4:4e:22:55:b8:12:33:ed:
                    d7:42:94:63:93:35:12:50:1b:18:fc:cb:29:a1:fa:
                    6b:f4:9d:ed:fd:6c:0a:e3:be:06:6a:fc:e8:45:e2:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8D:C2:6B:DC:55:F6:E6:81:06:47:D0:3D:4B:AD:D6:C5:1F:03:77
            X509v3 Authority Key Identifier:
                keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:06:32:a1:ee:3b:f7:ce:37:73:e3:b7:4b:8d:5b:f5:76:ad:
         27:cf:0a:4f:1f:14:22:84:df:54:81:f6:23:a5:05:03:e2:0d:
         13:8f:00:00:b7:ad:58:63:23:da:ad:53:05:82:ad:2b:d0:8a:
         30:be:75:23:00:9c:dc:35:14:d4:f1:ed:7f:a5:a1:6c:52:c6:
         2f:54:52:9c:71:16:64:ae:31:65:61:8a:a4:d1:55:ee:fe:3b:
         61:2d:10:53:6c:84:9b:42:f2:2a:d9:86:9e:86:0f:18:a0:2e:
         ea:ab:80:80:f0:2c:cc:52:56:5c:d7:89:9b:a1:e2:82:71:9c:
         4b:a1:2b:b0:38:62:21:39:3c:57:50:b8:f8:b1:aa:16:9d:86:
         22:fc:0e:18:5d:01:5c:2e:4e:b4:16:b5:fb:e0:e1:b8:5b:49:
         83:01:e1:80:b3:72:82:d8:53:df:af:27:d3:0c:a5:b7:a7:eb:
         be:2e:bb:11:cc:7d:4f:93:2e:52:ef:97:26:9f:00:1e:48:17:
         c7:b3:4a:c1:5c:0d:f8:f0:89:3c:94:17:52:61:ce:6f:55:67:
         f5:07:9e:39:85:9b:a5:ca:6a:3f:f4:a6:25:13:69:6c:7f:07:
         93:e3:bb:91:49:99:d5:66:17:92:67:1b:73:eb:ba:60:57:ef:
         39:2a:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----