Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
File:                     uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json)
Hash identifier:          pfMpOpQgeDtE+W5s5waAQsfOLATmW/Qg7TwIahSvnw0=
Subject key identifier:   A2:2D:E6:88:9A:67:CB:4E:54:87:AE:C8:C5:E2:D7:74:BC:28:CD:84
Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
Certificate issuer:       /CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Certificate serial:       01962F071791114A6F03034CE902D09AA6A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
Manifest number:          0483
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: OfkheCJtBUbypODfCGLIWAZ/r9opqQXnX04BTUGLJBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:91:11:4a:6f:03:03:4c:e9:02:d0:9a:a6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=a22de6889a67cb4e5487aec8c5e2d774bc28cd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:7d:fd:76:f3:23:a0:e5:67:b6:5e:54:19:
                    76:4b:9e:d0:af:7c:08:a3:79:34:42:54:bc:3b:ec:
                    28:91:f3:13:f7:a5:31:06:6c:e2:ef:89:7b:d9:8b:
                    a9:6e:de:99:a1:19:f7:5e:1b:78:00:ae:bf:49:d2:
                    d7:9a:03:30:33:aa:d8:ba:17:2d:d4:a4:44:ad:5e:
                    85:01:c5:5d:6f:13:d8:68:0a:59:f0:b9:4b:56:b7:
                    59:96:58:55:97:87:4f:d2:8b:23:05:d9:e8:eb:cb:
                    66:b5:5e:8d:2b:1a:6c:92:04:e7:7a:b2:8e:aa:10:
                    25:a7:c6:b1:b0:72:2d:2a:62:99:7c:f4:27:17:28:
                    c3:0f:da:ce:f9:24:da:e5:79:b1:e7:d6:0f:0c:a4:
                    e9:68:c5:9f:78:71:bb:37:df:39:73:84:40:20:8a:
                    13:13:ca:68:4f:a1:78:65:24:8c:5b:af:94:cf:dc:
                    26:73:71:92:7b:f2:94:e2:62:ea:10:a0:c6:cc:53:
                    1f:b0:d8:ba:14:da:22:04:e3:24:f3:b3:2a:1f:61:
                    53:26:2b:74:ed:32:0c:9b:9e:ff:9e:2e:fd:65:c0:
                    a8:69:7b:33:d0:ea:8f:fa:aa:1e:47:cc:26:bb:fb:
                    b7:63:02:85:62:d5:6f:c2:d4:b1:22:dd:27:d7:2d:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2D:E6:88:9A:67:CB:4E:54:87:AE:C8:C5:E2:D7:74:BC:28:CD:84
            X509v3 Authority Key Identifier:
                keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:d4:08:3d:b9:4b:40:5a:dd:c4:1c:7b:e7:ba:a3:6a:87:
         ba:13:be:ca:d1:84:62:2d:51:d2:0a:88:50:d5:05:38:fa:53:
         12:e0:f0:13:db:d2:a9:19:9a:c0:bc:ed:1d:9c:0c:73:0d:4b:
         82:4d:ac:99:60:16:ba:fb:22:b4:d1:29:96:67:b6:b6:b7:b5:
         40:1a:ef:45:e2:59:62:73:aa:0c:80:34:f9:a9:63:58:66:96:
         f6:6c:61:46:fe:9d:c3:14:4d:b6:c4:38:56:7c:7f:35:21:00:
         c8:92:f9:d5:c0:66:42:28:bb:07:4f:48:0e:29:e0:ec:de:63:
         89:bc:79:7f:2c:db:6b:34:27:11:73:9c:86:e0:d0:60:ff:e2:
         46:37:05:ff:c4:cd:b8:22:6c:75:cf:e0:8c:6a:c9:22:65:ce:
         c6:ee:2d:94:62:95:4a:c4:81:d3:9f:36:9b:21:fe:2c:d0:f1:
         f1:97:7f:d0:c5:53:f4:bb:46:bf:61:03:02:65:d8:fc:28:3e:
         b9:ee:8a:1d:e2:2a:78:35:7d:a9:d1:b6:80:3c:68:21:1b:fb:
         a6:d0:2c:08:6f:fb:68:a2:4a:05:9f:a4:d4:6d:24:43:26:8e:
         82:14:46:14:b9:2f:96:e4:93:90:34:3e:0f:2f:b8:c1:4a:5b:
         72:d8:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----