Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File:                     uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier:          JFfvGJBEppsFw3tBvIH22mSy7+0Gu3PCTaPN5iuepgY=
Subject key identifier:   DF:E9:AF:39:17:D5:E6:19:40:35:F4:75:C8:BB:A9:67:5A:C1:E7:BC
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer:       /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial:       01962E98669C07A097D6F36424809D78B998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number:          03DA
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 6CYEFdNOzyIbBisD1D5M9NGwi4c.roa (hash: TPBGKST5Y+J6z2fr0kA62OOn3rCc61+iQygU8zg4rmY=)
                          2: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (hash: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=)
                          3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: RuTfEKqeVW/sUNeXw9Hd894N08WAECNvLQ6ArjkovQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:66:9c:07:a0:97:d6:f3:64:24:80:9d:78:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=dfe9af3917d5e6194035f475c8bba9675ac1e7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:fe:86:b5:98:37:63:68:5f:3e:aa:98:b4:
                    8e:70:78:09:93:65:68:b8:bf:d4:66:7d:47:f0:a3:
                    0a:f1:ae:41:96:bc:70:e2:93:91:41:7a:b8:76:7b:
                    95:f3:23:1e:df:e3:06:d7:a4:a7:06:94:61:bc:c3:
                    48:52:cb:ea:56:69:75:90:39:79:a8:91:15:0a:ab:
                    4d:3d:ec:54:6e:49:c9:e2:52:c1:71:16:54:80:0f:
                    c6:bb:25:2c:96:cd:88:28:0b:21:c4:00:db:eb:60:
                    a3:d5:60:8a:4d:f5:03:40:ae:93:7a:31:f0:88:3a:
                    8a:3f:3f:a9:bc:76:82:73:bb:61:83:5c:33:3b:90:
                    c7:50:6c:23:08:27:8d:ff:60:e8:43:7a:33:bd:60:
                    7c:e8:36:62:c7:5b:e0:d5:5e:ed:9f:30:56:e2:18:
                    c4:d9:d4:76:7b:3b:b3:18:1b:ba:4f:d7:eb:de:df:
                    fa:79:fb:d4:65:99:d6:64:e4:b5:4c:15:a8:24:ce:
                    6c:66:51:d9:e0:11:41:c6:1b:1c:48:37:a3:7a:a6:
                    9e:bc:01:66:f1:c4:bf:f4:a8:19:cb:2a:5d:60:f8:
                    aa:8d:44:05:29:6e:31:90:24:41:e8:88:c0:9e:1e:
                    f7:5f:cb:92:02:96:64:ab:a6:a8:43:5c:ba:1d:f1:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E9:AF:39:17:D5:E6:19:40:35:F4:75:C8:BB:A9:67:5A:C1:E7:BC
            X509v3 Authority Key Identifier:
                keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:af:91:1e:da:ba:11:7c:20:32:7a:86:99:e0:d1:4d:0e:24:
         0d:3e:ea:30:9f:e3:08:10:41:41:9e:01:82:73:32:69:bb:fa:
         5e:2a:66:b5:22:7f:39:05:71:f0:52:b8:77:59:85:dd:12:aa:
         65:f4:db:ee:72:34:b9:90:1c:e1:91:b3:85:51:30:c6:a6:6c:
         6d:77:de:67:03:11:a9:69:3b:d7:4a:03:45:e1:32:fc:76:5d:
         63:28:0d:82:03:a3:77:a3:0a:85:c2:48:30:ef:35:aa:88:a8:
         cc:7e:19:60:88:3a:53:7b:2c:67:6c:d9:4d:84:f9:44:8e:a9:
         6a:5a:c5:a8:6f:35:35:09:e7:90:17:60:c4:15:59:39:09:8c:
         98:f6:ed:13:94:12:c6:e0:c4:d4:b8:37:bb:01:dd:4f:15:f0:
         7c:4a:2b:b3:eb:c4:84:eb:18:9e:fa:2a:7b:e8:4a:e4:b4:56:
         ef:47:fd:c5:32:e9:0b:da:7b:b4:21:a4:24:a7:8d:af:65:8e:
         8d:fb:2d:b7:07:1b:e9:e4:57:b1:7f:39:d2:e6:be:08:a8:14:
         23:2e:b7:16:53:fa:4e:1c:db:e1:48:e3:69:63:ff:2d:46:b4:
         5f:4f:78:12:58:90:9a:bc:4f:62:93:c8:62:d6:7d:d0:d1:f7:
         d5:a4:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----