Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File:                     u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier:          5nTe9l3OmZ3METf207lSDJMz10ilcesvyT+gQwouHu8=
Subject key identifier:   CE:FE:43:2E:35:B5:E9:28:8D:32:B5:F8:CB:FF:03:90:50:7D:6B:53
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer:       /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial:       01962E98A0EB1714441275D94393884AEEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number:          0828
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: TfKxLWuZwOLvMKdjs/27n7JI/JvW5wItNBFky4Dx4LI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:eb:17:14:44:12:75:d9:43:93:88:4a:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=cefe432e35b5e9288d32b5f8cbff0390507d6b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:6f:35:f4:94:64:05:4f:d2:48:66:df:31:
                    fc:bf:27:ed:ad:aa:3f:9b:aa:30:fd:ae:ca:c5:90:
                    cd:fc:1c:5e:a1:c1:0c:0b:a0:75:e7:28:1a:ab:60:
                    11:16:e3:68:72:51:4b:cc:53:35:50:5c:77:d5:9f:
                    d8:9f:de:06:6a:07:1e:a0:f4:56:1d:f3:dd:2d:12:
                    30:3a:29:b1:ff:a2:43:c9:07:29:3d:17:d7:b9:72:
                    1c:ec:fb:b1:c8:89:89:28:82:39:62:75:ab:4a:b4:
                    a7:fe:df:0d:a0:e1:86:c2:4d:22:69:b0:f5:79:53:
                    06:35:0a:76:ac:54:52:41:70:f9:0b:0f:f4:c2:4c:
                    72:88:ab:6f:b1:fe:b2:c3:f5:d4:49:10:78:16:51:
                    22:1d:bc:26:41:10:26:82:bb:c6:48:dc:31:2e:f0:
                    75:ea:28:86:96:10:85:35:d0:d4:d8:b3:9f:ee:f8:
                    06:b8:b2:d3:3c:f4:00:c6:0e:e0:7f:90:d8:56:f9:
                    4d:8e:45:77:32:ba:17:6e:df:2c:d6:29:03:ae:78:
                    ad:79:31:bc:b2:0c:7d:c6:b2:a9:3f:b6:b8:21:7a:
                    03:9b:b8:3a:e1:90:fd:ba:d2:0f:c3:13:cc:ff:7d:
                    61:f5:52:89:7c:0e:af:f5:b5:15:43:45:7e:55:b2:
                    89:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:43:2E:35:B5:E9:28:8D:32:B5:F8:CB:FF:03:90:50:7D:6B:53
            X509v3 Authority Key Identifier:
                keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:5b:b6:b4:64:f6:58:c7:39:1f:73:97:e0:ad:87:6a:f5:
         58:84:7e:26:6f:6f:92:91:b7:77:c6:cc:3b:d0:a0:37:cf:34:
         02:b8:0f:6f:d2:a4:2d:c9:7c:0f:83:31:45:69:f9:a7:02:c9:
         89:63:4a:2f:a0:70:dd:d8:05:2b:4e:cb:af:10:53:d0:f2:44:
         87:8c:76:17:91:4c:67:11:55:bf:0e:e3:14:40:d4:58:b4:49:
         38:63:44:30:d7:c2:b6:91:e1:97:88:e7:23:7e:1c:ee:14:f5:
         54:6c:4b:14:fa:3a:8e:f7:e2:f4:2b:fb:d8:a4:47:4e:fe:85:
         a7:51:58:7a:d4:2f:44:53:5f:14:37:dc:87:19:90:71:e9:48:
         29:1e:30:06:21:90:f2:25:8d:52:b6:8f:85:91:66:5f:1d:bf:
         81:7f:7f:e6:15:b2:8a:f7:0d:54:65:52:1d:f7:fc:c8:a0:e6:
         78:ef:ca:12:d6:10:85:67:d0:88:f1:0c:6f:ca:44:44:25:7f:
         07:fb:62:53:8a:29:7c:67:05:9e:34:2e:4e:97:6c:0d:0f:c0:
         1d:b5:22:64:83:a2:bc:40:97:c8:67:51:62:3a:ad:af:64:fe:
         40:02:a9:c2:9d:87:da:68:6a:47:0a:b8:94:07:83:77:c7:e9:
         da:41:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----