Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File:                     ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier:          ARFgr+3SQoJebgg8wUSyVXitpB+33bYabm7ez/5wlUE=
Subject key identifier:   89:B2:05:7A:8A:8E:6A:85:C6:66:C3:47:CA:8C:A0:DC:5F:FE:F6:13
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer:       /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial:       01962ECFD8D0A6E6A2F0A5AE825957B19B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number:          0DEE
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
                          2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
                          3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: PysDUYUnG6ICxUZD2w5ON5A5PDAvwoCmbU2Em8E4k+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d8:d0:a6:e6:a2:f0:a5:ae:82:59:57:b1:9b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=89b2057a8a8e6a85c666c347ca8ca0dc5ffef613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:7e:aa:b0:95:aa:b7:0b:d7:c7:0c:2f:28:
                    91:bf:42:87:3e:48:63:45:10:89:76:e4:3f:13:c6:
                    7c:e0:8f:3e:72:a1:18:ea:07:ed:db:50:bb:1a:f8:
                    f9:3c:7d:97:6f:26:b9:de:3a:97:22:00:ab:8f:34:
                    7a:e8:02:8f:fe:a4:cf:c7:fb:75:b5:48:28:8e:3c:
                    72:0e:06:cd:af:f0:c9:e3:05:f2:6f:3a:3c:e1:26:
                    f9:e3:52:ba:a0:0d:de:f7:e1:46:46:17:d8:c0:65:
                    5f:f1:9f:5e:e3:84:9b:a1:59:8c:e0:20:32:dc:f7:
                    57:cb:13:1f:22:70:52:46:9c:22:a3:bb:6c:25:9f:
                    8b:42:43:da:7d:be:b7:a8:e3:8f:27:93:e7:ba:69:
                    5c:83:26:9b:82:b7:4c:8e:a2:5a:34:01:94:6c:63:
                    ab:49:00:50:2d:5c:72:4a:1f:e6:c8:43:0d:79:24:
                    9d:98:cc:33:28:e7:4e:f1:56:a3:75:b8:b9:7e:7f:
                    5a:24:21:90:ce:21:c2:d2:b3:44:b2:7b:9c:e4:60:
                    e0:99:f1:4b:30:34:5b:22:02:a6:b8:0e:0a:5c:0e:
                    ee:76:5b:b6:28:0b:3b:cf:69:85:9d:5c:21:fd:0c:
                    d3:65:a7:5e:b3:9f:4d:15:64:28:9b:d1:6e:de:96:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B2:05:7A:8A:8E:6A:85:C6:66:C3:47:CA:8C:A0:DC:5F:FE:F6:13
            X509v3 Authority Key Identifier:
                keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:27:e2:9c:41:a6:c0:d1:1e:a4:34:2c:e6:b4:f1:5a:6c:
         9d:bc:8a:32:54:5b:c6:85:ef:99:4c:af:8c:44:7f:69:95:cc:
         0e:3b:3d:35:b0:3f:cf:2f:2b:c5:42:c5:fd:83:5f:09:03:79:
         7b:37:5b:4e:80:13:aa:f7:8e:dc:0e:4d:56:d1:71:68:5f:df:
         ab:9e:dd:64:77:2c:7d:00:1f:0c:2f:d0:49:41:2f:04:95:54:
         49:df:d4:9a:94:58:62:e8:1b:34:12:b0:27:5d:01:9b:8c:b0:
         ed:0d:a7:0b:2f:81:ab:45:ff:5d:da:63:6e:bd:0a:5b:07:7b:
         19:f3:bc:b3:b1:27:6e:62:42:d1:db:fe:6f:97:21:c8:50:a4:
         60:22:9a:43:ba:ba:26:83:dd:64:00:55:c0:70:8f:53:80:32:
         e8:33:ec:21:56:db:9f:ac:52:8f:87:35:75:a1:d7:a3:52:2c:
         f9:88:0a:66:7e:7c:a3:f7:ff:64:98:26:c1:86:86:75:d4:ef:
         b0:6e:74:55:0b:93:23:2f:36:16:01:49:0b:5a:88:41:cd:d8:
         5a:f2:53:80:98:8b:c2:36:8e:ac:b6:42:53:27:51:11:d7:f3:
         a8:95:22:a8:df:08:1e:c1:83:33:12:07:b9:ee:c0:6c:56:8d:
         c9:2b:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----