Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File:                     u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier:          dmSKPozyJRzTcJ7UKVHegym6UXEDHv28gO2qUiiDyfY=
Subject key identifier:   88:36:05:5C:0E:EC:F7:78:4B:32:A1:1F:92:24:3B:90:FF:6B:84:2F
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer:       /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial:       01962E994259F0C7144E96B4FB2D17BAC26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number:          0581
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
                          2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: kJvF8nq5K/BYrAlVIrgXOqd2PWeZXBPyBwnBhrHsgNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:42:59:f0:c7:14:4e:96:b4:fb:2d:17:ba:c2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=8836055c0eecf7784b32a11f92243b90ff6b842f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:3b:74:62:9b:74:97:76:d2:5f:fa:d2:d7:
                    87:0a:fe:87:82:3c:44:4b:67:df:f8:94:ee:9f:56:
                    b7:09:6a:de:87:f4:22:d2:1c:9b:4c:28:7e:30:7b:
                    fa:29:b6:8e:f0:a0:30:49:f8:2d:41:0f:3d:44:58:
                    70:4d:a1:66:83:e5:40:fa:a7:a5:f7:4c:40:b5:c9:
                    9d:13:37:07:02:cc:a4:05:3b:20:37:70:ed:3d:f3:
                    47:c0:33:9d:31:ac:4c:34:57:5b:47:91:27:ce:fb:
                    c2:58:04:d6:9b:71:98:30:05:2b:16:69:0d:b5:af:
                    65:35:92:7d:a8:e0:2e:55:8b:fe:1c:b7:99:61:86:
                    0f:9c:70:28:49:ae:9e:d1:9c:36:9e:24:5b:02:7d:
                    18:51:ce:44:7b:c6:a9:f1:c0:e0:b2:5c:2d:bd:24:
                    96:de:19:c8:e8:f7:9e:02:31:79:84:53:f6:f9:87:
                    55:12:03:a5:35:89:dd:e1:25:32:f9:6a:8a:2c:1f:
                    61:17:b2:95:5c:69:3c:a7:36:76:48:5d:3d:e1:74:
                    11:eb:97:7a:79:b1:00:68:6d:09:da:0e:cc:e7:75:
                    d0:6b:87:9b:59:b1:c4:97:7f:6e:77:ce:c6:9c:58:
                    87:85:2c:ba:9f:10:09:cd:a5:bb:9e:de:dd:a0:60:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:36:05:5C:0E:EC:F7:78:4B:32:A1:1F:92:24:3B:90:FF:6B:84:2F
            X509v3 Authority Key Identifier:
                keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:a4:d3:80:6c:d4:d5:28:08:ab:e4:03:6f:e0:c1:0b:74:
         b6:16:db:f7:b2:0c:08:07:16:2c:c7:e7:65:6a:2e:42:da:65:
         02:f8:e7:fa:94:3b:6c:95:72:46:38:ef:29:b9:3f:57:be:b7:
         cd:37:35:2e:a5:43:4b:30:cf:2a:5f:0e:fb:2e:f7:2f:15:2c:
         ee:f9:fe:9a:d2:27:20:7d:d2:ff:aa:a9:cc:aa:8c:d3:67:bd:
         24:cb:78:26:82:d6:92:f9:c1:34:d2:59:f7:6d:55:3d:3a:10:
         d8:cf:3b:d7:23:12:90:54:95:2d:d5:af:3a:19:83:60:fa:bd:
         87:31:7c:ac:4a:1f:29:40:0e:a1:c1:5d:d7:d8:17:a6:0e:00:
         4e:0e:a2:7b:2e:75:48:27:76:ba:c8:bf:31:44:b0:f0:e0:97:
         12:08:6f:f7:40:4b:c1:af:bf:19:85:38:37:6d:03:e9:05:fc:
         13:e7:64:f4:64:c6:77:72:5c:4b:6c:1a:48:00:fe:16:44:9c:
         ff:07:f1:06:fd:c2:aa:1f:5c:87:b5:05:5d:bb:45:c8:92:63:
         e3:bb:c9:34:84:ba:2d:ea:1d:05:d7:79:5d:87:96:fd:ac:50:
         bc:58:78:10:4b:f3:a3:41:66:6b:ca:d4:ba:de:c8:5a:31:d7:
         72:49:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----