Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File:                     uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier:          ACZDrUIRz5rFM50tz1SlJTzlXhSc4zkqqVGt3G2hOXg=
Subject key identifier:   BE:5B:5C:55:DD:61:DA:DD:BA:5B:15:18:41:65:3D:0C:16:16:0D:72
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer:       /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial:       01962F74C93A76C92A60E3FB4C5D51930AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
                          2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
                          3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
                          4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: lS9uhdc/A9torK5YqABe+YzPf02uMwVat/4Q8/BJ/SE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:3a:76:c9:2a:60:e3:fb:4c:5d:51:93:0a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=be5b5c55dd61daddba5b151841653d0c16160d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:ad:f6:d1:ce:fa:aa:05:9b:ee:cd:00:6b:
                    79:90:f4:2d:38:d5:a7:03:41:c8:53:95:5e:ea:51:
                    7a:98:31:38:9b:21:8c:9f:dd:92:bb:8d:6e:39:22:
                    a3:6b:31:f2:5a:03:ec:50:fd:1e:8b:db:7a:ec:15:
                    4d:1f:f0:4a:94:ea:3a:72:65:da:9c:9b:5d:95:cb:
                    e2:37:2c:46:3e:37:4f:c6:9c:78:47:15:b0:d8:c1:
                    fe:0b:76:5b:bb:4c:f1:18:75:ad:55:22:03:cf:38:
                    9c:4a:44:54:6d:ae:9e:de:b3:56:56:17:70:49:26:
                    73:80:58:77:c4:f8:03:60:41:ba:83:a3:77:68:ce:
                    ad:c6:13:f2:c8:99:a0:e5:c2:c4:e1:a5:b0:63:54:
                    b4:a5:9f:7b:31:c7:fc:19:70:1e:be:6c:8f:e2:1f:
                    40:9e:da:b3:6c:fe:ce:e1:87:00:30:ac:97:21:01:
                    c4:3d:56:82:5e:1f:2d:d0:62:5c:44:78:07:3e:fc:
                    2f:4a:81:96:34:48:09:4d:70:e2:0f:45:a0:87:e6:
                    84:9b:3a:37:4c:fd:36:13:41:73:9f:58:22:54:02:
                    87:d8:db:98:cb:e9:fb:e0:54:de:bf:42:91:08:1c:
                    f8:11:06:16:a4:2c:38:d0:81:35:1f:5d:91:b6:f4:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:5C:55:DD:61:DA:DD:BA:5B:15:18:41:65:3D:0C:16:16:0D:72
            X509v3 Authority Key Identifier:
                keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:e6:f3:3e:08:cd:ba:c5:b8:57:dc:ad:bb:1f:13:de:08:
         2e:c0:fa:76:32:e0:7a:3a:3c:90:e5:96:13:e2:6b:c0:81:32:
         b2:da:86:bc:e4:80:e9:da:69:6c:26:f3:7f:23:40:70:11:f8:
         6c:87:cd:a2:0d:85:c9:4a:a8:f6:b8:a2:b4:1b:bb:17:2a:bc:
         b3:ea:fe:de:7b:a6:8f:b3:ff:c9:a3:51:50:ee:f4:db:48:f1:
         c1:9f:47:46:bc:8a:63:1c:de:64:65:cf:fc:a1:1c:ab:d9:53:
         06:79:bf:88:4d:43:aa:ef:61:cd:1e:ae:01:7d:3d:30:56:4f:
         66:3a:5c:69:3f:07:d3:42:47:e8:08:fd:de:f2:1f:aa:42:01:
         57:d4:27:52:c3:d3:78:11:52:95:86:45:0b:f9:03:46:c5:60:
         e7:44:4f:8f:f2:e4:9f:59:d1:da:50:e5:85:d4:82:cf:ad:6f:
         ef:aa:88:43:ae:64:c4:68:ce:93:db:e4:06:53:a1:c4:ae:94:
         c3:37:ed:58:27:68:39:12:0f:d3:54:19:5f:db:32:61:d8:b6:
         9e:dd:2c:16:a8:e2:67:6b:44:08:36:c7:fc:7e:51:c2:86:6f:
         ef:34:ab:2e:d4:5e:22:35:ba:ec:97:1f:8f:5f:dd:39:14:98:
         3d:93:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----