Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File:                     U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier:          qzSQ0oqeLF+wMcSSgzpOZw3SI9Sg5OUeo+L255I4J+w=
Subject key identifier:   B9:BE:5D:8F:5A:6C:3A:3B:19:71:0D:45:0B:7C:2B:6E:43:02:AB:2F
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer:       /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial:       01962E61F91CC29C0CC9071645EC62C87C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number:          091E
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: GPBna_IoKKdQyaNksGJT2yWTCj4.roa (hash: TAihNlvs0SdUgl2vxovWMBnyUqa0RWqHLKo09+4ZR88=)
                          2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: PXbamSkR4Q00bSZhD4izwye/BtNJ65dpUQAl2eisTjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:1c:c2:9c:0c:c9:07:16:45:ec:62:c8:7c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=b9be5d8f5a6c3a3b19710d450b7c2b6e4302ab2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:48:43:6e:42:82:b8:0f:1d:b2:32:3e:57:
                    d3:81:a3:c0:7c:40:bc:90:24:44:fd:a6:98:84:ca:
                    1c:45:0c:28:4b:a5:fa:62:ae:b1:db:b1:7a:ed:23:
                    4c:c7:cf:cd:72:16:f6:7f:6b:59:cd:cc:d6:e4:7e:
                    b1:48:ee:99:d5:6b:60:1f:61:95:9e:83:7a:9c:32:
                    35:ac:76:19:16:1f:58:22:01:18:09:7e:47:49:67:
                    1a:0f:97:dd:94:d8:de:ff:0b:57:e2:f6:be:76:f7:
                    b8:74:42:25:c2:9a:c6:1c:e2:a6:02:df:f6:a8:0d:
                    29:7b:b4:00:fa:ac:5c:e0:35:58:0d:93:0f:54:b2:
                    77:ad:d9:86:fd:18:86:6f:19:96:f0:5c:50:95:ad:
                    21:71:ea:0c:cc:f9:44:6c:d9:ec:88:a6:54:11:67:
                    1e:46:53:12:4f:6e:15:1e:09:6b:5f:ed:c1:77:fc:
                    06:03:44:8e:41:1d:ec:7f:03:c1:65:b4:26:d8:6d:
                    36:6f:66:72:44:7f:1a:a6:04:53:e4:35:64:06:63:
                    94:50:0a:42:42:57:8b:d0:21:af:06:51:e3:a1:5b:
                    6b:ff:bb:a7:d9:2a:28:14:f6:3f:3c:85:42:cf:75:
                    2b:d6:9f:cb:21:f7:34:a1:e2:b1:02:3b:27:27:10:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:5D:8F:5A:6C:3A:3B:19:71:0D:45:0B:7C:2B:6E:43:02:AB:2F
            X509v3 Authority Key Identifier:
                keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:62:67:25:55:4f:bd:30:8e:ea:6f:09:63:06:c0:b1:25:f4:
         51:38:45:b7:2b:ae:ea:21:cf:d5:07:3b:c5:80:4c:3a:94:43:
         f5:32:8c:55:33:31:8e:31:0f:64:f9:4f:e3:54:5f:19:fb:56:
         74:92:5f:26:65:f6:21:d6:2e:68:9c:1f:d0:86:76:bd:b0:dd:
         66:e9:61:cc:3e:78:96:06:8a:2f:58:99:4f:b6:99:c7:f1:40:
         7f:d3:ff:b4:12:9c:33:bb:39:48:7f:0c:81:7f:26:73:3d:06:
         bb:44:3a:d6:11:f5:2c:33:a8:ca:4a:9b:7b:3d:0f:d3:f1:52:
         8a:b9:04:d8:66:77:4b:20:12:a7:0e:b1:90:94:49:f2:1e:2a:
         31:88:0d:08:86:79:b9:92:c8:8d:d0:e6:fb:28:54:45:e8:f1:
         2a:a6:af:74:77:fe:87:a4:65:7e:e2:e8:b7:98:2b:21:7d:86:
         fd:35:03:83:9c:8a:dd:d7:f1:75:2b:df:dc:7f:07:da:bb:8b:
         b3:1c:be:81:7e:d4:9d:c4:ab:62:7a:26:17:a6:92:90:8a:0c:
         c4:8e:ec:49:9d:97:ba:69:64:ce:43:ce:24:b1:bc:11:19:33:
         6f:10:83:f7:92:1e:5c:11:74:9c:a7:b8:80:8c:4c:99:a6:ad:
         c8:1f:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----