Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
File:                     uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft (raw, json)
Hash identifier:          3nxXqjRJ3b/Slee53RRgxdJpHZVSD8t0GDK3WNmq5EU=
Subject key identifier:   B9:38:C7:CE:5F:89:07:91:D6:A2:61:21:EC:E9:8B:8B:37:FD:D0:7E
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       01962E61868044FECC71F326110DCBA50A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
Manifest number:          1142
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 9aE9E6d_EKy3oeQ-EJ1caU0SXhA.roa (hash: MOajzA51VDkH0OS4p+0GDz6a0fba+85ui1iZQU0NXn0=)
                          2: Lfpr_zOjD5YwnM8YgTsiLnWpDfA.roa (hash: OmRDjkPQ+18qn+UxGR2uk7w6di8Xz9C4g7ccgSrHYC8=)
                          3: t0ABKlreTdgbRnQWxypS9Vsg-qo.roa (hash: DhyTprna0g/snYnfn/Phy/SkjXi5ucdmEspJ/7aAlds=)
                          4: uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl (hash: 9RkPfb0LKTLrPKHNB5pbC7/EX53lFQI0v1vfeU/WnsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:80:44:fe:cc:71:f3:26:11:0d:cb:a5:0a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=b938c7ce5f890791d6a26121ece98b8b37fdd07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:9f:47:d7:9a:9a:63:cf:90:b0:0a:c3:55:
                    6f:fa:eb:5d:8e:2b:0d:4a:08:7f:dd:cf:ad:15:30:
                    7b:be:bd:bf:d5:7e:99:8a:b2:74:39:8f:73:65:39:
                    bc:ef:39:57:9b:2e:7c:e0:ef:5a:55:60:4e:14:77:
                    c6:10:00:67:59:92:41:77:36:a4:ee:d2:cd:43:4c:
                    3a:9c:8f:0a:f3:13:c2:c0:e5:77:0a:3d:2c:57:7e:
                    f8:f7:a8:da:3c:08:6e:d6:47:61:c8:51:1f:46:f0:
                    4d:1f:9c:36:e1:3e:a1:82:5f:f6:13:0a:75:90:f2:
                    24:d0:11:d1:df:b7:94:c6:02:28:05:50:94:04:19:
                    23:60:85:cb:28:ed:d9:71:be:04:d1:9b:e2:5a:0a:
                    62:2b:c5:61:ee:27:8b:84:32:17:1c:e6:bf:3e:1b:
                    bd:4c:6f:97:70:08:c9:f2:a6:8f:58:cd:e5:d5:dc:
                    6e:50:91:1b:06:c9:47:0b:dd:83:f9:70:04:db:9b:
                    fd:8d:28:6f:62:eb:2f:8e:e0:db:07:ed:d4:5d:8d:
                    b0:db:65:0e:1e:a7:6e:f3:24:40:7e:09:75:57:c2:
                    18:ce:5f:19:a1:f1:6d:0a:5c:e0:cb:d1:87:cd:c5:
                    25:18:84:14:12:db:06:b6:5e:0c:cd:07:51:e4:9c:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:C7:CE:5F:89:07:91:D6:A2:61:21:EC:E9:8B:8B:37:FD:D0:7E
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b3:74:98:cb:bb:68:1f:d7:68:1a:c1:c0:81:15:0e:52:38:
         1a:69:f7:4f:b8:c2:ea:c1:cf:58:f9:6e:ec:95:c0:b0:e2:c2:
         a7:17:33:17:6e:50:27:f0:e0:f4:f6:a4:02:98:97:9b:b3:21:
         0b:56:af:35:b1:07:bc:ac:e6:74:ad:b9:dc:9e:c4:72:db:78:
         32:57:bf:61:d3:74:b1:54:48:68:72:df:0b:c8:10:d2:8d:85:
         2a:92:9d:06:f6:13:1d:41:7a:19:cd:db:50:28:02:95:8b:49:
         12:39:7d:b0:ad:d6:1a:8d:f0:98:58:6a:ec:e2:94:25:42:87:
         11:b4:bb:07:43:22:01:fb:5c:e2:f8:8b:92:4e:e0:d5:8c:20:
         4a:82:91:1b:bd:84:1a:dc:9d:81:f5:94:c3:60:1e:2e:c4:b6:
         21:64:f2:cf:55:42:c9:69:5c:89:ed:1f:23:29:3c:77:61:2e:
         e3:33:14:73:67:16:08:1f:67:d4:39:b8:66:56:b3:42:c7:9b:
         d9:76:81:b1:b9:83:f0:a7:fc:34:57:65:46:8d:59:63:85:8d:
         ce:15:fa:70:ff:88:4f:09:2b:1e:48:8b:8e:6d:71:90:f1:eb:
         f9:2f:54:8d:53:fb:5a:11:b1:87:31:3c:f8:0e:35:2e:67:4e:
         e9:c1:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----