Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File:                     0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier:          uVfrRgETNv5x72F9lVTkV5PQODxXCs1/4nXkL/XlqU4=
Subject key identifier:   AF:B5:F8:C6:93:FB:85:7F:E3:B7:97:8D:3D:79:B5:CD:80:FE:56:EB
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer:       /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial:       01962ECF6A90DBFE54C5B043D694B2EBDBD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number:          097D
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: KmUiQuIevjwkSFkLnwxs7M+11MHQaBmX948xwr5GZZU=)
                          2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
                          3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6a:90:db:fe:54:c5:b0:43:d6:94:b2:eb:db:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=afb5f8c693fb857fe3b7978d3d79b5cd80fe56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:e5:13:d8:b6:01:f8:3b:07:dc:2e:f6:c6:
                    27:79:b4:ff:32:8a:97:30:18:cc:66:54:af:a5:90:
                    58:85:a6:46:7b:d1:69:08:d2:30:d1:41:c9:f8:d9:
                    34:4f:02:1f:4e:96:3c:9f:37:d0:ca:18:56:22:cd:
                    0c:b7:d1:78:8d:e4:24:42:f2:f8:90:2f:2e:30:6b:
                    c4:4b:d6:45:b4:07:24:d5:d2:c7:d7:61:90:8e:69:
                    14:42:37:ac:c7:2c:2f:28:91:17:c1:99:dc:1f:2d:
                    40:31:71:23:89:50:83:72:00:b0:fa:d1:0c:ac:cc:
                    ff:5f:e0:6f:be:ef:6e:e4:c7:56:78:f3:20:19:3e:
                    11:6f:88:54:35:fe:fe:23:5b:45:a7:ae:f1:b8:e5:
                    b0:33:9c:71:15:99:7f:4f:c9:86:b3:f0:aa:71:9c:
                    3d:47:a7:10:19:68:9f:b2:a1:a3:42:b6:a2:f3:30:
                    fd:49:d3:f7:f0:8a:02:25:3a:c5:07:42:03:81:0c:
                    31:5b:c6:c5:cb:2a:f5:06:8a:fa:f3:30:68:9d:f6:
                    43:b1:ec:80:60:ec:6e:a3:6d:2d:63:33:90:eb:71:
                    e4:02:58:6e:f3:1f:76:8b:cd:05:57:71:b4:00:7a:
                    37:a4:b3:3b:c0:c1:e5:9a:b6:04:16:6c:25:8b:92:
                    33:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B5:F8:C6:93:FB:85:7F:E3:B7:97:8D:3D:79:B5:CD:80:FE:56:EB
            X509v3 Authority Key Identifier:
                keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:2d:23:25:db:8f:98:cf:dc:93:59:85:81:1f:fe:57:90:f7:
         53:d6:e0:59:f8:b3:d4:c2:d5:5a:63:12:81:7a:de:82:92:e6:
         fc:53:f7:33:51:29:4d:79:9f:e2:80:61:19:59:df:ba:ee:7e:
         4c:8d:0f:4f:a7:b0:34:54:ad:11:c3:b6:60:5c:64:b3:e9:db:
         e3:af:75:f4:4d:83:ce:92:3c:ba:ad:79:fe:13:f1:4a:22:26:
         15:83:50:73:43:28:b9:d8:05:96:dd:ae:3a:31:65:b0:e4:52:
         63:78:4e:c3:dd:d1:35:13:41:7b:f5:db:0c:2a:48:38:13:6f:
         4e:f2:2f:1d:3c:34:d8:ed:c0:99:76:20:99:3c:4e:43:97:63:
         a7:7f:d3:3d:10:4a:9a:89:4c:d3:6b:6b:8d:61:c1:b8:2d:77:
         56:dd:21:05:9b:a2:20:64:4c:09:21:e0:5b:f9:83:7f:13:75:
         76:9a:ed:9c:da:1d:02:30:c1:c0:4f:73:12:8c:85:42:11:d7:
         97:5c:c9:c0:03:a3:be:eb:53:b1:e4:44:8c:21:ec:ae:e9:67:
         03:5f:c6:9c:9a:87:c3:ca:49:82:ba:f4:3f:8e:84:da:8a:a6:
         91:ba:bc:ae:81:07:f6:a2:f9:45:03:8f:20:11:71:b0:a5:8a:
         f0:9f:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----