Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File:                     U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier:          kvWBVk1s0xWC0LO3SHaz7wcs4yH2FHRmdfUq+/SFKN4=
Subject key identifier:   D8:1A:CB:01:A5:81:22:AF:80:4D:37:72:8F:95:99:71:B9:23:B8:D3
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer:       /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial:       01962F3DEA7549B05443070212C24854EF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number:          122B
Signing time:             Sun 13 Apr 2025 13:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:48 +0000
Files and hashes:         1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
                          2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: 6AV2hsKTDjnDJ5DgGl1RNEMiI66BrKi+rARHkHzLJ3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ea:75:49:b0:54:43:07:02:12:c2:48:54:ef:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
        Validity
            Not Before: Apr 13 13:01:48 2025 GMT
            Not After : Apr 14 13:01:48 2025 GMT
        Subject: CN=d81acb01a58122af804d37728f959971b923b8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:29:ba:24:35:58:b9:d7:1d:0c:bb:ac:00:
                    7f:80:16:f4:59:b0:8a:3c:39:e8:68:c5:4f:4c:9b:
                    ed:32:f4:99:9a:10:91:ca:82:93:04:9b:4e:15:a4:
                    3c:c0:49:3e:54:d7:b2:e8:dd:a5:4a:2a:e0:26:40:
                    03:e6:9c:f1:33:37:2e:08:0a:00:b6:be:cb:db:b5:
                    37:a4:fd:d7:b8:58:ed:b7:09:b5:2b:c4:f6:2e:0e:
                    ea:0b:5e:31:c5:81:4a:d1:d0:6f:59:1e:99:6c:c1:
                    29:c1:bf:97:c1:44:d2:95:b7:52:8c:c4:64:af:74:
                    36:ff:7a:e5:e1:bd:9e:ab:7b:20:3b:db:9e:cc:e2:
                    1e:a4:13:0c:a7:73:46:ac:38:df:c5:bf:f9:29:40:
                    fc:82:62:18:cf:53:db:9a:a8:ad:54:67:7c:10:59:
                    79:2c:0c:cf:fb:5f:71:4b:b9:50:29:b4:98:b1:f3:
                    3e:7d:a2:24:a9:50:c6:5c:3d:ce:52:dc:39:6f:95:
                    00:fe:56:28:0e:89:1a:27:be:91:d5:89:54:ed:f1:
                    0c:23:9d:0a:4b:31:63:53:e8:78:c8:24:1b:6a:81:
                    f7:b9:01:70:35:29:06:69:ea:0f:d4:33:22:cd:e6:
                    5b:64:88:50:d8:66:ff:63:d2:74:9a:e6:7b:87:f3:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1A:CB:01:A5:81:22:AF:80:4D:37:72:8F:95:99:71:B9:23:B8:D3
            X509v3 Authority Key Identifier:
                keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:4e:73:f2:20:46:5e:24:51:58:14:e6:2a:ac:c6:c3:6e:
         35:40:ea:2e:e8:0e:89:01:65:be:4f:0e:2a:f1:b9:9a:aa:f9:
         e3:fa:6a:f0:45:4c:5c:61:b4:92:c4:2b:79:c2:29:13:60:35:
         40:cc:fa:30:4f:de:7c:c1:5a:57:fa:9c:6e:30:a2:bf:d5:cd:
         3c:7d:90:dd:69:08:fe:4f:b5:f0:27:aa:29:1b:50:a0:d7:c3:
         6b:cb:77:49:ef:ce:b1:36:d5:37:4e:a6:ab:bc:95:8f:76:9d:
         de:0a:64:d4:81:08:fa:73:27:f0:2a:68:a4:dc:94:69:12:47:
         d6:00:13:90:14:97:10:54:d1:db:12:b3:41:f7:81:86:6a:96:
         d3:4b:bd:38:4a:01:c3:d8:c4:ad:8a:f7:3b:fd:ee:d1:4f:e5:
         b3:de:c8:1b:ca:5f:9a:f5:b3:b0:12:f6:8e:15:93:f2:ae:0f:
         d6:c0:86:00:ab:d2:f6:13:0c:99:c6:9d:3e:87:3d:10:2b:86:
         dd:b2:86:c2:a4:f1:89:5d:8f:33:7b:24:c9:d8:dd:a9:dc:06:
         1c:f1:11:9b:bc:2f:62:4b:88:89:d8:53:57:d4:c7:3e:6f:02:
         cc:fe:6c:2b:cf:63:1c:c7:5b:a0:43:77:a0:5e:25:cd:a8:af:
         6b:d5:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----