Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File:                     uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier:          1f4fTX+8HoGp8goJ5YF+0szfH2SnEzRF14hCvWQL+LA=
Subject key identifier:   55:DB:85:C3:BE:DA:CD:B1:99:EB:3D:1B:20:94:68:80:D9:86:9C:79
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer:       /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial:       01962FAB618456BDA2206EE0830CEA8105DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number:          1412
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: trrJTmpfc0YaTikZLW0owkBtJ5aAsphPZKkXorcM+0c=)
                          2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:84:56:bd:a2:20:6e:e0:83:0c:ea:81:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=55db85c3bedacdb199eb3d1b20946880d9869c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:3d:5a:be:c0:12:3b:1a:d4:07:fb:77:f5:
                    39:a5:62:57:c8:ba:ed:4a:c4:d0:66:58:ab:0f:51:
                    38:7d:9a:42:78:82:1a:29:84:c4:a0:5f:a1:85:39:
                    e8:ee:bc:b7:b4:69:87:ec:ff:57:69:78:0d:9c:b8:
                    86:ee:8e:a2:29:1c:22:cf:88:5f:a9:c6:e9:af:aa:
                    77:ab:29:74:80:37:e2:3c:19:2a:24:f1:4e:93:82:
                    d1:46:83:31:3f:1e:e8:d1:d1:b6:4e:46:a6:8c:41:
                    0f:56:84:ad:40:f6:ef:38:7d:e1:41:f8:22:ab:30:
                    ca:d6:a9:c9:db:77:6e:a0:24:12:9b:75:38:fa:f5:
                    8a:36:48:64:61:c4:fc:44:c2:41:c9:63:1c:3c:d7:
                    3e:fb:a7:28:09:ca:60:4d:ec:1f:06:dc:7d:8a:41:
                    a1:d0:12:06:4f:d3:c5:59:0a:0d:d3:45:d3:41:b1:
                    21:8c:d7:16:d3:5e:65:4c:12:99:6a:8b:c0:19:ca:
                    9d:a4:6e:f6:9a:51:5a:84:41:c4:f4:20:7a:59:c4:
                    44:c2:d7:6a:2b:5b:54:b0:30:f6:06:39:2f:6c:51:
                    b1:b8:2e:96:19:99:51:07:5a:f3:e2:4a:16:ec:40:
                    cc:46:62:e1:69:d8:3f:ea:3d:69:4c:43:1f:63:c4:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:85:C3:BE:DA:CD:B1:99:EB:3D:1B:20:94:68:80:D9:86:9C:79
            X509v3 Authority Key Identifier:
                keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:1b:4f:0d:b7:7b:d6:9e:ac:d1:9b:fb:6b:70:b9:ad:ec:
         b7:d5:3d:85:1e:01:30:c7:cd:ca:ff:7f:66:34:07:d0:45:b4:
         3b:19:dd:ce:72:db:f6:59:00:3b:c4:b6:94:50:01:93:25:a3:
         4d:b0:b3:b7:b6:24:f5:cb:07:93:e3:ad:3b:bc:c3:09:c0:01:
         f3:34:94:54:65:cc:9a:83:fb:74:89:b5:6a:12:1a:95:a2:9d:
         3f:ed:99:e1:3e:84:32:f2:77:ca:05:95:15:70:3c:15:5c:e0:
         7e:1b:d5:4f:64:9f:fd:b6:5d:6a:d5:9f:7e:aa:8f:a0:09:0a:
         33:64:19:77:21:e2:50:3b:05:3d:1a:b2:d6:49:90:ae:96:b2:
         5d:6e:b7:d0:af:0b:57:d3:b7:41:8f:b7:60:98:07:9d:41:12:
         5c:f1:73:86:fc:fd:f4:d0:7e:7a:17:5b:39:d5:aa:9b:d4:28:
         79:2d:3b:81:3d:3b:e5:04:d7:cb:55:70:42:13:c2:3a:0a:73:
         cc:16:51:81:a9:86:81:c1:f0:f6:09:7a:9e:f9:93:54:59:a8:
         86:26:28:b8:31:e7:eb:ff:e5:19:8f:f5:68:99:4c:1e:4a:d2:
         c4:b5:89:3e:bd:c7:f8:38:ad:b9:40:89:04:36:76:35:23:d5:
         d0:1d:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----