Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File:                     uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier:          6By9ddjHro8lvswmazNHS2qa8yxE6SIndyP6WWRgMIc=
Subject key identifier:   CB:46:22:AB:48:B3:E5:19:E5:67:76:16:9A:88:F5:C6:A1:74:00:EE
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer:       /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial:       01962ECF9F48041D66222166142FD5F1FDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
                          2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
                          3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
                          4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: XqpYLFNQw/F0Cq2hwhWme9sG5bT7g9kx+2RwxSjovbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9f:48:04:1d:66:22:21:66:14:2f:d5:f1:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=cb4622ab48b3e519e56776169a88f5c6a17400ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:8d:49:2c:f1:32:f2:32:6d:c0:10:78:f4:
                    58:5f:24:72:db:47:61:fb:ea:a9:b5:bb:44:93:b1:
                    9b:40:72:fd:c6:29:1a:2c:a0:0c:82:4a:9c:18:3f:
                    14:00:72:cb:10:14:ee:0e:6f:7d:d7:5c:4a:13:ba:
                    92:8e:e1:29:c7:eb:36:55:65:c7:13:5e:8a:bd:87:
                    5e:07:ae:9a:08:22:0e:a3:39:cf:19:3e:80:80:3e:
                    5d:d7:5c:60:3b:ff:dc:96:05:8c:0c:c1:5f:27:20:
                    21:d9:2b:e3:b4:d4:c3:b1:53:0d:76:26:a8:2d:d7:
                    bc:27:61:fe:fe:a7:e8:74:3f:36:f2:43:ec:b5:05:
                    2d:d2:48:be:c7:c7:66:b7:51:a3:cc:2f:09:fd:90:
                    57:47:b6:52:54:de:79:b5:72:f3:81:ab:52:e7:27:
                    aa:89:e3:20:36:c8:cc:37:89:b2:c5:fe:b1:ab:79:
                    a7:cd:d8:83:64:47:30:6e:bd:f6:60:fd:ca:86:92:
                    31:b2:e5:98:4b:42:22:75:c3:b8:0a:de:18:f3:dc:
                    6f:f6:17:fa:60:42:b5:c9:b0:72:50:90:da:04:a6:
                    a9:fd:f5:d0:70:bf:39:39:6a:4e:a8:72:43:71:54:
                    f7:b5:50:88:01:3e:7f:27:b4:75:37:f5:f0:0c:cc:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:22:AB:48:B3:E5:19:E5:67:76:16:9A:88:F5:C6:A1:74:00:EE
            X509v3 Authority Key Identifier:
                keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:da:e4:9f:28:d6:07:cb:83:41:05:53:15:2c:02:6b:36:57:
         5e:d2:10:50:18:73:91:79:ec:26:d7:09:5c:84:e8:15:65:17:
         e6:cd:25:c3:11:60:7e:29:1a:c3:39:1f:b9:55:90:ef:1b:fb:
         52:50:7f:25:1d:d3:ed:b7:a0:74:72:19:55:cd:9a:4d:8f:8c:
         9a:e9:33:d6:b1:c4:12:c5:80:d3:db:1b:31:d0:87:e3:5c:4a:
         98:6b:ad:79:3b:8d:96:7f:25:43:a4:2c:c9:41:25:28:77:64:
         83:f9:fb:8c:51:e4:7b:62:90:9b:8c:8a:38:29:74:0e:b0:3d:
         4b:2c:45:a9:52:fd:01:e6:81:2d:62:41:04:be:b4:1f:89:66:
         11:a7:66:d4:ab:2d:55:d9:9c:56:1c:8d:7f:20:1b:76:2f:1c:
         7e:19:d0:e9:bc:76:89:5e:17:5f:11:65:74:0e:08:aa:93:c1:
         0e:6d:ea:f3:56:47:40:ab:bd:3b:7b:63:95:d9:fb:c6:bd:50:
         23:98:94:57:7e:01:10:ac:16:f8:fb:66:89:e2:00:f5:1f:f8:
         75:cf:8a:e8:04:b2:cb:d0:6c:a2:f7:d4:a4:df:8e:58:6c:88:
         f7:13:05:99:26:13:7a:fa:26:ad:3f:81:f5:70:b6:a3:7d:fa:
         15:6f:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----