Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File:                     uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier:          s4sVe7rsbTozKRlcY0NGHHVX4AeJ0hDPo83ZyNu1XCE=
Subject key identifier:   B1:3A:68:35:E0:91:4B:FC:D5:06:95:30:1B:9A:61:C0:9D:24:85:D1
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer:       /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial:       01962F743B70ACD143D9EADD3B962362C054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number:          03FD
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
                          2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: x+Hwl8+EKLZAznAqK4FDsu4BnhWOHOmZDOBsX5zzaAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3b:70:ac:d1:43:d9:ea:dd:3b:96:23:62:c0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=b13a6835e0914bfcd50695301b9a61c09d2485d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:3a:fe:29:ae:c2:92:42:f9:f4:9b:6b:9e:
                    dc:1a:ed:0b:44:cb:a8:03:57:32:fa:32:12:10:ac:
                    77:3c:b6:f1:c4:52:d0:fc:32:34:d5:55:fb:d4:21:
                    a3:bd:98:29:85:40:69:0f:29:fd:47:28:e4:a8:a5:
                    c6:1a:da:52:b7:ae:00:3b:af:ed:cc:37:79:2b:99:
                    e0:cb:8a:1c:8d:fc:01:99:f3:31:33:fa:5c:9a:3c:
                    8d:d2:26:10:c6:76:d1:6c:46:14:90:25:37:2d:b3:
                    6c:26:31:20:16:19:16:ce:40:bd:bb:d9:a6:06:53:
                    b3:da:f0:a7:e5:a3:ca:1e:e8:1c:6c:d5:75:54:49:
                    37:4f:ed:0c:41:3c:3e:72:1a:d3:2b:34:86:a5:41:
                    17:8b:12:0d:8c:01:a6:b1:70:64:d7:b0:a6:0b:40:
                    cd:c1:f4:ee:8b:5d:a4:88:4c:0c:dd:b3:4a:8d:18:
                    63:eb:87:e2:68:05:ec:45:ac:b0:76:1f:70:4f:86:
                    1a:33:b9:9c:a1:29:af:36:5c:d2:ff:6e:34:23:1d:
                    a6:64:d1:9f:2e:46:21:38:e6:85:cf:e0:6c:40:db:
                    1e:6f:64:ed:49:67:c5:71:ad:e8:5c:f5:7d:0d:39:
                    81:3d:81:fc:c7:42:a4:ac:c5:16:ec:b9:2e:7b:50:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:68:35:E0:91:4B:FC:D5:06:95:30:1B:9A:61:C0:9D:24:85:D1
            X509v3 Authority Key Identifier:
                keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d3:5c:ee:40:c8:df:9b:5d:c2:e0:5d:4a:38:74:d4:09:a6:
         0d:54:ff:64:67:54:11:7b:6a:84:ba:3c:0d:93:ef:d9:4f:2a:
         72:3c:64:90:4e:19:c0:c2:48:34:76:9b:79:e3:08:ab:fc:aa:
         39:7d:c2:d6:78:dd:39:31:0e:8b:10:d4:96:01:18:c0:11:c0:
         4d:9f:84:8b:c0:61:15:6a:d7:32:14:7c:dd:dd:b5:b9:03:8d:
         63:31:f2:8f:8b:e6:c9:c4:69:ba:31:a4:de:b9:ce:36:c5:10:
         75:ff:9d:f2:c9:5f:fc:9c:87:03:d7:45:57:6b:f5:f2:5d:0d:
         46:03:a3:83:f0:8b:72:04:23:c8:45:12:9a:3b:85:7f:b2:92:
         df:83:92:c2:f5:20:03:6e:ad:38:80:e6:22:8b:ea:29:e9:dc:
         89:2d:dd:89:a8:ad:b7:75:a7:b9:bd:ff:79:f6:af:59:16:d4:
         69:df:46:5e:e1:5f:9a:cc:81:8f:d3:7b:59:bc:1b:98:b1:32:
         a6:15:85:99:bc:50:97:47:75:5f:da:06:50:c8:51:76:b4:cf:
         b4:32:4d:51:d8:e6:8e:5f:55:a0:d5:af:34:30:9b:c7:7f:65:
         ff:7b:83:f5:41:0d:79:d7:14:32:d0:df:ca:47:e8:eb:1d:c7:
         a5:de:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----