Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File:                     uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier:          aZkWa0QXMmmpJSLjExQnWdfx6erf72/OBWQNjZSzlYY=
Subject key identifier:   3C:EB:67:3D:5B:72:53:46:A9:E1:45:98:C0:47:5D:CC:D4:C2:58:1C
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer:       /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial:       01962E61B0B338FB5A3D87E33355E9F31FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number:          039B
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: Vy44S6QpBBoyPhGD9JWPmEJWB4lB3/retDaQs5UOeic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:b3:38:fb:5a:3d:87:e3:33:55:e9:f3:1f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=3ceb673d5b725346a9e14598c0475dccd4c2581c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:9a:d2:4a:60:81:76:94:d1:a7:73:c7:28:
                    1c:d5:7c:12:ef:a7:2a:0f:4c:fc:31:d7:bc:22:b7:
                    39:7e:77:2f:90:46:ff:76:5a:af:60:3c:c2:f4:9c:
                    bf:77:19:01:4a:a7:10:1c:87:15:8c:bf:68:aa:de:
                    91:a5:7f:c6:82:c8:cb:42:4f:d6:d9:5a:2f:d6:2c:
                    e1:06:28:03:30:76:fe:d3:92:e0:79:9b:92:6b:db:
                    38:a8:aa:49:b0:3b:8a:0f:73:7d:62:ee:9d:d7:7d:
                    3f:f3:d4:5b:46:11:4c:b3:f3:21:e0:f8:67:d2:91:
                    45:30:ff:86:d9:25:87:5c:07:0d:7a:fc:ef:5c:01:
                    63:6b:6e:0b:98:91:8f:bb:8b:4b:56:31:87:de:e6:
                    db:7d:f8:49:d3:75:ee:30:a7:44:52:ca:aa:7f:82:
                    87:7a:4d:e0:e4:8a:fc:29:4d:61:8c:f3:59:82:bf:
                    6f:18:cc:da:ef:73:4b:2d:88:e3:0e:40:1f:2c:0f:
                    17:9d:90:f8:bb:4e:90:18:86:b9:0e:5e:df:92:d8:
                    57:63:b5:3e:ab:02:24:e5:e4:ee:18:0b:d9:81:04:
                    cc:dc:e9:cd:11:e9:0f:85:86:da:e8:99:04:87:50:
                    80:4b:14:e1:0d:95:e4:b6:e4:e5:bb:52:d9:86:08:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:67:3D:5B:72:53:46:A9:E1:45:98:C0:47:5D:CC:D4:C2:58:1C
            X509v3 Authority Key Identifier:
                keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:49:f9:c8:5c:71:9b:5f:f7:a9:8c:c6:29:3d:6e:c5:12:a0:
         16:a8:67:79:e8:c1:69:e6:3a:0d:5a:33:62:e2:35:1d:44:49:
         d4:66:83:1c:fb:fb:d9:68:f9:c8:2a:60:75:f7:29:54:e4:4d:
         11:c1:04:98:64:70:f7:f0:3a:55:50:b1:14:10:9f:0f:39:8e:
         73:75:77:6b:63:5a:cf:f8:7f:5f:6a:0f:44:36:a2:c8:4d:f0:
         97:b0:a4:6b:72:be:3b:fe:62:5b:dc:c4:14:2f:5c:53:af:33:
         f1:23:3b:3e:c8:fc:ce:14:41:e4:52:20:55:d4:cf:61:1e:8b:
         69:39:be:38:54:78:dd:90:7b:2f:7f:7a:85:b2:81:20:98:1d:
         ba:75:9d:58:50:16:c4:59:5d:19:f3:b8:ed:08:94:33:6b:0b:
         10:38:94:e3:37:b5:23:4d:e9:69:e3:39:89:f3:42:d9:28:30:
         e9:3f:49:5a:7a:ee:de:35:f5:50:0d:9f:d2:c1:ae:82:cc:79:
         ba:07:92:8e:04:eb:96:e5:1e:33:c9:0e:ed:b9:08:85:9f:c7:
         29:27:8e:7d:fb:90:64:8f:c6:33:01:81:8b:17:23:8d:02:0e:
         0c:7e:7b:66:8d:6f:6b:60:73:87:51:89:2c:54:53:0d:5a:b0:
         cf:3b:b2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----