Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File:                     u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier:          6U8mClXkXLN154Fdw/aoelggW9XxF2//dyTQpIn+Xnk=
Subject key identifier:   3F:5C:AF:57:6A:77:E5:EC:39:D4:8F:3B:58:B6:28:75:6F:4B:B7:89
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer:       /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial:       01962FABB65071F459967F7DD91BBF6FFD18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number:          03EB
Signing time:             Sun 13 Apr 2025 15:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:44 +0000
Files and hashes:         1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: /CJ/GveDhledPXStUBYLzE2hV0PBtakITY5DMotCwGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:b6:50:71:f4:59:96:7f:7d:d9:1b:bf:6f:fd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
        Validity
            Not Before: Apr 13 15:01:44 2025 GMT
            Not After : Apr 14 15:01:44 2025 GMT
        Subject: CN=3f5caf576a77e5ec39d48f3b58b628756f4bb789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:c2:aa:18:ce:84:90:ab:c3:71:99:ab:db:
                    1c:ec:ef:05:2d:92:8f:78:89:b0:dd:55:be:3b:fb:
                    97:d5:3a:f6:0f:cf:46:c0:38:c5:b0:62:bd:52:96:
                    a9:03:a4:29:5f:00:5d:fb:c4:90:e5:6e:ee:20:37:
                    47:21:6d:93:4f:1f:5f:74:fd:a0:b6:71:60:10:03:
                    76:dc:a1:45:5f:e5:bf:71:c7:f2:cc:4a:65:f0:0d:
                    2e:3e:e9:86:9f:9f:25:27:37:8d:6d:4e:91:7b:1c:
                    5a:96:dc:7f:1b:09:f2:58:91:47:2b:ba:7b:8f:8f:
                    55:c6:fa:73:6d:08:db:6d:3b:72:e2:eb:40:53:eb:
                    8b:2d:04:dc:a4:31:8d:83:7a:53:2a:95:7f:f0:93:
                    8d:02:a4:af:ce:9f:8f:a3:1e:73:9d:46:1d:10:15:
                    95:23:3f:53:d9:1e:df:c0:0b:57:1c:3a:8b:91:b8:
                    1e:29:14:4c:76:67:99:6f:b2:e8:9a:8f:fb:d9:c2:
                    3c:b3:39:cf:86:70:06:f9:81:19:96:5e:e0:12:33:
                    a0:ac:ba:a4:de:85:b6:56:cd:d1:e9:60:87:0d:3a:
                    63:44:e4:d8:b2:67:5b:38:99:4e:7c:eb:5e:c7:33:
                    ae:b8:79:fd:f3:fd:12:e8:19:ee:be:b6:b3:1e:25:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5C:AF:57:6A:77:E5:EC:39:D4:8F:3B:58:B6:28:75:6F:4B:B7:89
            X509v3 Authority Key Identifier:
                keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a3:f1:a3:b3:a5:af:5f:c6:75:ba:13:57:f0:1a:7f:f5:a7:
         bf:05:92:2b:81:84:7f:2d:27:8c:df:09:b3:33:2c:b9:e2:c4:
         2e:64:0b:9c:bf:37:33:bf:b6:f7:26:08:6d:e8:82:84:7a:aa:
         da:dc:a4:99:ff:c7:4f:91:7b:7f:4c:b1:65:70:c3:79:28:71:
         33:8f:b8:0d:7b:ff:9f:85:87:3b:0e:ab:10:6d:1b:3e:c1:6a:
         86:da:f2:26:2a:35:e7:30:1f:49:44:79:78:5c:9d:48:74:06:
         a4:b7:bf:1f:00:04:f1:33:17:b3:a8:47:4f:c8:b0:3e:86:ef:
         6c:fc:d1:31:3c:d2:af:11:fc:9f:87:36:c9:b0:68:4f:d9:d9:
         57:b4:7d:12:83:e6:3f:9f:03:a7:90:07:6c:fe:5d:f5:76:e2:
         bd:58:e9:26:b8:e9:78:10:6c:72:17:ef:ec:9e:8e:8c:5c:6b:
         e6:3b:44:27:2b:26:73:ab:1a:84:2f:51:80:52:be:c0:71:3e:
         56:51:0d:fb:8e:6b:82:f3:cc:d9:ef:e0:92:d9:22:ad:16:80:
         54:83:d7:3a:b3:cf:e2:3d:74:e1:58:0c:fb:16:06:a9:f0:e2:
         87:4e:00:9f:af:3e:37:3d:65:7c:d9:d3:53:e4:81:f0:f0:b3:
         75:b6:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----