Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File:                     udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier:          uP7duRFa9jEHXV7eOX2wqkTZKVfoxs8rY2V+N6q4THo=
Subject key identifier:   5E:6A:B1:1C:7F:0B:D5:A3:BD:C7:C3:69:BB:94:9C:9E:2B:2F:F1:4A
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer:       /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial:       01962F3DDBC068BDF12E4363B8056F09478C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number:          065D
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: Ke58ENa77TOZvRtwmJBaIvER2CI.roa (hash: YAwwFY3XBNd2hH15n2h8M26LxyaVgzcjkKLQxfxrMs8=)
                          2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: 1GPn1NTKs0WM6nkX4YVbXxpyFOzGhpDmtFN4ZjTf6v4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:db:c0:68:bd:f1:2e:43:63:b8:05:6f:09:47:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=5e6ab11c7f0bd5a3bdc7c369bb949c9e2b2ff14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:2c:96:20:ed:ec:35:ee:18:aa:c6:b3:85:
                    c9:59:69:ed:17:c7:b5:06:e3:a8:e6:b7:6f:b8:e6:
                    82:0d:d9:a6:4e:40:4b:8b:b1:cd:82:96:fc:b4:de:
                    da:d5:1a:ec:c3:63:47:6a:db:8c:d2:84:24:64:f4:
                    e7:ff:86:6a:1c:d9:da:cb:91:ba:33:53:54:1b:96:
                    e8:7e:cd:c1:07:5a:4b:9a:f9:54:ab:cf:6f:60:91:
                    b3:e6:87:83:d7:f5:49:96:f3:76:4e:9f:ec:34:f3:
                    24:97:40:09:45:7c:36:2a:d2:67:54:f4:69:5b:88:
                    28:7d:30:4f:d0:7a:d6:8b:b8:f6:c6:a3:3a:6a:5e:
                    59:43:f8:46:a9:59:76:25:cb:74:78:ef:e6:97:6f:
                    78:2f:18:4b:d7:ad:e4:e6:76:f9:5e:21:be:ba:6f:
                    e5:32:73:95:77:54:d4:af:ae:89:64:60:f3:eb:90:
                    89:41:00:1e:60:fc:f1:c1:a0:7a:b7:6f:f1:72:e9:
                    ee:76:48:3e:5f:37:69:03:6b:13:ef:e2:b1:65:8c:
                    78:25:fc:cd:76:7e:c8:50:d4:19:8d:70:88:a1:48:
                    62:8b:ce:82:5b:e7:f2:e6:00:01:39:fc:ef:b1:e1:
                    23:1c:57:40:cd:88:6b:5a:0e:e3:60:1c:55:59:51:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:B1:1C:7F:0B:D5:A3:BD:C7:C3:69:BB:94:9C:9E:2B:2F:F1:4A
            X509v3 Authority Key Identifier:
                keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:83:c1:b1:46:c3:fd:a9:ca:db:76:3d:b9:bf:d7:cb:ad:
         41:13:68:f0:d1:d2:60:2b:31:12:31:64:c3:6c:6e:7a:aa:c3:
         d1:ec:ac:ca:0a:31:a6:43:ab:49:d1:b3:e9:15:7c:5e:42:29:
         ab:6e:9b:db:43:b1:91:a6:9b:f3:04:a6:44:6b:3f:12:f0:2e:
         b4:9b:4c:46:6b:30:bb:be:ca:86:b2:6a:7e:ac:51:30:b5:f5:
         71:49:f9:21:9b:ae:74:01:a9:12:c6:0e:b7:d0:ed:57:83:bd:
         d9:59:65:0c:0a:1e:2d:bb:50:e0:a1:1f:09:91:24:cf:31:46:
         d4:d9:01:46:be:b8:a7:b9:cf:71:a5:04:57:58:ab:0b:51:2d:
         8c:bb:17:98:47:17:3f:3c:ce:13:e1:b7:5a:ef:70:41:00:fa:
         9d:c8:96:cf:6d:bf:28:44:ca:0b:91:04:c5:a1:4f:12:c8:1b:
         ba:98:ef:c3:76:b9:81:84:f0:c1:42:da:b2:01:6e:b2:95:7c:
         8a:bb:ba:f0:b3:49:2c:73:3d:ee:7c:7f:8c:20:8f:85:78:02:
         dc:7e:54:25:5a:ed:32:2c:71:3c:ef:31:8e:31:ab:87:ce:7e:
         be:c5:85:3a:dc:a9:48:3b:0c:27:f8:ad:ae:9e:3e:bc:85:6d:
         24:a7:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----