Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File:                     tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier:          jU4Y1DqTPbpIJ8FmHvsbrIZifyV4M5wxMtjJD2gFnwI=
Subject key identifier:   C3:37:F0:96:76:F8:39:91:4A:61:D5:BF:95:1B:58:A1:87:82:8C:2C
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer:       /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial:       01962DF40DF10A700DB7734061E4A7B7B3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number:          0AD6
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=)
                          2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: oTZ25D7xIE4gkcF+ezyn+TwxH8GdGkJgwlMnLH4Zxy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:f1:0a:70:0d:b7:73:40:61:e4:a7:b7:b3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=c337f09676f839914a61d5bf951b58a187828c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:74:1b:42:33:2d:68:78:5f:56:42:21:dd:
                    bd:99:57:28:7e:12:bf:97:bc:55:fa:87:fb:a1:4e:
                    2d:16:13:19:d1:0b:5a:9f:2e:db:10:e0:97:9c:70:
                    91:6d:05:83:76:cf:29:dd:9d:e4:a9:d0:10:f9:b0:
                    2c:22:a3:e2:7c:0f:73:e7:e6:3f:84:38:a7:3e:f0:
                    ce:cb:77:af:92:32:ac:5a:9e:ac:77:2e:8e:3a:01:
                    35:a5:f5:07:dc:c0:b0:71:7c:bc:8f:75:44:78:ec:
                    23:19:be:61:7f:e0:75:94:8a:0b:67:f1:94:38:6b:
                    58:fe:57:4e:57:09:ae:56:de:bb:7a:fb:66:49:91:
                    a2:67:49:c0:d2:9f:fa:95:17:75:18:7c:3d:4c:56:
                    c0:d8:e1:79:36:ac:f2:74:e8:12:01:33:4a:29:7c:
                    05:8e:c6:05:09:50:f4:30:ea:4c:80:f8:53:52:cc:
                    15:e8:58:bd:a2:52:49:b7:eb:70:64:58:cb:f5:51:
                    da:6f:b6:cf:bb:3e:ca:20:d8:33:c7:c5:3c:38:f4:
                    a2:3d:28:0f:09:55:cb:fd:3f:a2:0a:aa:be:cc:41:
                    32:29:69:fe:bf:1e:4d:25:cb:e8:43:62:91:cf:1f:
                    81:22:ae:08:77:fa:2e:f4:e2:39:e5:ad:4d:fe:5f:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:F0:96:76:F8:39:91:4A:61:D5:BF:95:1B:58:A1:87:82:8C:2C
            X509v3 Authority Key Identifier:
                keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5d:e3:0b:59:4f:50:19:ab:a2:eb:65:94:a0:01:c4:33:1b:
         f7:aa:c4:d1:86:cd:ae:e8:51:b0:60:83:23:e2:7d:94:98:c3:
         d9:78:56:0a:cd:fe:7f:db:7a:bb:29:bf:76:6b:73:1e:9e:dd:
         85:61:65:39:81:a9:3a:6f:06:ff:ad:e0:1b:b5:c1:78:d1:d9:
         2c:6b:af:b4:2b:a5:bd:dc:2b:b0:7c:4f:0e:c5:7d:65:91:0a:
         aa:94:9f:90:a0:f9:f5:75:db:c0:f8:3a:0d:29:6b:48:e4:a6:
         63:9b:ad:3e:65:af:97:9a:3f:af:7a:05:d8:92:db:b5:de:a8:
         7d:43:d8:c5:8c:ee:5e:63:f2:2c:da:ba:d9:a6:7f:9f:3a:b1:
         71:3b:0f:7a:0c:65:34:96:a8:e3:42:9b:8c:79:06:a8:c1:21:
         53:e7:17:ab:5e:a4:20:17:0e:cb:e6:11:d2:b5:3b:ac:54:a0:
         da:15:23:7d:7b:4c:20:9c:00:d2:98:0d:0d:1d:b9:2a:63:f4:
         f1:9e:9c:82:7f:95:5f:15:61:54:0d:58:e7:99:84:d0:0c:2f:
         3d:98:9c:39:39:e3:d7:be:5d:2d:22:cc:0a:ed:df:00:07:e7:
         50:15:2b:6c:9a:17:4f:9f:d8:53:d0:e5:48:b7:e0:0e:db:f0:
         c9:6b:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----