Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File:                     U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier:          LhA+aT89bWYDRJNHZyo9lCC/gZyPh1wDGkWj8J7bI6c=
Subject key identifier:   06:A4:B0:E5:66:08:0D:1F:92:04:FF:E1:C5:BF:FA:D8:E3:98:9C:32
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer:       /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial:       01962F3DC5DF9AFD48186F09641F4BBE0771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
                          2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: L6+Z9X9BBz+CRvh12j3OpnlX892C6aiHhnJBbIhYfmU=)
                          3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:df:9a:fd:48:18:6f:09:64:1f:4b:be:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=06a4b0e566080d1f9204ffe1c5bffad8e3989c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:3b:7e:27:ed:f5:91:58:96:74:94:f8:a2:
                    df:89:f1:be:ea:ef:60:26:40:4b:af:a4:69:e8:3b:
                    62:a3:29:50:5e:48:12:56:f5:c2:d8:50:bd:02:91:
                    64:d0:68:90:8e:b9:0a:c2:38:6a:a8:da:e2:51:e2:
                    a1:27:51:23:5d:16:1f:70:70:4b:88:f4:91:f6:5b:
                    33:6b:1b:91:76:ea:18:a9:ca:47:01:4b:39:2e:a7:
                    e0:a6:94:c0:00:65:33:7f:e0:04:82:7c:6a:bb:1b:
                    5c:f9:b0:20:30:96:dc:95:9a:97:cc:8a:f5:18:e5:
                    e2:1b:21:86:f4:4b:9e:91:25:f4:9d:3d:8a:dd:1b:
                    ef:25:58:b5:1e:2c:8e:c8:07:c9:40:6d:cd:e1:eb:
                    c7:87:e5:c6:7a:32:ae:4f:a3:15:16:7b:40:3c:64:
                    c6:8d:e2:25:7e:ec:51:e8:78:c0:8f:29:be:56:38:
                    73:7c:e6:fc:80:93:4b:f9:fe:9e:1a:6e:60:2f:77:
                    d0:95:e8:fb:a4:01:5d:8e:5b:9f:45:9c:97:4f:4d:
                    15:98:75:79:54:cf:55:76:41:53:41:a0:55:d2:89:
                    b5:5c:b8:5f:8b:31:be:4e:17:60:ab:85:bd:2c:f1:
                    32:4f:e6:b6:f6:82:92:c2:96:91:35:a9:36:80:25:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:B0:E5:66:08:0D:1F:92:04:FF:E1:C5:BF:FA:D8:E3:98:9C:32
            X509v3 Authority Key Identifier:
                keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f7:76:b8:27:d0:db:cf:08:f4:17:e0:33:8f:e7:e5:71:04:
         fe:97:ea:e3:08:83:cb:91:56:fe:74:e4:75:1d:cb:7a:fc:1e:
         bc:f9:f2:8e:e2:7a:d1:61:bf:38:2c:c3:97:0f:a4:64:cd:30:
         59:04:a6:bd:4f:e3:77:d3:33:61:97:f4:c0:98:27:03:4c:5e:
         2b:ba:48:1f:ba:95:7d:3f:41:3c:d0:11:9e:a6:2a:93:67:51:
         1c:9e:04:bf:e9:58:83:f8:5f:d1:88:9c:10:81:11:a4:54:62:
         29:15:d2:3f:c4:a6:f0:74:fb:0f:9f:d9:d7:65:71:75:9e:8a:
         3f:6c:95:53:12:0f:64:a8:ae:8f:53:02:e1:a8:2e:bc:95:0f:
         d0:0d:d6:37:a4:41:f3:ac:11:f4:7c:69:45:49:01:2f:53:73:
         ba:ef:2d:be:bc:f5:48:1b:b9:57:33:31:ea:a5:d7:d5:dc:8c:
         9b:3b:17:88:82:16:54:27:0b:e8:95:6f:75:50:ff:db:0f:02:
         fc:fd:3f:92:bc:e1:ae:0c:f1:c4:1a:ec:0f:55:a7:c8:b5:e0:
         2f:ab:ef:8f:8f:e4:ed:74:b2:22:5b:fc:3d:6a:18:44:f8:9b:
         2f:1a:77:1b:a4:b7:25:1a:d3:39:84:a9:81:be:88:9b:c4:4d:
         01:93:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----