Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File:                     uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier:          kreL7Ryd6Q8QYG65c7MIaEIYXND50eRxU86BY48aMRc=
Subject key identifier:   DA:C8:AD:22:91:41:DE:29:0F:28:83:0B:24:69:71:F7:C0:26:6B:00
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer:       /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial:       01962F3DCA7DD790F921674DB7486BFCA59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
                          2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: 4HqlKtRgC7qcCLzefYpvXaopM4pBaZOPA/voYeEKXu4=)
                          3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:7d:d7:90:f9:21:67:4d:b7:48:6b:fc:a5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=dac8ad229141de290f28830b246971f7c0266b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:c2:36:c7:ec:29:df:63:a7:0d:0b:42:57:
                    21:db:b9:f1:1b:cb:47:60:53:41:10:81:a2:e8:5a:
                    31:64:fc:7a:45:a8:3b:d1:d4:af:13:35:55:e7:54:
                    52:bc:45:b2:1d:f2:ef:36:be:43:1b:b0:21:28:78:
                    65:a8:ee:60:d2:6c:5b:29:ea:2e:c1:7b:62:16:28:
                    ba:77:22:cd:20:f9:60:e6:5d:cc:16:4c:38:49:5a:
                    f8:41:72:c7:9f:76:7c:a3:05:70:96:71:e0:f3:ae:
                    d3:33:81:0b:02:ac:d7:59:10:d3:58:67:6b:c5:26:
                    a5:6c:70:4c:b0:19:cb:d3:b4:4d:aa:0e:a3:55:c4:
                    df:de:03:41:ed:2e:26:38:b5:a5:61:39:fb:1f:cb:
                    31:cb:cd:dd:78:53:61:30:c4:1c:b9:b2:6f:51:5a:
                    f8:d5:c1:f9:8b:79:61:32:59:a4:98:d9:f6:cf:c3:
                    ea:88:01:05:7e:a0:a0:69:31:5c:8f:b3:f0:3f:79:
                    98:06:de:06:bf:ee:95:1d:5b:e6:2b:b6:5d:ad:e2:
                    44:9d:7a:06:eb:97:9d:91:24:dd:35:28:1a:4f:db:
                    c7:5c:bf:ae:79:e4:f2:63:42:25:35:2e:a7:01:aa:
                    28:4b:70:e8:3a:f8:f1:57:11:cf:08:5d:c0:5d:b7:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:AD:22:91:41:DE:29:0F:28:83:0B:24:69:71:F7:C0:26:6B:00
            X509v3 Authority Key Identifier:
                keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:60:58:75:85:b5:06:a1:ce:07:38:15:2c:32:eb:46:28:
         32:a3:8f:ce:5e:30:d2:27:1f:1a:e4:a0:70:08:c7:19:f8:a0:
         aa:ef:cd:71:0d:83:36:62:47:f8:fc:8a:4f:95:34:00:9e:55:
         dd:30:99:ff:a3:09:c4:f8:56:eb:80:2f:c2:f2:ad:24:a9:7a:
         bc:e0:ae:0c:16:a5:f1:5e:fe:a4:cd:1d:b6:d7:31:8a:95:6d:
         f4:5d:36:a7:7a:2f:4a:3e:c3:ed:b1:15:2e:97:cf:c7:74:bd:
         ab:ef:02:0a:41:e5:0d:76:4e:16:33:c6:b4:ea:cc:b8:61:38:
         e8:66:11:46:c9:40:2c:5e:fd:9b:c2:ea:b6:34:4c:e4:f8:b1:
         10:1f:2c:18:3a:c0:80:9a:7d:b0:a2:8e:ef:d8:a0:7c:21:f6:
         07:9a:a6:0f:bf:df:30:a8:17:d5:87:40:ef:a2:d5:dd:32:5d:
         21:0e:ba:ed:ef:06:fb:12:ee:1c:37:35:b2:ad:2f:c8:f3:46:
         31:de:3b:18:7b:e0:ee:fa:8e:bc:62:38:18:1e:6c:40:46:e5:
         c5:14:be:71:20:8f:bf:cc:60:39:14:45:6d:ae:f1:14:20:cb:
         72:56:c7:7d:f5:42:dc:55:91:0f:91:38:2c:9e:97:83:ff:c7:
         fa:69:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----