Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File:                     u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier:          f8hnSLApJmSwK77OrArcCc04bbMug+XfyjV/vHeh4ws=
Subject key identifier:   5F:C5:04:63:22:62:E5:E6:D5:9A:C1:E0:53:A3:EC:E4:AD:79:27:74
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer:       /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial:       01962E2B0546453AF56EC63E6A775FE1287C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
                          2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
                          3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: 6uG9QiHwh5FEmRMHs6UJ7IFDku+yWUtTAGQuBx6TL2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:05:46:45:3a:f5:6e:c6:3e:6a:77:5f:e1:28:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=5fc504632262e5e6d59ac1e053a3ece4ad792774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:7f:b5:d6:a0:33:c1:cd:70:06:73:7b:90:
                    ea:7f:d2:67:89:2e:83:a1:0c:27:f7:42:22:47:98:
                    d9:ab:c9:28:b3:2d:53:a0:12:f5:8d:9d:70:2c:1b:
                    d3:29:60:9b:5f:84:66:8d:ed:95:aa:7b:bc:b1:88:
                    60:82:73:dd:6d:db:13:3e:c1:88:e1:6c:4e:81:64:
                    6c:0e:19:89:0e:36:d0:5b:d4:6a:18:75:e2:f5:44:
                    3c:a5:2a:37:3c:7b:14:5b:60:69:b9:41:35:fa:9a:
                    6f:36:8b:c0:4f:60:1c:ec:f9:21:c9:98:87:0d:85:
                    91:96:b2:67:e5:7d:65:93:7f:d1:02:91:ab:c8:6c:
                    b7:98:9d:a5:e6:52:50:0c:bd:f1:24:b6:af:8a:5d:
                    fe:14:20:43:e9:5c:42:3a:53:21:ff:02:4a:6e:9b:
                    76:47:f4:81:67:41:ed:ea:f3:71:6d:ad:25:72:93:
                    11:25:af:7b:b8:24:41:0a:eb:72:4f:3e:1a:bd:18:
                    f3:0a:5e:e4:68:f2:b3:b5:e1:03:89:a7:67:02:a9:
                    4f:ab:0d:ab:f3:be:db:61:33:e9:8f:c1:2b:3a:50:
                    26:20:21:c0:06:81:41:eb:f5:e8:be:af:db:20:89:
                    70:c3:cd:c1:2b:25:fd:28:f7:f0:78:19:40:db:0b:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C5:04:63:22:62:E5:E6:D5:9A:C1:E0:53:A3:EC:E4:AD:79:27:74
            X509v3 Authority Key Identifier:
                keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:85:c1:56:a0:24:f8:c2:d9:c7:03:53:f7:aa:e1:b7:c5:6e:
         e9:67:7a:d1:60:e9:14:76:a1:7e:e0:d5:60:98:b6:a9:03:22:
         f5:50:bb:54:26:39:c1:e7:82:84:53:4c:8d:e3:55:ea:5f:7b:
         7c:ea:83:c0:79:65:70:a8:11:e2:9a:92:db:bb:40:a0:73:11:
         93:89:23:27:41:80:8e:f7:53:65:2e:e6:f8:eb:1b:69:0c:ea:
         ec:40:11:a9:2c:c4:19:39:e4:24:56:73:e1:ee:fc:d6:ca:0b:
         37:40:3e:e9:6a:4c:e5:4f:29:a2:60:2d:37:ea:ec:c1:d3:85:
         2e:53:fc:35:f1:97:30:9e:0c:2e:aa:e3:fb:cc:87:10:fe:f1:
         18:27:30:f9:0f:9d:3a:34:d8:72:2d:96:81:e7:df:65:2a:05:
         45:5b:10:d0:5b:9d:bf:27:1e:4c:8d:e5:cd:0a:46:4a:a7:6a:
         7c:36:cb:16:8d:b3:9d:cb:3f:fe:1f:0b:51:9d:ae:41:be:90:
         2b:38:a5:a5:58:e2:e9:c1:05:49:38:85:8e:5b:09:a7:81:d4:
         82:2e:dd:3e:3e:26:31:74:99:81:57:7e:f4:6c:4d:90:f4:57:
         85:bd:b3:7e:6d:be:33:c0:13:ae:5c:b5:a6:72:28:10:73:79:
         1b:9a:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----