Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File:                     uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier:          zvDfz0JY/FzXk3TvWvVTU31D9+PgKEJuw6Jol7UROyU=
Subject key identifier:   D4:04:63:A4:DA:ED:67:E9:99:54:54:30:4F:08:81:6B:0D:3B:72:FE
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer:       /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial:       01962F3DE7C715E2147818E106C42131550F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number:          0B7B
Signing time:             Sun 13 Apr 2025 13:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:48 +0000
Files and hashes:         1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: +rp4sI7e0vJC0UfLC6sIeiKeABaXgn5Q3exDWKwdCDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e7:c7:15:e2:14:78:18:e1:06:c4:21:31:55:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
        Validity
            Not Before: Apr 13 13:01:48 2025 GMT
            Not After : Apr 14 13:01:48 2025 GMT
        Subject: CN=d40463a4daed67e9995454304f08816b0d3b72fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:38:89:04:12:27:77:30:eb:b0:57:7b:eb:
                    64:04:c9:83:58:74:fa:28:0d:27:c4:26:0b:d3:c1:
                    f8:7b:80:d2:cf:d5:35:3b:a2:d9:c8:a4:ea:c7:bd:
                    f4:6c:be:84:77:b7:f7:91:b2:37:da:6d:0c:cc:26:
                    42:49:d5:59:e4:22:05:5d:d6:2f:1a:93:a5:54:6a:
                    0e:db:37:e7:ba:66:cd:f4:70:6d:59:2c:04:5b:fd:
                    6a:59:d4:18:9a:ab:dd:21:e6:dc:b6:a3:9f:90:92:
                    54:af:47:46:09:f5:2d:bb:98:d7:1c:1f:b3:df:6e:
                    1a:e0:c0:25:32:19:0d:52:17:2f:ee:37:88:26:12:
                    ae:29:e0:ae:a7:75:46:43:01:dd:d1:78:1e:6f:e9:
                    4b:9e:a5:9f:d6:9c:f4:6f:79:81:40:b7:78:2d:59:
                    dc:6d:35:eb:e7:9f:7c:98:1a:ed:bb:46:23:e0:00:
                    53:04:78:bb:a6:c6:fe:dc:1e:db:0f:ae:74:09:c0:
                    8f:fc:53:99:14:e2:3b:a1:7b:7f:97:b0:4e:cf:0c:
                    92:be:02:eb:76:0c:d9:e5:40:5f:9f:a8:de:82:14:
                    43:13:6d:95:a1:3a:51:52:ef:07:62:df:9d:1f:1d:
                    7f:25:9a:13:ba:f9:5c:49:94:3c:e0:4e:44:e8:25:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:63:A4:DA:ED:67:E9:99:54:54:30:4F:08:81:6B:0D:3B:72:FE
            X509v3 Authority Key Identifier:
                keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6b:a8:a1:a8:49:bd:18:93:6a:ba:ca:fb:74:67:2b:37:5e:
         2a:b9:55:59:df:91:4b:b7:53:fe:c3:7a:22:b8:0b:3f:1e:a7:
         d3:2e:06:2f:4b:4f:7c:d8:8e:31:46:7e:68:46:89:5b:6b:81:
         a1:76:84:c7:28:26:b1:cb:0e:ef:0e:76:e0:cd:15:82:44:5c:
         05:8f:78:99:c1:e6:31:ae:ea:8d:45:3c:a2:7a:ae:f4:1a:1e:
         53:e4:5b:e8:eb:26:04:92:49:1f:b1:32:b2:e8:3e:aa:8b:74:
         52:33:c5:00:c6:8b:ff:64:78:b7:15:e9:ec:71:ae:52:3a:97:
         92:e3:15:4a:62:e9:62:da:db:a4:b6:2e:c2:aa:81:4d:5a:bb:
         bd:f4:d3:5b:04:26:77:ed:bd:95:1e:3b:34:c5:86:18:63:ed:
         2c:c7:9f:56:2f:cd:83:da:e2:be:ca:cc:fe:2c:c7:1a:f9:02:
         ff:70:d7:4d:47:3f:b4:d7:a8:65:9f:f2:20:56:df:50:24:7b:
         6d:46:9e:7c:33:c4:ab:13:b8:6f:12:a7:29:67:43:86:b7:4f:
         ab:b5:2f:92:64:40:fd:2a:cb:cc:a7:62:13:38:68:f1:88:d3:
         48:12:c7:17:58:b9:06:ab:3d:c8:9c:c9:6b:32:ca:bf:19:d6:
         e7:31:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----