Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File:                     uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier:          0lAVEQvHvCUXfqMqixPVv+noYP1Fpf+GeFW+8sBIbVM=
Subject key identifier:   53:25:3A:8F:16:01:A5:62:6D:E7:40:7A:83:08:9D:61:F4:29:6B:8F
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer:       /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial:       01962F74B1843196E44453DEE8E567DD6C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=)
                          2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: nbi0kWC2FKYYk4JDywme6Zvv94dEdT9o7j7KWnGGmdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b1:84:31:96:e4:44:53:de:e8:e5:67:dd:6c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=53253a8f1601a5626de7407a83089d61f4296b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:b9:1d:b5:ae:0d:b4:6b:2e:a3:42:08:ba:
                    8b:9a:64:ad:c5:7c:6f:72:62:ad:63:21:d3:0f:5c:
                    b0:34:29:a6:38:86:a7:50:b6:45:84:bc:14:0e:cd:
                    81:12:9d:d3:b7:ad:52:3d:9e:f8:d0:0e:a1:23:4f:
                    a1:21:82:b5:7b:66:d8:17:9d:ef:35:37:1f:5b:57:
                    09:b3:01:f1:50:27:9c:39:88:47:f5:4d:2e:23:6e:
                    da:43:cc:b1:fb:47:36:c7:9a:38:37:a8:5a:1a:3e:
                    c8:33:8c:e4:85:e1:0d:bd:13:39:f5:a1:36:30:02:
                    98:20:aa:f5:7e:e1:e9:cc:14:14:99:68:8c:21:9a:
                    d3:eb:70:ae:e7:5f:62:24:7e:c4:d8:d2:ac:3f:5a:
                    aa:eb:8a:61:0c:7f:78:23:6f:f2:4e:a8:71:e7:3d:
                    a1:9e:d8:78:33:9d:85:1a:78:5a:8f:57:dc:75:7f:
                    df:2f:7a:43:05:c7:75:f8:0f:8b:ab:30:4d:7c:97:
                    9e:49:65:7c:42:e0:47:2c:1c:e0:03:ce:8f:b9:79:
                    4a:bb:42:cc:b8:c1:a9:02:d5:ac:39:21:f5:66:fc:
                    fa:3e:38:97:dc:a4:36:1a:b5:03:77:8a:1a:e5:04:
                    00:f6:c4:2c:31:71:98:17:5a:ff:81:e8:81:e2:18:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:3A:8F:16:01:A5:62:6D:E7:40:7A:83:08:9D:61:F4:29:6B:8F
            X509v3 Authority Key Identifier:
                keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:66:60:cb:83:bd:5a:d2:4a:b2:ef:1a:94:da:73:f6:e6:dc:
         78:c1:23:de:e8:6e:4f:80:88:a9:40:5d:79:b6:4a:4f:b0:67:
         fb:34:91:56:5b:1b:e1:d8:2b:c5:8f:87:d7:3e:6b:c3:ca:20:
         43:f3:8e:7d:21:71:38:c8:09:a4:f1:8f:0c:f5:4c:2f:f2:bc:
         8e:c3:3f:f4:6e:84:d3:bb:97:1f:e3:47:56:cb:63:d0:48:e1:
         ed:ba:04:dc:51:64:42:18:8f:15:47:d0:f4:04:13:38:c0:8b:
         97:b4:33:bf:f8:ba:30:dc:5c:a3:13:8e:de:cf:72:5d:84:9f:
         d2:7f:75:5f:46:14:0e:e4:0b:f6:43:1d:7d:ea:03:3f:86:7b:
         9d:3a:de:84:62:e8:b1:ef:4d:9d:51:0e:4b:ca:c3:58:66:33:
         30:6d:9f:8c:23:60:05:66:83:b0:7f:53:b0:fc:e3:5b:14:f3:
         da:5c:38:24:ef:f6:8f:69:02:70:fa:7b:d8:96:d6:2e:8c:ee:
         73:6c:fb:16:20:50:9a:b3:2f:2c:a3:a0:3c:22:10:96:e8:d1:
         66:ee:d7:87:32:24:d7:7b:ce:08:2a:fd:6a:7b:bb:a4:6c:48:
         e5:89:a5:98:97:32:d7:0e:c8:11:cb:81:ce:75:df:7b:1b:8a:
         04:20:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----