Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File:                     uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier:          DQsPSaBhQ+amxBZG8atU3nMSv40lFtSuvks7oicT2CI=
Subject key identifier:   51:2D:25:37:ED:B9:D6:A0:68:FE:77:9F:84:C6:BB:6B:C2:BE:05:4C
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer:       /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial:       01962E61CAD6CF2691731E37C75F2161BB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number:          0C09
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
                          2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: Ra3lNqP+tEvOBBjnkyM/L9jB2YMDrHzlQg85xMQFkbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:d6:cf:26:91:73:1e:37:c7:5f:21:61:bb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=512d2537edb9d6a068fe779f84c6bb6bc2be054c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d4:5c:e2:06:f7:2e:a2:e4:e1:7a:5e:cd:38:
                    f6:f2:19:f1:6e:f0:84:83:52:6b:b3:02:f1:22:06:
                    a6:9a:50:92:00:5f:2c:f8:0a:4e:a3:b0:6e:73:c5:
                    6a:d4:7c:0f:4f:b2:27:c7:82:8a:80:b4:df:18:f4:
                    ef:d5:d6:d2:51:74:10:ce:41:67:c7:d1:ac:5c:8d:
                    7b:cc:38:8a:7e:ea:90:6d:f4:18:db:f1:e0:59:a6:
                    b6:ef:d9:e9:31:0d:dd:27:36:ac:24:d3:6e:7b:a5:
                    24:3c:a5:da:01:9b:c1:6a:51:f4:4d:f5:0a:d0:de:
                    81:e1:a1:33:43:a6:fe:f8:dd:d0:af:e2:ec:d2:85:
                    2a:d7:91:9c:f6:9c:44:b7:f9:ce:6e:90:44:25:3d:
                    f3:7f:f9:bb:54:c8:09:42:b4:d3:78:96:9e:ff:7f:
                    3c:41:be:ef:c1:9a:4e:37:d7:3b:8f:6e:5a:32:c9:
                    43:82:97:1c:b0:f9:b6:3c:e9:ac:89:18:b0:ba:2a:
                    7e:cc:c7:5a:fc:88:73:20:61:56:70:07:c3:91:ec:
                    c3:04:07:48:7f:b6:90:f7:e6:eb:9f:37:11:bb:b5:
                    80:34:57:fc:2f:a0:fc:7e:b4:32:22:aa:d5:f6:6d:
                    75:14:65:aa:b2:2c:96:0f:fd:23:22:64:5f:b6:05:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:25:37:ED:B9:D6:A0:68:FE:77:9F:84:C6:BB:6B:C2:BE:05:4C
            X509v3 Authority Key Identifier:
                keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:d7:94:f2:c1:40:55:95:f9:f2:5f:84:dd:9c:11:b3:59:
         59:ad:64:e7:67:7f:a4:f9:5d:da:34:58:83:62:5a:9f:a3:0f:
         3f:d3:de:c4:dc:06:ce:02:20:9b:fa:50:72:ce:7a:84:48:aa:
         77:c2:e7:21:0b:4e:f6:33:78:cf:d2:d3:47:38:cb:61:32:ac:
         1f:9a:ff:ea:32:7b:60:1a:77:f7:aa:84:04:6b:e6:73:82:f8:
         0b:96:4f:56:57:77:a6:e6:5b:c1:7a:46:0f:69:cc:49:81:16:
         b4:26:a4:bb:c9:8a:fe:cd:8d:6a:8b:75:23:30:7e:e4:45:89:
         72:25:13:07:d5:36:13:d6:35:df:d1:01:77:69:c2:31:d0:d2:
         88:28:da:5d:72:2f:df:63:3f:c2:fa:f2:f3:24:35:6c:a7:cd:
         75:0c:0e:73:b6:dc:b3:d8:93:da:77:94:0d:f3:83:d4:1a:07:
         0d:36:de:2f:df:74:1e:c3:a4:94:4a:20:8d:d5:f6:5d:4c:c5:
         c9:f2:d3:37:57:02:f0:cb:8b:c5:09:d7:25:39:fa:9a:3a:da:
         f9:fa:79:ac:ae:e6:e7:df:2c:6e:ba:db:be:98:85:fb:3a:2f:
         4e:f9:59:f7:6f:75:1c:44:a9:eb:32:60:dd:24:78:97:42:ce:
         3b:94:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----