Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File:                     uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier:          tYMT/aHlywrRyzFWT4iBK6T4YsSLmosNZkMT99KY3h0=
Subject key identifier:   87:54:3C:81:2D:FE:EE:B5:C4:6D:51:7C:2C:7A:18:8A:7A:92:0C:D8
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer:       /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial:       01962E61B30C7C9F533DF5CB7AB63790648B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number:          0FC4
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=)
                          2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: 7mdQU1B82tXB1RXNsTf1BDSDgqNA2z+pMN42i2Sfpvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:0c:7c:9f:53:3d:f5:cb:7a:b6:37:90:64:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=87543c812dfeeeb5c46d517c2c7a188a7a920cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:37:05:ea:20:9a:54:13:dd:b2:92:8c:06:
                    e4:8f:4c:5f:2d:d4:c9:ab:b2:25:84:80:85:74:0b:
                    aa:5d:77:54:91:fc:a3:0e:35:ba:5a:17:53:07:0a:
                    4d:15:61:3d:43:17:65:68:5d:91:57:f0:ae:1b:3d:
                    da:f9:93:a6:b2:28:2c:3f:9d:b6:d4:21:1c:3a:e0:
                    56:4a:d2:44:c2:42:c8:b9:9f:58:d6:2a:dd:0d:41:
                    e3:50:a5:73:9b:9e:13:12:f5:b4:fb:51:93:05:1e:
                    55:4e:71:f9:8b:1c:a4:cf:92:41:1c:3b:81:02:ab:
                    90:dc:86:b4:68:e1:89:d3:1b:50:1e:31:67:71:d5:
                    8a:27:13:a0:bf:8b:3c:44:75:7a:38:a8:bc:1b:d9:
                    33:df:8d:51:26:db:ca:c4:6c:2c:cb:de:f3:de:9b:
                    fc:31:c3:f9:6c:60:d1:9e:f4:e1:7c:ce:c6:e8:e8:
                    39:cb:0e:9e:32:f9:f7:ce:24:f5:d8:2d:af:f6:52:
                    8d:c4:87:18:f2:e0:7d:5f:02:d1:ca:77:e7:df:1c:
                    d9:66:ba:3b:b9:70:67:db:71:4b:56:9b:83:1f:c5:
                    19:a2:06:26:09:93:d6:aa:57:4b:57:61:98:0e:d4:
                    32:0e:41:4d:25:0a:37:89:c1:ec:cd:e5:ec:10:63:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:54:3C:81:2D:FE:EE:B5:C4:6D:51:7C:2C:7A:18:8A:7A:92:0C:D8
            X509v3 Authority Key Identifier:
                keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:96:b4:e4:b2:26:91:db:4d:04:04:96:60:cd:98:5f:85:
         0f:12:cc:d5:ad:bc:91:12:8a:13:fd:85:7d:1b:2f:ad:f2:48:
         cc:7a:f9:14:3f:a2:93:df:c0:3a:db:5b:c3:92:db:30:86:2d:
         d8:6d:d9:75:12:9e:b5:90:49:b7:52:fd:c5:62:16:ae:33:7e:
         fe:33:19:6b:03:87:af:c2:32:91:5f:35:5c:23:1d:b8:ef:7f:
         be:de:3e:b7:b7:af:81:d2:8d:ec:99:d2:b2:4b:7f:f4:a5:54:
         af:db:ac:4d:cd:b4:f4:11:94:b0:b0:b1:72:6c:94:d2:88:89:
         da:7a:f9:01:33:bf:78:83:7e:64:6b:ec:e4:f2:8f:22:1c:70:
         08:fa:35:59:ae:e6:ec:90:c4:05:0c:6f:35:ec:9e:46:37:3f:
         26:7a:4a:d6:4b:f6:cb:bc:5b:c0:89:d1:ee:c4:1c:5b:41:27:
         83:a9:65:69:6b:d0:0f:d1:34:ec:e1:82:f9:7c:d0:f1:85:da:
         6c:fa:7f:d1:30:84:8d:07:22:46:82:f5:52:2a:2f:ac:99:0e:
         69:d5:34:ce:64:6a:f7:45:f4:f5:23:6c:84:bf:6c:b4:2d:e5:
         db:ab:cf:25:04:9b:ee:2d:ca:ee:49:ae:10:d4:e8:6a:d3:43:
         a7:f2:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----