Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          pYa7V/yg3AiGnOgYz30fIWroc4iftN39vyhhjaGrvb8=
Subject key identifier:   5E:0A:98:03:5A:3C:A6:CE:28:2B:AF:52:C8:6C:BB:1C:F0:E4:B7:6A
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       01962E99168FDB95A66DC3A5AED61642E64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          0538
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 5iHrYrKlpDn574dcAV5MQF4xHuk.roa (hash: LC6TWEYqS1CZuKzBl6YN/kJ7pyn+QXIpxyQGn5An1+M=)
                          2: 60kleZPqdy7U3TKImAtI20xiPqk.roa (hash: CXB9/MCj0517nyhw9WxdzZA0wijkZG4JP7ObBhIZMV0=)
                          3: 7_z910fyUdS3UV3iXZAalmMZpHc.roa (hash: Ccdq640YY3YzbW+naDaW3oCRMsiBEyNstC2n1WOXCqI=)
                          4: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (hash: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=)
                          5: cKixBdA2YsQGbECfVrRBeHDlXYw.roa (hash: qJETwYzXO3XeLPn/+rF185rIfriEwSzO+xMEVnrI5/g=)
                          6: pMp95DzdRf1pgBQsJLmwp0JpeXI.roa (hash: VEU+wyERacx2v3R6jFxKp8QKArrmRvOUh8IhbniFnxs=)
                          7: prm1qcLxEj8IUMRu09iPaoSnYdU.roa (hash: y3vrxJh+4Vinokejxdf+O8lEIMMBO2XUs2Esa2IWQn0=)
                          8: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: HLkIwlMSi6mMldLy5DURWCSPU9bUIsJtZSDai2mM+us=)
                          9: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (hash: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:8f:db:95:a6:6d:c3:a5:ae:d6:16:42:e6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=5e0a98035a3ca6ce282baf52c86cbb1cf0e4b76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:3f:4a:c4:77:f7:43:c5:d7:8c:8e:54:9b:
                    73:6c:1c:80:c4:96:02:2f:11:f9:36:c5:97:3a:6c:
                    a9:71:3d:07:13:bb:e7:20:92:33:ec:a8:7e:06:c8:
                    b3:6c:10:7d:b9:b7:a0:83:23:90:2b:d7:c4:eb:37:
                    a8:1d:b0:19:1c:97:54:97:d5:d3:f2:1a:52:18:33:
                    4e:1d:62:ac:99:6d:ae:5b:53:51:14:38:ab:42:86:
                    8b:55:4b:7f:2f:03:38:15:6f:69:54:a9:c0:ed:ea:
                    a5:ba:b2:0c:9f:89:5a:e2:1e:4c:5f:f4:88:4d:d7:
                    75:c7:63:0e:84:da:85:35:7b:6f:3a:37:0e:42:f9:
                    83:1c:1d:61:7e:30:5a:58:46:60:08:19:00:fb:c9:
                    0f:16:22:e6:e3:86:a4:27:b5:38:44:40:8b:2e:60:
                    92:10:c4:ac:3d:df:17:c5:2f:b1:d9:c3:3d:76:76:
                    3a:12:47:30:a4:72:50:4b:71:ca:6f:c0:49:52:b6:
                    39:d7:37:00:dc:63:f7:0e:bc:d3:c3:7f:45:fb:d6:
                    03:01:a4:fb:f6:dc:3a:49:fa:43:1c:cd:20:fd:b6:
                    bc:8b:5e:60:e3:b7:7e:93:57:40:0d:b8:7b:0c:ef:
                    20:f4:0b:e7:1d:aa:15:ce:d3:75:38:f2:59:26:7e:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:98:03:5A:3C:A6:CE:28:2B:AF:52:C8:6C:BB:1C:F0:E4:B7:6A
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:07:39:45:05:58:66:3c:cb:99:f6:7a:f8:0c:f4:4d:2d:a1:
         c3:89:5d:44:40:ad:b1:67:28:de:55:18:a7:f4:90:1d:38:55:
         b7:7b:47:88:e1:c4:0c:29:76:92:4b:80:8b:5c:74:df:14:3e:
         d8:80:4b:46:3b:b1:e6:57:28:0f:f6:44:21:da:b5:e6:3a:c6:
         ad:d4:c8:7d:05:ca:c0:37:ad:04:42:33:8e:08:c0:82:a6:89:
         fe:dd:4e:eb:9e:82:ba:ed:87:f7:f5:b0:f0:b5:a0:06:9a:40:
         ae:f6:ee:94:61:13:f7:13:b5:27:1c:38:f8:9a:40:c3:4e:6e:
         4a:33:0c:98:f2:3b:ce:da:d0:ef:fc:9b:6c:6b:b4:8b:ce:c3:
         f0:32:6a:be:e8:2b:9e:b6:0e:36:b3:7e:b2:c3:75:84:14:7e:
         5e:41:fb:d9:21:d4:e7:1d:fa:ef:aa:c2:a8:ed:45:ab:ba:93:
         eb:db:47:61:b1:50:07:ce:de:35:7b:f8:28:d6:25:b6:ec:f5:
         9b:29:e7:88:9a:80:7a:b3:2d:a3:2f:80:79:bf:29:e4:9c:f5:
         05:60:a5:85:97:e2:ed:a3:cd:82:cd:d6:d8:d0:8c:af:f8:af:
         ec:8d:a7:ae:7e:2b:d0:55:3b:4d:c5:f3:4c:b3:7c:b5:58:35:
         98:6b:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----