Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File:                     ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier:          HxGwQgirPeQkKEMDP1I12kZrmLKvr/Wpn42b77JWP/s=
Subject key identifier:   69:71:7B:C7:D5:51:45:B5:9D:E2:F8:F3:F8:56:B8:8C:D2:F9:C4:00
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer:       /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial:       01962F0658DF5A63B4374FFAC573BB5B5F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: nTRrek18CbWJcFGrLl2r/dLbZd9m+zxo5htSGLvsB+o=)
                          2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:df:5a:63:b4:37:4f:fa:c5:73:bb:5b:5f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=69717bc7d55145b59de2f8f3f856b88cd2f9c400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:b6:11:4a:51:30:46:3b:58:67:e4:17:45:
                    88:48:59:6a:7a:91:d1:b1:5e:a1:c6:62:2e:21:65:
                    41:2a:2f:60:06:9c:83:9e:fc:32:a6:f0:26:01:36:
                    d3:04:23:f6:81:2d:21:6e:b5:41:24:f2:92:9c:7c:
                    d8:49:ec:5d:31:1d:dd:dc:f3:c1:8e:ee:5f:3e:38:
                    36:eb:a9:9e:84:07:de:2b:e4:36:47:75:dd:cc:0d:
                    68:d5:d3:48:f6:0d:f7:01:0d:f2:e2:33:19:a9:b4:
                    fd:ac:09:39:0f:f5:f3:33:05:60:11:b7:49:cd:92:
                    ef:ec:21:a0:25:9b:77:ad:3b:42:ad:87:71:4d:eb:
                    90:2a:2e:0b:81:1b:41:28:9a:2c:9c:52:d4:a4:a5:
                    90:d5:62:d4:83:1b:a2:3e:e0:cf:08:a2:79:42:a1:
                    b3:5e:9b:42:bf:91:55:66:c8:a8:fe:f5:28:ca:1f:
                    d0:ea:ec:42:48:16:da:a4:86:c3:65:e1:9f:19:bb:
                    2d:0b:57:29:5a:2a:4b:7b:ac:aa:f5:a5:6f:d6:88:
                    f9:7f:d5:f7:8b:bf:f9:97:54:99:75:9c:69:c5:e2:
                    cc:d9:0a:5c:c2:04:d8:49:20:a8:34:7a:25:25:3d:
                    49:5c:0b:36:da:ed:8d:7e:a0:36:29:da:5e:0d:5c:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:71:7B:C7:D5:51:45:B5:9D:E2:F8:F3:F8:56:B8:8C:D2:F9:C4:00
            X509v3 Authority Key Identifier:
                keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:b8:57:23:55:3a:79:58:c6:a6:23:a4:e8:ae:e4:0a:43:
         a1:6b:f3:b3:33:91:bb:fb:e8:ca:be:4a:9e:ea:b3:82:0f:39:
         f1:fa:ff:d2:74:d6:a9:30:62:7f:e1:d1:92:53:87:d2:9a:db:
         ef:35:d8:af:a6:96:cd:29:a9:d5:3d:25:82:f6:93:cd:90:7c:
         cf:a4:94:c0:41:04:44:e9:b3:c0:0f:2b:2f:96:10:09:be:58:
         fe:2b:ae:ab:a7:5b:36:33:cd:79:69:d8:4d:a5:0c:a1:93:d8:
         74:8a:fc:7f:fb:66:65:19:ac:09:da:d4:77:25:b8:e3:21:9e:
         f1:5c:93:f6:8c:87:c4:5d:01:aa:a7:88:88:3e:b9:05:2a:80:
         aa:3d:02:ff:a4:d4:31:73:19:a8:cf:d3:4f:b6:9a:5f:6d:38:
         d0:06:29:a6:57:f9:d0:1a:d0:64:c8:e8:fc:e3:bc:08:1a:7e:
         28:e1:01:98:e5:5c:53:42:43:c0:09:03:18:2f:af:0f:05:1d:
         df:61:07:9f:32:a6:34:dd:d5:7a:be:28:1a:fb:ab:21:c6:b9:
         30:41:29:b7:8a:a7:56:48:f6:fa:da:77:0d:d8:4a:d9:70:9d:
         47:d9:06:70:ec:ab:d2:77:f0:ae:eb:0c:62:ad:4c:26:9b:6f:
         23:75:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----