Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          6rGOyHUs4FdeV5xOIHJ6C3bFQBeXkkvL3umtPtaVLIw=
Subject key identifier:   F8:82:5D:DA:46:4D:98:1A:06:29:5A:E1:8A:55:87:4D:20:39:9E:40
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       01962E2B41DCF7CF20E59B5C5FC91B9A343A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          06F5
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: 7alRnVTDxipPH58sPomDf4dsVM/6gghvI3+p7q3qc3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:dc:f7:cf:20:e5:9b:5c:5f:c9:1b:9a:34:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=f8825dda464d981a06295ae18a55874d20399e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:09:5c:17:14:11:34:72:8a:35:10:fc:2c:
                    55:b7:06:81:67:03:b1:fb:88:8e:a9:eb:1f:7c:8f:
                    6e:5e:e6:ec:f8:4d:2e:51:3c:2b:01:c8:ce:6d:c7:
                    cd:43:8e:67:d4:66:9d:02:76:03:da:ee:6f:d8:98:
                    90:e0:f9:97:76:37:fb:17:cd:8d:df:fb:5e:9c:cf:
                    bf:3b:ea:98:f6:6c:cf:7a:15:05:b6:4d:1a:a3:2d:
                    0f:54:4e:37:87:a9:38:56:f4:73:a1:09:90:a5:7f:
                    6d:26:75:1f:81:c5:06:d2:3f:19:56:09:15:7b:6a:
                    90:61:99:86:9c:58:ca:0e:b8:51:66:8a:69:e7:52:
                    91:8d:1e:c5:a2:74:0e:17:c3:8e:ce:af:58:ce:65:
                    9f:a1:bf:40:a2:09:d7:ce:a3:53:e2:30:1b:0d:2e:
                    15:26:f1:a2:e8:36:6a:70:e8:f4:63:c6:d3:20:b6:
                    12:42:a3:54:66:00:ad:7b:7b:68:a6:a9:da:7e:56:
                    a3:e3:7c:aa:8b:97:37:40:55:a3:d1:d1:f5:c1:36:
                    55:d6:4b:c1:d3:b9:0c:50:34:dd:2b:a1:eb:09:be:
                    ac:e8:90:c2:86:a6:c3:ca:fd:f9:9a:82:bd:57:fb:
                    fd:d5:5d:70:84:03:53:67:31:9f:0e:1e:a4:ee:6c:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:5D:DA:46:4D:98:1A:06:29:5A:E1:8A:55:87:4D:20:39:9E:40
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:33:d8:b6:2e:bc:5f:7f:b5:c0:e4:6b:8d:b5:88:f4:49:
         5b:e6:da:a8:eb:ab:ef:0e:ac:77:ee:f1:ec:f8:a0:6b:dc:95:
         0a:33:21:e6:38:c0:df:21:60:f8:52:a3:63:44:c9:74:38:74:
         2b:54:bc:dd:97:b7:c9:91:98:1b:9c:4c:d6:e3:c1:3e:fd:5f:
         34:f1:fa:54:fa:02:95:17:14:c6:44:43:05:87:ca:97:4f:a0:
         8f:57:74:f7:02:7a:9d:b2:6e:26:ba:30:7c:5b:4e:10:71:bd:
         f9:d3:a5:af:28:87:c0:37:77:2c:17:d2:01:37:57:76:56:52:
         ea:ba:72:9f:c1:0e:d5:af:e2:7a:c2:41:7d:2b:c6:43:f2:49:
         da:ff:31:2d:f3:94:37:7b:56:79:0a:b5:fa:65:53:3f:7d:2c:
         2f:d0:14:25:23:10:9f:f7:06:0e:88:b0:af:32:e2:29:c4:fb:
         03:f0:9f:d0:0c:4c:ea:bb:bd:e8:ee:bc:a9:6f:73:bb:1b:fc:
         c2:38:16:fa:6d:c2:c5:a4:61:48:53:e7:48:ce:d5:81:7a:30:
         e8:97:2a:ae:9b:7b:18:f5:5f:a6:93:d7:be:e7:0e:1b:9e:82:
         25:a4:54:80:05:4d:4d:fd:66:c1:75:b0:7a:6f:4b:3f:1f:5e:
         f0:0f:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----