Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          cuzx8ZbXY2J7pA2bFoaG8G36HEIAob1TuqinVpbwiPA=
Subject key identifier:   79:6E:DD:F0:00:C7:F5:65:7A:40:A6:A0:ED:3D:10:AA:E7:41:DC:AE
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       01962F74F57F50E2433BED2935E9AC99FDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: AZwj0Iuykway_WQBa3ENsQ_JxtA.roa (hash: Q7rNa7RTxQcsrsOIx/wgjhqBI7OG9HoBnLFXa7zfZYE=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: Y7NnXtMmtd8oNeVE22kDbQ+WITv0IJ0EErE8wM0ZrWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f5:7f:50:e2:43:3b:ed:29:35:e9:ac:99:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=796eddf000c7f5657a40a6a0ed3d10aae741dcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:c6:63:ce:47:ba:7c:19:32:09:ae:59:1e:
                    42:83:15:a7:08:f3:3c:5a:64:90:9e:77:69:d7:7c:
                    16:50:2e:43:2a:14:d4:5e:f1:59:26:2f:16:9f:af:
                    1e:2e:e4:a3:a4:e0:fa:ad:86:16:6b:77:67:8e:18:
                    b3:bf:fc:89:8f:22:46:0d:69:a4:44:36:d0:e2:aa:
                    b1:6b:1d:d9:b3:9c:5b:5f:f1:93:04:84:b2:68:77:
                    8a:22:ce:31:12:9d:3d:d6:5b:d4:9b:48:91:06:7a:
                    e1:69:cc:e6:84:f9:7f:17:15:f6:b9:b8:7c:68:92:
                    39:67:5c:12:8d:2f:f0:84:68:a7:3b:30:94:79:70:
                    7e:ec:d3:36:81:ec:69:4e:05:2a:18:90:18:c2:39:
                    33:46:35:37:64:2a:cd:46:0e:71:fd:bc:60:c6:ed:
                    39:83:bf:d4:bf:b9:8e:62:11:b8:95:5f:2e:05:4b:
                    c2:08:0d:fa:59:cb:ac:48:4e:20:e7:ca:2c:d9:de:
                    f5:38:78:c9:3b:7b:3c:d0:d1:cc:bb:d7:d5:30:07:
                    36:89:a1:bd:0e:26:b6:f9:31:1b:31:d4:9e:28:ba:
                    c0:a5:58:4d:38:e4:fa:05:3d:84:f4:79:b4:27:75:
                    52:ac:c7:45:a4:63:e1:17:07:d2:ec:08:cc:f0:15:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:DD:F0:00:C7:F5:65:7A:40:A6:A0:ED:3D:10:AA:E7:41:DC:AE
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1e:fe:d4:43:04:23:5c:72:6a:f0:6f:c6:f6:c0:1b:9d:ca:
         b1:74:96:2b:45:85:91:0c:b7:e6:bb:50:57:3e:99:da:12:e0:
         f8:62:24:8d:97:76:7c:9e:8c:9a:99:56:b0:82:72:54:46:b6:
         8c:48:c3:ac:3f:61:cf:01:21:48:85:7b:4b:58:93:42:7b:ab:
         42:6a:8c:59:06:3a:5a:ca:05:03:f8:54:d2:38:5d:8b:1b:07:
         c3:f6:27:5a:61:62:80:49:4a:b2:30:39:51:99:6f:38:66:c2:
         02:6b:9e:94:c0:82:16:64:3c:d7:14:a8:1e:aa:17:e1:c2:6f:
         13:2e:4d:8c:07:01:20:31:85:b2:30:f9:14:ca:00:53:67:a5:
         27:7c:2b:31:06:d2:19:11:53:03:09:fa:4e:73:6b:1b:6b:48:
         33:f4:87:ca:11:98:d5:ef:f4:e8:15:60:a2:05:00:48:10:c7:
         7f:c2:f7:a3:3e:1f:89:28:05:99:16:c8:a5:fa:8f:25:8b:f0:
         da:03:95:88:ea:c4:df:99:15:ca:08:ee:bc:e2:ed:5a:70:6b:
         1a:fe:3e:43:44:25:04:62:e9:9b:96:ee:83:74:db:15:4d:e0:
         16:f7:dc:88:5b:9a:78:40:97:ed:75:18:16:3e:82:ab:af:33:
         db:de:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----