Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File:                     uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier:          AF1rTrK/NXvLF2/Vw4RHIs/quO2zR5QDY1A4egCDDhQ=
Subject key identifier:   16:97:EE:FE:18:BA:FF:B9:B5:30:F7:09:3A:CD:99:63:C7:B5:82:17
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer:       /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial:       01962F748E0A1898B03DFBE9656E06BDF28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
                          2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: cWmRcJ7q8y8BQ2uJp+WOabsuz+dlrTogWevaYK9lw/E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:0a:18:98:b0:3d:fb:e9:65:6e:06:bd:f2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=1697eefe18baffb9b530f7093acd9963c7b58217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:c6:c3:7b:5f:0e:69:4d:27:ed:fe:3a:22:
                    70:d0:98:3b:64:8a:9a:b4:85:48:a9:a8:9f:33:54:
                    d3:e2:53:73:fd:14:74:ac:1b:e8:c1:f9:58:be:08:
                    9f:96:f8:44:7b:70:b3:e5:7d:be:92:7b:9a:ac:b2:
                    5c:ef:87:8a:1a:72:1a:61:72:78:94:38:b4:ca:09:
                    88:5b:db:c4:5a:e5:95:2f:8f:f3:18:1d:9a:93:57:
                    49:5a:9c:2b:77:80:fc:5b:76:9d:10:66:3f:4c:ac:
                    57:bc:52:52:12:19:18:d2:99:9c:46:44:88:c7:25:
                    12:f8:6c:41:3d:0b:71:c1:75:a3:2b:c8:9e:ee:58:
                    ea:8b:55:ac:83:90:79:96:6d:70:91:00:f4:44:89:
                    86:38:50:0a:5d:b1:cc:2c:50:35:61:05:5b:0a:93:
                    a4:77:b1:8e:bf:5e:85:c1:20:04:f6:c1:a5:76:8a:
                    82:44:1f:cf:0e:44:41:be:ce:cc:5e:74:8e:26:16:
                    bb:0e:b9:66:e1:36:87:2d:fe:42:76:cd:5c:b7:9e:
                    66:d0:2f:82:08:60:87:2a:43:3d:b4:69:95:11:a0:
                    94:77:7f:84:81:f2:af:e5:9d:35:45:0e:9d:f9:7c:
                    f1:ec:3e:61:34:bc:b8:ae:8c:b2:8b:a6:5b:ee:23:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:97:EE:FE:18:BA:FF:B9:B5:30:F7:09:3A:CD:99:63:C7:B5:82:17
            X509v3 Authority Key Identifier:
                keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:87:38:10:5a:45:7c:4c:63:93:fb:fe:21:2c:13:99:80:
         1f:04:78:cd:65:65:bc:8e:a4:08:74:84:d2:bf:a3:91:a9:6c:
         3b:72:af:a0:58:11:c4:a4:e1:fa:7b:1e:e8:d9:3b:6d:be:5f:
         85:c1:ba:93:f0:23:e5:1f:2b:1d:9c:66:f9:60:2a:5c:db:ec:
         9b:8a:9c:51:9c:d1:28:6b:e3:7b:98:98:da:1c:ed:ff:fe:08:
         5c:9f:9e:f6:62:46:2c:c3:06:d0:37:2b:b8:3c:03:c5:cd:84:
         1e:5b:12:86:d9:31:49:e8:3d:00:d7:e1:91:93:a6:6c:78:e1:
         7b:2b:99:56:c3:bf:80:a8:b4:9e:fd:13:ec:17:5b:f3:68:8f:
         53:41:b9:3d:f2:5a:3e:9c:5d:47:62:a7:92:23:af:26:b4:cd:
         e1:4b:4f:da:6d:40:db:73:b2:99:75:9a:3e:4e:78:7e:ca:d3:
         e3:04:25:34:ab:38:17:71:ff:26:59:bb:f9:03:c0:ee:4e:c9:
         a3:66:ed:88:2c:5f:e2:89:eb:e3:57:32:a8:40:10:04:17:ba:
         e1:15:d1:1d:5e:ac:89:3d:e4:4b:d2:6f:f8:49:98:1c:34:fb:
         0b:78:04:0a:d7:87:73:32:f0:e6:ad:95:02:08:09:6e:ee:0b:
         e0:d2:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----