Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File:                     u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier:          308zkdL1fqg81c11LxqPkwp0OC0x2bpnq5VAl4k8JNo=
Subject key identifier:   8C:BA:BC:E2:AF:85:44:46:28:9F:DD:B7:19:88:9B:C0:DC:BE:7B:D3
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer:       /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial:       01962F749EE376B444FF19D205C900448E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number:          0FC1
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
                          2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: nazpoGdN/EGf4+0Og+pLfgk+v1PtccaCmOyh9ETzoMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:e3:76:b4:44:ff:19:d2:05:c9:00:44:8e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=8cbabce2af854446289fddb719889bc0dcbe7bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:14:75:56:d4:ba:91:d3:6e:95:ad:83:54:
                    04:48:4b:bc:08:37:e4:93:73:6f:3d:f3:44:ad:7d:
                    3c:59:97:66:e6:a6:bc:e4:f4:db:97:5d:be:a3:75:
                    35:36:96:16:ca:c1:74:56:73:aa:11:a0:d9:0c:94:
                    6a:f8:c0:44:dd:55:d8:8d:53:75:3c:af:67:81:33:
                    ba:34:e1:1b:7a:6c:df:9f:42:d4:a2:f5:4d:5f:c4:
                    4c:b8:39:63:d1:13:fd:b2:36:2e:48:a1:09:6a:6b:
                    92:cb:ff:5e:17:a4:9c:03:00:a5:e1:db:c3:54:3a:
                    98:6d:31:11:b8:bd:65:40:07:ad:c7:b1:9f:5c:15:
                    51:a9:a0:d2:77:9e:30:db:65:7a:4c:4f:4f:c3:de:
                    1a:bb:2f:43:fe:c6:bd:98:4e:35:83:05:66:66:92:
                    c0:b6:51:8c:38:dc:19:3f:ce:5a:07:33:32:38:0f:
                    57:84:8c:90:a7:f3:64:4d:59:15:76:82:43:2d:9e:
                    b2:62:59:a8:de:5a:32:b3:e5:14:13:6e:74:5e:ce:
                    0e:cb:41:08:9b:16:12:e5:18:b2:54:37:81:a8:ec:
                    1d:ed:08:d6:ff:81:32:2c:3d:05:9f:27:1e:a9:c8:
                    d2:7f:0a:e5:5b:10:49:9c:b2:5a:83:63:50:ef:a8:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:BC:E2:AF:85:44:46:28:9F:DD:B7:19:88:9B:C0:DC:BE:7B:D3
            X509v3 Authority Key Identifier:
                keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:65:92:06:85:69:fa:a3:a1:ce:e5:ce:94:f3:3f:a2:3f:
         cb:da:1e:0c:d9:3a:b9:e3:72:64:f1:4a:21:16:50:1d:d9:ab:
         09:b6:6e:2c:d8:b0:44:f4:21:a1:d6:5b:8b:2f:bb:81:0b:2f:
         d6:0c:9c:a4:de:4a:5e:12:9a:0a:95:33:bd:a3:84:80:ea:26:
         16:b7:30:54:71:d7:3a:27:71:8c:8f:9e:bf:0b:44:48:d5:08:
         ea:a4:7f:00:87:7a:ba:65:97:27:27:60:a0:91:1e:49:59:3c:
         bb:9b:8b:4a:96:e9:93:16:00:8f:b7:21:a8:01:57:ce:bc:67:
         60:33:d3:c0:d6:6e:b1:54:2e:64:a4:b8:b3:d5:d9:53:a7:e0:
         f9:66:5c:cb:fd:cf:dd:2c:da:98:4a:8b:b4:10:b9:28:72:b9:
         f7:5a:9c:8a:5c:54:bd:d1:37:96:90:a7:1f:4d:c5:9c:dc:92:
         b7:fa:e1:38:44:6c:bb:d7:16:74:ba:c4:86:aa:83:6e:58:81:
         2f:e3:3b:c7:f9:ff:7e:56:e9:10:47:fb:2b:3f:ce:9a:f9:97:
         f7:4a:7f:29:b0:2f:4f:e9:69:43:21:c2:cd:60:dd:19:d6:9f:
         bd:ca:94:21:c5:fa:b1:ee:05:65:97:81:a4:13:d6:06:2f:87:
         c0:a0:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----