Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File:                     u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier:          oOZhUbj4hYKcftzZcJ96ozmVXOtp3hMSKAo5OgRuYHc=
Subject key identifier:   D4:4D:B4:65:A6:A9:94:89:76:DB:CE:37:81:86:0B:A5:3B:AF:88:02
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer:       /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial:       01962E99AD43E37BC36B2521A5C25D7780AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
                          2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: bqSJheUHOr0u9g/aw+UFyaEPZJom4IQ+LJ0uVqnloPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ad:43:e3:7b:c3:6b:25:21:a5:c2:5d:77:80:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=d44db465a6a9948976dbce3781860ba53baf8802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:f8:4d:de:07:a3:e0:d8:6e:ef:91:ea:38:
                    08:81:eb:32:c6:27:21:fb:e8:8b:a2:99:66:b8:54:
                    17:f2:c5:22:e8:4a:5a:73:a7:e0:0e:8d:d0:a9:05:
                    64:dd:3a:3d:24:0a:74:8c:2f:84:c1:8d:4f:f7:8c:
                    8b:11:c9:27:c6:5c:c7:3e:0e:65:e0:4a:71:3f:a7:
                    9c:60:2d:40:3c:4f:e7:a9:6f:25:bc:fb:96:16:71:
                    37:da:e3:d4:97:86:de:ab:50:5b:b4:93:54:77:c8:
                    a2:d2:4d:8f:95:ba:6c:17:5f:ec:1e:24:e6:3b:40:
                    62:bd:c8:62:fb:dc:b6:e2:5d:a8:29:34:6c:38:2c:
                    92:7c:23:5e:ad:2e:ad:64:5d:85:3d:98:de:d7:8d:
                    af:21:2c:6b:30:48:d3:54:3d:89:f2:7e:35:fd:19:
                    a8:62:35:c4:44:0c:be:7d:b1:93:be:a0:6e:46:cd:
                    79:71:1f:1f:1b:19:0e:5b:5a:74:e2:57:33:60:a6:
                    9c:2e:e5:f6:f9:30:74:cb:41:f9:a1:95:bb:fb:0e:
                    83:fe:64:6c:0e:69:ec:17:0c:5b:52:2b:d8:da:59:
                    f1:39:69:9d:9b:4f:8e:6a:82:69:38:f3:ae:16:90:
                    1b:34:fd:59:87:85:e8:7a:0e:7b:d2:0c:45:f0:29:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:B4:65:A6:A9:94:89:76:DB:CE:37:81:86:0B:A5:3B:AF:88:02
            X509v3 Authority Key Identifier:
                keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a8:62:8a:85:77:bb:8d:88:43:b8:f1:36:16:50:b3:df:9f:
         d7:3e:d7:d6:79:9c:a3:46:34:c6:31:28:43:3f:27:95:8d:86:
         9f:41:fb:c6:12:e9:27:ff:e9:6f:5d:be:df:09:a5:e1:ac:72:
         b7:3e:e2:fd:b3:76:4a:1b:b7:ab:7c:ee:bc:7e:3e:31:5b:a7:
         f4:a1:c1:55:a1:a0:c0:89:fd:9b:1e:5a:5b:89:6c:4d:4d:28:
         1b:79:33:79:a4:b6:32:1c:57:94:f4:39:45:14:e8:08:43:98:
         10:dd:5c:fe:1d:8d:d7:a0:04:08:68:d9:c6:61:c6:50:cd:a0:
         b4:0f:fa:f5:51:1c:dc:61:7f:d3:77:ad:11:0d:b3:eb:e9:09:
         f0:b7:2b:84:70:34:77:5c:f4:73:cb:4c:56:00:25:cf:16:b2:
         57:f8:21:52:fe:0a:e9:ef:bb:41:53:59:92:bf:5c:db:42:b9:
         80:26:77:63:04:12:6a:43:a7:5d:57:66:d0:86:62:a0:2a:35:
         40:83:20:da:d5:99:42:48:40:c9:cb:37:4c:27:55:dc:2d:6f:
         2d:a5:f0:48:31:e3:0b:14:55:55:73:64:fe:32:d6:d6:38:a8:
         07:70:82:d6:cd:34:e6:24:ce:eb:31:58:92:bf:6e:86:03:04:
         82:27:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----