Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          mzdwfp32Wf9bZuUmCtnvkUfIapkUFh0FL3myXaAmYyY=
Subject key identifier:   A4:08:D0:B7:C0:65:D3:92:F0:C9:38:DB:A3:81:67:90:CD:56:49:15
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       01962ECFDE3C2BF1B215B22281C2C6707760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          1440
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: FAbnnF69oHTmqk-_EL74zctuaA4.roa (hash: fltdyHSTKiTHvNl3z1Whswl3hhYadpjXzd/kAG+oHEc=)
                          2: aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa (hash: RYvSIhl4EMxqFZiyrQ0zAL7ZWanzg67h6dO8KAffWY0=)
                          3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: D0X7MxQZwLuR4pdK/glqBLUsVluFBgxiAtgseVt7Ikw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:3c:2b:f1:b2:15:b2:22:81:c2:c6:70:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=a408d0b7c065d392f0c938dba3816790cd564915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:df:5b:73:53:51:9d:cf:24:e1:ce:07:6b:
                    d2:97:89:3d:36:67:e0:2f:45:1a:71:ea:34:6a:06:
                    f1:75:d4:d1:f1:de:39:db:2d:9a:ba:2a:8a:6a:53:
                    e9:17:8d:ca:29:d9:12:68:05:fd:d9:65:aa:28:da:
                    9f:87:50:41:b2:4d:7a:50:14:f7:76:0a:e8:b9:32:
                    02:0f:65:34:e0:b4:60:47:12:8e:ab:fd:19:af:f6:
                    05:36:61:ef:ec:95:0b:6a:39:56:f1:63:54:98:61:
                    3a:fa:d2:52:09:c8:79:53:f4:cd:42:82:96:c7:49:
                    68:68:43:35:07:09:3d:02:a9:e9:cb:76:9f:a4:f5:
                    9e:08:cb:09:57:77:3d:72:0a:a4:c1:36:60:0e:3e:
                    0c:de:c7:bd:7d:27:05:86:49:0d:21:a2:3f:2d:d4:
                    1f:a7:37:5c:02:7f:98:50:24:8e:d7:80:af:47:f5:
                    19:63:1f:cc:b1:9a:cb:0b:ca:ab:65:15:d3:9e:de:
                    93:f5:47:97:3e:1c:fd:e6:d7:e9:53:18:79:20:9b:
                    90:1e:18:c5:eb:58:73:d6:49:aa:31:60:93:95:db:
                    5f:33:3a:28:36:e2:09:1c:98:11:e8:73:47:61:05:
                    74:57:e8:31:39:0e:c8:69:9b:c0:4d:a0:60:81:2b:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:D0:B7:C0:65:D3:92:F0:C9:38:DB:A3:81:67:90:CD:56:49:15
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:b5:32:0f:06:df:ff:47:6a:81:f8:e6:56:84:cc:3f:e0:
         2f:b1:6b:4f:45:b9:1e:ad:29:68:42:22:a5:1f:0f:d8:93:dd:
         a1:df:ee:e9:6e:e0:d1:0e:06:d5:3d:ab:9f:49:43:b6:bf:0e:
         cb:b4:53:94:4e:5a:1e:4e:05:09:d1:d1:67:c8:ce:18:84:c7:
         d3:91:7c:55:2b:93:1a:8c:05:45:9a:c7:91:be:bf:70:36:6f:
         10:63:8c:af:a2:63:eb:7e:95:2d:49:f9:47:7c:ef:af:e8:54:
         7f:4a:86:2c:c7:ae:30:3f:db:5b:25:90:95:45:4d:9c:ba:63:
         b3:d3:21:3c:77:10:da:9c:c8:97:ae:26:12:77:8c:87:5b:8a:
         70:cd:6a:ab:ca:ec:a6:2d:e2:85:90:7f:fa:39:ca:97:d1:fb:
         a5:35:c0:20:cd:8e:a3:9c:87:0a:73:ce:9e:44:d0:a2:af:f6:
         ed:2d:c3:78:db:a7:8b:a2:6d:ef:1f:dc:aa:5d:81:18:b4:7f:
         ea:3d:8f:ea:6c:38:31:77:85:c4:7d:32:41:fd:67:e2:19:c1:
         a0:59:6c:c8:0f:75:44:77:77:cc:11:d5:85:be:81:ba:c3:d5:
         13:0b:74:11:74:36:25:84:8b:e8:db:b9:ba:1b:19:37:68:b5:
         d5:e5:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----