Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          ajbgBVORdTeP+ofNZ8UTOfhuYAYCUd/cNiJGcAXtVB0=
Subject key identifier:   AB:4F:1D:8A:E6:A2:81:17:25:90:03:D0:AB:73:D2:31:DF:1A:A5:59
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       01962DF439FF579DF95DA6636A4E4379D813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: 7nd9OqLhOWtB59IGGXgqGmJNoQg4q1Ib8ajadVHsQN8=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:39:ff:57:9d:f9:5d:a6:63:6a:4e:43:79:d8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=ab4f1d8ae6a28117259003d0ab73d231df1aa559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:68:c1:e5:ef:af:2f:70:d9:16:fc:d2:9c:
                    5e:a2:a5:66:64:30:0b:c9:a9:63:32:3e:95:80:92:
                    ff:e7:8e:7f:e7:cb:fe:b2:de:ee:8c:27:13:9e:22:
                    ac:6c:02:f8:bf:9a:68:65:39:17:c2:09:a6:51:f9:
                    b0:76:31:dd:24:59:37:ca:32:6f:c3:7e:68:77:b0:
                    d0:f6:2f:a7:42:0e:07:0e:5d:62:63:8e:3d:66:d0:
                    8e:31:db:ab:f1:79:65:a8:d7:96:eb:67:68:b7:a7:
                    d7:bd:f0:5a:62:26:0c:cd:28:fa:33:96:52:40:52:
                    99:a4:72:4d:49:91:23:af:e5:87:e3:4d:c1:fb:a4:
                    ac:0d:3c:19:e5:9a:5f:c5:3f:54:0c:2e:e4:03:0f:
                    b0:8e:d8:38:08:83:6a:34:bb:e3:c4:0f:e0:55:fa:
                    87:b7:d3:52:a9:2b:4b:eb:01:55:9d:b8:40:73:39:
                    ed:12:93:07:05:32:a1:53:79:58:7e:da:24:6a:1a:
                    5d:3b:d1:61:a9:19:55:ea:42:33:09:51:e8:c2:09:
                    ab:7c:3f:cd:04:44:8f:ba:3e:33:d8:8f:2d:7d:f4:
                    98:c8:d9:ad:c4:cd:06:62:41:bd:ec:38:a2:54:af:
                    d3:a3:84:5a:e2:48:e2:a2:aa:b6:91:cb:29:14:eb:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4F:1D:8A:E6:A2:81:17:25:90:03:D0:AB:73:D2:31:DF:1A:A5:59
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ca:5b:36:e8:1d:42:9c:4d:b5:9f:51:62:59:9d:84:17:7f:
         fb:3d:40:75:13:b7:a6:23:5d:ea:84:09:27:69:9b:c7:34:0e:
         b9:61:01:aa:6b:70:9e:33:ad:80:10:a0:d9:4c:a5:6f:e0:34:
         47:14:24:55:6f:47:6e:51:66:b6:62:d1:2d:5c:56:88:11:bd:
         d9:dc:35:10:ad:3c:d5:46:bc:0e:78:53:cf:a8:fb:19:59:b3:
         53:80:58:f1:77:10:d1:03:e2:fa:92:b1:18:44:78:1b:fd:1c:
         27:db:6d:bf:75:dd:86:44:14:bd:4f:ac:3d:21:f7:61:c3:d0:
         e8:ee:3c:22:6e:43:36:fd:3a:09:d6:a9:f9:35:8c:80:73:74:
         44:0d:ac:25:e8:9e:95:de:ac:f8:10:f9:80:77:e9:eb:6a:f9:
         45:13:1c:3d:0a:e6:37:a5:73:95:b8:82:12:90:55:4b:e9:63:
         31:63:0e:29:fc:34:63:36:96:c1:42:02:92:70:db:09:ca:12:
         95:2c:4f:e7:79:f7:5b:06:6c:79:74:f4:b0:47:61:5c:5b:45:
         dd:12:f5:5f:0b:8d:e6:4d:c4:bd:9d:5c:c7:5b:6a:c2:86:9b:
         50:b8:e4:53:3c:a0:66:71:d4:aa:eb:aa:1d:be:0a:f3:e7:da:
         90:5f:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----