Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File:                     uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier:          Kllsl0Ax0c+EVruJN6GeDwbZN4JoHcg4MFEhTi/0QDY=
Subject key identifier:   40:0F:5E:D4:96:7D:E8:AB:DE:10:30:EB:A0:C6:78:E8:B2:96:F4:C1
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer:       /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial:       01962DF3EC492D9DA058E1D3F0049E121A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number:          0FDD
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
                          2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: 9FuK6GpJUUw8CUwPc44JIBEPvH5Z8zhjrJ8EiB5h3yY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ec:49:2d:9d:a0:58:e1:d3:f0:04:9e:12:1a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=400f5ed4967de8abde1030eba0c678e8b296f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:1b:e8:78:03:6f:1d:37:71:b0:a0:80:af:
                    a4:02:d1:de:3b:7d:89:40:74:80:51:f1:51:94:76:
                    56:0b:23:3e:38:2b:6b:83:4d:91:e4:24:65:ef:a5:
                    a8:32:3f:53:dd:cb:7e:fd:5e:cc:30:6d:15:d1:79:
                    08:75:9f:13:1d:37:53:a1:a7:1d:54:84:cd:70:eb:
                    fb:91:3b:0e:3f:87:09:56:00:df:bd:30:d9:5f:0b:
                    ef:b1:03:f4:a6:0e:32:5c:6e:b5:9c:8c:56:b5:1d:
                    44:14:18:4d:a5:35:95:8e:fa:15:cc:30:be:af:78:
                    cb:b8:a1:d4:61:81:5e:1f:c2:d6:0e:9b:b7:ca:61:
                    90:51:48:aa:e2:12:4b:22:5c:66:7b:21:b1:95:30:
                    d0:52:37:70:03:55:04:aa:b8:a8:4a:ef:18:a2:c4:
                    39:49:d6:b9:c6:59:22:f0:26:86:1f:e5:42:e0:c9:
                    39:c1:12:0c:2f:9c:87:f6:f4:6a:0f:41:f1:5b:55:
                    80:8c:b6:2a:c9:fa:09:e3:79:8e:a2:de:0a:8c:f2:
                    73:94:f2:e0:60:ef:0e:25:2f:cb:a9:1b:a3:1a:44:
                    66:ee:98:f3:33:34:fc:1e:85:69:41:39:91:30:6e:
                    6e:8d:b7:74:7c:b3:03:31:b4:40:78:ff:6e:b3:f3:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0F:5E:D4:96:7D:E8:AB:DE:10:30:EB:A0:C6:78:E8:B2:96:F4:C1
            X509v3 Authority Key Identifier:
                keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:50:c6:12:88:38:b4:ad:88:e9:8b:52:a2:15:df:f1:e1:a4:
         ea:87:f8:7e:65:cc:1b:a7:74:d0:96:09:cb:d7:97:d3:e6:95:
         f5:20:7c:f7:88:ed:aa:0e:85:9b:69:6a:18:30:6b:06:dd:9e:
         7b:56:a3:65:ae:38:48:a2:04:17:5d:bd:bc:34:13:19:03:33:
         0d:b1:ef:99:11:a0:16:b8:9a:2c:48:da:0b:be:54:eb:24:a0:
         b7:68:1f:85:c0:1c:23:2d:0e:d2:7a:27:f1:38:87:1f:e2:7c:
         2b:48:f6:ee:81:6a:35:8a:fe:5e:53:1d:dc:00:f3:64:94:4f:
         ac:be:eb:c3:c5:05:44:f0:e7:8b:47:6a:20:82:b1:41:98:82:
         cb:ad:e5:0a:08:1d:da:71:0e:8a:49:0f:6a:70:ec:02:8a:9b:
         22:0c:5b:5a:11:75:3f:26:b7:ca:b4:e7:e6:bd:94:e3:79:95:
         c6:4a:7c:3e:6b:45:d4:ea:d9:b0:09:47:3e:d6:e6:8a:d2:e7:
         ee:7f:3c:e0:4a:8e:01:c4:1c:4b:2e:16:e3:f1:4b:14:ec:85:
         27:c4:68:80:46:be:27:e1:42:6e:ce:45:f7:15:fb:11:0f:7b:
         67:ba:2a:bf:30:59:4a:e7:36:b5:96:90:c6:d3:57:5f:a6:26:
         97:f3:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----