Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File:                     uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier:          uCMumtyK41r/mlTavXS/Q+4yR3Gi/CiTIBhk+Qw7gaA=
Subject key identifier:   E5:6F:D8:E6:EE:AE:D2:95:DB:81:4A:E7:31:17:CC:A5:E2:93:D0:24
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer:       /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial:       01962E2B3D8C2D75D98F971976FCB39B27DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
                          2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: EGLi/djtmYTpcIM4CgPz1wo6DtftgO+yE/Bw4T0b9hY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:8c:2d:75:d9:8f:97:19:76:fc:b3:9b:27:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=e56fd8e6eeaed295db814ae73117cca5e293d024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:89:15:46:a9:7d:a1:ae:a1:a7:5e:e3:24:ac:
                    fc:70:72:18:c4:c2:30:39:80:a2:33:98:86:79:d9:
                    8b:da:92:d0:a1:9b:b5:01:03:a8:50:03:49:e4:65:
                    ac:ff:ab:81:2b:43:bc:3d:d0:71:6c:d1:16:3a:23:
                    4f:58:18:fd:f4:70:22:04:83:b8:65:06:b7:a6:ee:
                    d6:e2:1d:29:a1:f9:53:90:1d:fd:3a:06:61:20:66:
                    9b:4f:c2:92:69:84:e9:6a:26:47:a9:68:e2:9d:53:
                    a4:67:f2:a6:b2:4f:64:02:3a:e9:cd:a8:41:1b:28:
                    c5:c6:a6:eb:90:8f:ee:3e:ec:7e:29:9f:3b:08:a7:
                    25:a3:23:60:e3:7b:0c:32:89:01:91:f0:74:0c:60:
                    e3:ad:d9:17:d3:ea:b3:9f:5a:87:70:89:1e:3a:f3:
                    b7:2a:70:95:59:3d:a3:d0:14:ff:cd:fe:55:3b:84:
                    bd:19:97:31:1f:6c:3a:63:a8:7e:f7:bd:ff:57:b1:
                    7b:6b:7a:d0:8f:86:db:a7:f3:15:84:ff:e6:4d:f4:
                    3c:9a:a8:1a:8c:77:78:f7:38:17:6d:73:c6:b9:68:
                    83:cf:58:c6:64:7d:d0:a8:d8:b3:e2:da:53:00:20:
                    b1:83:5e:73:10:00:b4:f7:de:57:45:a3:9e:58:43:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:D8:E6:EE:AE:D2:95:DB:81:4A:E7:31:17:CC:A5:E2:93:D0:24
            X509v3 Authority Key Identifier:
                keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:c8:2d:de:68:b1:e9:5e:1b:8f:e8:8c:f8:f3:84:9f:67:
         5f:38:27:3b:d0:ef:03:ea:d8:12:73:a6:ac:28:aa:2a:86:24:
         88:5d:84:5c:30:b7:d2:0a:65:4e:e9:a6:0b:a3:b1:d1:b4:71:
         c1:51:0b:1f:11:3d:92:a3:b3:b0:61:eb:e4:49:a7:92:8c:f0:
         ab:f0:00:2e:1c:12:b4:07:9d:96:57:8c:63:71:b1:2e:26:b8:
         17:7b:1c:6e:fd:58:66:9c:ea:9c:1f:c2:ef:7f:cb:b9:33:af:
         96:b7:ee:6a:2d:f0:a7:07:44:0c:2c:0b:99:96:06:0e:12:53:
         26:4a:0b:fe:ce:01:e0:eb:65:f9:68:b1:21:c5:71:5c:64:72:
         8e:9e:dd:a9:ae:af:dd:90:3d:9c:19:19:85:d5:b1:ad:60:06:
         1e:92:43:45:53:9a:54:29:bb:32:7a:bf:06:9c:fc:c5:bb:17:
         25:4c:d2:55:32:ba:a0:45:e7:7e:d4:68:7a:ae:78:61:2f:ca:
         e1:32:90:00:1d:1b:ba:e5:8e:b9:ff:b3:57:8d:bc:7b:6c:66:
         8d:59:34:09:cc:85:22:7f:ee:c6:b7:af:61:17:33:ba:ed:c1:
         2a:18:83:75:a5:a3:68:a7:3c:41:e5:9d:1a:41:b0:83:14:fa:
         27:2b:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----