Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File:                     U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier:          9fz1ZPF76tO+1F69Ptd0JNwshgqaP24fRjp/dks4iIM=
Subject key identifier:   9F:E7:5B:D0:BE:39:88:31:52:A9:CD:57:36:E7:86:6D:A4:1E:66:6F
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer:       /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial:       01962F06AB39A6EA779D3F174F32F74E71C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number:          0EE7
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: 95GF53RjaQsIwUDqlgU7wTQSha1wAIPpS+c5Hv6AbNs=)
                          2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ab:39:a6:ea:77:9d:3f:17:4f:32:f7:4e:71:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=9fe75bd0be39883152a9cd5736e7866da41e666f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:f5:5c:bb:5e:d7:38:1c:4a:b1:cc:5c:ff:
                    0a:00:6c:4d:5f:19:60:c9:b9:9e:6c:a7:33:bc:81:
                    ee:31:55:5b:77:35:ab:39:b9:51:80:cd:2b:23:91:
                    54:50:5f:4c:e5:2b:7f:b4:81:c6:96:4e:9d:74:3c:
                    79:00:3c:3a:a2:7a:90:56:b5:c8:d1:37:db:71:f7:
                    28:08:68:4e:48:61:50:31:8b:7f:bf:90:bd:46:60:
                    c3:c1:e5:52:5a:2a:ca:01:af:ec:72:fd:43:5a:a6:
                    99:f1:ed:0e:92:f1:0f:2a:98:0b:4b:a0:18:65:f6:
                    80:8e:38:f1:46:cf:7b:2a:de:d4:09:c9:30:25:e1:
                    8a:80:b7:fa:9f:2b:42:21:1f:34:dd:5f:14:e3:88:
                    3f:3a:ec:a1:33:5b:04:b0:8e:1c:43:3d:84:3b:3d:
                    4f:41:18:59:21:d9:7d:46:04:c5:0f:ab:ad:93:0c:
                    8b:16:83:2d:fc:d2:7c:d7:b6:bf:51:45:50:12:42:
                    25:21:53:f9:88:eb:0b:d2:c9:f3:77:26:2d:db:58:
                    3b:e7:19:3e:65:f4:45:fb:f8:05:c6:6a:7c:ce:60:
                    58:12:56:98:de:19:c3:cc:2a:63:7f:2e:7d:9e:e0:
                    36:73:a5:19:bc:db:ab:81:6a:8e:65:e6:aa:66:3b:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E7:5B:D0:BE:39:88:31:52:A9:CD:57:36:E7:86:6D:A4:1E:66:6F
            X509v3 Authority Key Identifier:
                keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:5c:98:85:ac:31:9c:56:08:b2:b0:54:4d:1f:2f:fc:83:
         75:63:4f:dc:59:56:5f:72:17:08:e3:b5:36:83:e4:cf:93:33:
         20:a5:5f:75:b9:7d:0c:05:10:d4:6f:9a:75:91:20:fa:5a:89:
         4a:3c:c1:a6:7e:a9:b6:a0:a5:87:55:d8:59:ba:5a:9e:db:f2:
         72:13:94:a9:f9:9d:9f:cd:c1:6c:a0:ce:7e:01:9c:95:9c:21:
         62:c3:a4:a7:a1:44:67:3d:fa:da:32:f3:9e:be:45:93:5d:cc:
         9f:d8:53:96:3c:91:16:72:69:58:f1:ed:6d:a9:64:7f:fa:05:
         4a:02:c5:a3:93:47:a3:4b:15:70:ac:d8:ab:29:95:01:61:09:
         66:80:2a:cd:82:31:29:c9:de:c1:e1:61:7b:4e:f4:f5:3a:28:
         55:30:b9:61:4d:0b:d5:fe:34:26:bb:9d:74:e2:81:b9:b5:f4:
         17:c8:8d:58:1d:3a:34:b2:04:0f:de:ca:9a:d3:da:13:12:fa:
         4d:c4:81:d1:86:b1:fa:c5:b0:46:3a:56:a8:f0:37:ff:57:59:
         d6:ce:49:ed:6f:da:88:87:73:20:0d:d6:99:6c:9a:57:27:00:
         62:d7:02:6b:b9:4a:25:3d:21:01:61:f3:6d:da:4c:79:49:40:
         16:14:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----