Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
File:                     U6d_390Uwt8Vjr_C5s_ConmmSME.mft (raw, json)
Hash identifier:          2ZWlFhIkIs3qsM8sJjxzal1D8SZmI9dbwOiH7XmlcJ8=
Subject key identifier:   47:8D:F4:4B:00:6A:72:57:B5:FF:6F:81:2D:2B:0F:57:3B:3A:53:DA
Authority key identifier: 53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1
Certificate issuer:       /CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
Certificate serial:       01962F3D8F6B33DC4DB695FC33BE6754FF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft
Manifest number:          0EF6
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: U6d_390Uwt8Vjr_C5s_ConmmSME.crl (hash: goaPRv7CRahrtFWIX0yc1QJHPRW9PwfyK+oDXv3V2PE=)
                          2: ft6CTpjoPnOeyjCN03A4i61UZDg.roa (hash: zYsIQY88cCP6BOjXx6qQRS0WljzFQPd13/XtjsSjWVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:6b:33:dc:4d:b6:95:fc:33:be:67:54:ff:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a77fdfdd14c2df158ebfc2e6cfc2a279a648c1
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=478df44b006a7257b5ff6f812d2b0f573b3a53da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:d8:c7:1d:cc:c8:75:8c:d4:8d:7f:de:59:
                    7f:47:23:fe:ad:bf:c5:bc:e3:3a:92:f4:91:b6:2b:
                    d3:31:03:ec:f2:d6:39:3e:b6:0a:aa:42:f6:e7:a8:
                    fd:22:57:8c:0d:87:ff:9f:49:e9:82:26:4a:7a:7c:
                    d9:8e:3d:ae:9d:f4:ac:65:7f:b7:23:71:f8:c5:e2:
                    a4:d3:d4:d5:7b:e4:ae:54:e9:a0:ea:67:6e:90:82:
                    fa:c3:cd:ae:f2:14:90:9f:d9:a8:5f:f1:99:f8:29:
                    89:1a:22:43:4e:ba:4c:4f:3e:c1:58:f3:09:8b:a1:
                    8a:a0:38:2d:9f:31:72:a9:13:ba:84:81:92:de:b3:
                    7a:48:9c:0b:57:5f:97:27:c7:6d:6e:f1:c5:18:49:
                    9d:15:a5:1c:b4:06:a2:65:07:6c:02:30:c0:f0:b5:
                    45:19:7f:55:13:d8:23:ff:1a:f7:7f:ce:62:ab:b3:
                    39:e0:49:3a:2d:2f:1e:05:65:a2:64:d8:42:ab:17:
                    a7:57:ec:64:9a:e5:08:93:7e:79:6d:3b:f7:de:2d:
                    47:d7:8a:a5:eb:85:9b:7e:b5:96:99:86:7d:77:94:
                    2c:e5:be:5f:a7:d3:6b:03:b5:6c:6f:03:85:01:d7:
                    ff:d6:ee:cb:9d:cc:7e:a2:b7:a7:db:32:bb:35:ab:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:F4:4B:00:6A:72:57:B5:FF:6F:81:2D:2B:0F:57:3B:3A:53:DA
            X509v3 Authority Key Identifier:
                keyid:53:A7:7F:DF:DD:14:C2:DF:15:8E:BF:C2:E6:CF:C2:A2:79:A6:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6d_390Uwt8Vjr_C5s_ConmmSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/15a7df-99b5-4a91-9bc7-d8a42f320eae/1/U6d_390Uwt8Vjr_C5s_ConmmSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:1f:88:d3:0e:e7:c7:88:5d:dc:d9:12:d6:76:2e:95:f3:
         7e:b1:d2:fe:ab:44:c3:c1:75:0b:48:33:3a:d3:e2:81:2d:d4:
         49:31:61:42:3f:26:72:f7:8d:91:a8:2d:5e:01:fa:dd:bc:17:
         14:96:b2:e2:8a:f9:15:4a:b1:3e:4d:19:23:3c:c4:b1:d7:33:
         bb:1a:b8:a1:02:62:c2:b3:bc:94:53:7c:cc:fa:0d:3f:7a:85:
         32:87:1c:1e:d9:9b:e4:5e:c8:58:3e:ef:2c:db:69:e3:c9:36:
         ff:70:ed:2f:dc:c4:58:52:b2:e4:d1:f5:ed:53:e5:13:a3:a0:
         00:d0:a3:34:95:55:3e:17:0c:fc:cb:cf:91:1a:9d:43:1e:c3:
         3d:07:8f:a8:84:a0:b2:0b:9c:8b:2b:23:8f:e2:db:70:e0:31:
         84:23:d3:c6:20:c3:c2:55:ea:7e:c8:16:86:82:c7:34:d5:19:
         93:73:70:56:b4:a8:95:09:93:eb:4a:32:9b:68:84:24:22:ba:
         31:d1:18:5c:35:ad:86:ea:dd:72:40:04:8b:50:0f:5b:8a:d8:
         32:78:38:bc:4a:1a:5a:65:d2:45:13:51:ea:2d:34:1b:28:c1:
         99:c2:a4:a2:a4:dd:74:f5:98:4b:36:cb:86:07:e1:6a:23:01:
         a9:5a:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----