Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File:                     urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier:          er2nk7iNkROVdNmuC9CwW11Y+CUjJelqt02j50Rvhho=
Subject key identifier:   0E:05:7B:56:65:D7:EC:F8:FD:7C:6B:1B:32:96:EA:E8:73:9B:53:5C
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer:       /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial:       01962FAB65C7F1BE658856F60E8E9B24DDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
                          2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
                          3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: WC8sNohBOD8guNFpjJh6myn9+4GXuKHWwjeN4c9ILNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:65:c7:f1:be:65:88:56:f6:0e:8e:9b:24:dd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=0e057b5665d7ecf8fd7c6b1b3296eae8739b535c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:59:e0:21:b6:e3:f7:d3:cd:9e:32:31:03:
                    79:e6:bc:41:89:b5:e8:af:a8:62:7b:2a:bc:f6:38:
                    b9:5a:34:0a:21:fa:f4:34:3a:b4:45:f1:61:c4:35:
                    f9:e2:67:da:6f:b5:e4:1f:57:d3:5c:5a:65:e1:33:
                    75:21:e6:9a:f7:26:27:fe:22:6e:90:4a:e5:84:03:
                    ae:73:16:b2:e9:b2:7f:42:43:74:35:15:8b:ee:06:
                    ed:43:b8:94:84:ab:6d:3a:2d:fa:6d:90:09:21:a8:
                    d7:82:b3:5f:13:73:97:f3:c0:2a:51:6e:37:a4:24:
                    eb:6b:d3:0a:38:0d:51:74:97:83:48:83:aa:e0:b3:
                    83:49:63:4a:8e:f3:c4:59:d8:5b:3b:87:50:84:f8:
                    02:82:79:4c:7e:01:fe:8f:ae:cf:75:42:37:fa:71:
                    5b:9d:47:09:9c:cd:ca:57:83:05:e2:f6:3c:0d:50:
                    86:97:da:fc:93:2d:5c:bb:cf:8a:64:e9:1e:65:bb:
                    7a:d5:bd:9f:d9:a9:5b:63:64:ec:5b:fa:17:a6:87:
                    33:a9:2e:8a:f6:b8:25:d4:8a:0e:cd:f9:8d:33:c4:
                    ff:f7:16:35:e5:c9:0e:59:65:6d:a7:91:ae:48:52:
                    b2:e9:27:d2:52:19:3e:b6:00:0f:23:d3:f3:d9:fb:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:05:7B:56:65:D7:EC:F8:FD:7C:6B:1B:32:96:EA:E8:73:9B:53:5C
            X509v3 Authority Key Identifier:
                keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:2b:5f:e9:2a:4e:ec:78:76:c4:cd:11:44:0b:b9:cf:65:
         db:05:28:41:a6:75:97:c8:9a:0c:0a:4c:93:5a:46:a5:2b:5b:
         c5:aa:60:8f:75:7c:a9:7f:28:3a:ce:f8:d9:f2:3e:4f:23:6b:
         19:36:6d:7b:3f:55:f8:06:18:49:eb:5c:91:cb:7a:67:66:70:
         70:2b:7e:85:73:9b:18:7a:75:18:45:46:de:ca:8d:6e:1f:cd:
         7b:01:3e:1a:69:42:da:75:a4:60:ef:3f:cc:d1:e8:a4:72:70:
         d5:ef:78:1c:89:54:6e:12:37:9e:38:c2:26:41:3b:32:f8:54:
         c1:d1:79:46:c2:78:5a:2d:d9:d1:58:3e:7d:64:be:6f:2f:17:
         01:ad:09:53:00:5f:57:7c:97:ec:82:98:a0:6e:26:9a:fb:9c:
         f7:14:12:1c:61:aa:98:1d:a9:08:07:68:5f:2f:68:ec:bd:e2:
         76:b4:41:2e:30:dd:b5:d7:70:4c:48:3e:23:a1:91:a9:90:98:
         47:2e:bb:c5:02:8e:e6:1c:a4:64:fc:97:4c:95:75:24:ac:87:
         08:b7:84:3f:54:ef:da:83:66:6d:6a:f9:da:fb:7e:86:69:e4:
         33:25:07:3f:7c:dc:11:94:f1:55:02:19:40:8f:b3:4b:c4:73:
         49:18:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----