Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File:                     ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier:          eLcWgt2o/yw6J1Lz/H/Bjun4VG+/iRhIALW5AjKs1KE=
Subject key identifier:   2C:3E:0B:97:E6:8B:BB:CE:86:45:94:93:9D:8D:ED:A3:29:2C:E4:75
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer:       /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial:       01962E9931D532BD91771307AAC3FC420907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number:          0A20
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 5AZ3tR0kmtggSX8GQL0nk_9vkNM.roa (hash: o7jn9b/bWLBA/ntIWwkYzFbMhpkdc8Mhco9rAn9gsO0=)
                          2: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: lEqi2oUGEKxs3iyHu6q0asXqU1YdposEr/oT0NnnwsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:31:d5:32:bd:91:77:13:07:aa:c3:fc:42:09:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=2c3e0b97e68bbbce864594939d8deda3292ce475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:67:45:1a:f7:45:1b:ac:85:09:f5:c8:c2:
                    10:19:83:53:3e:94:1b:e8:48:a9:57:98:ac:2a:bb:
                    31:c9:36:6b:8d:8b:b0:8e:22:c6:7b:6b:70:8b:b4:
                    de:32:cc:33:5e:8d:57:22:3b:38:c4:c6:f6:88:bc:
                    85:84:1f:72:16:2d:bb:05:52:f1:d1:d7:11:28:9e:
                    88:90:59:5f:44:7e:7e:3f:7a:62:47:76:86:fa:9b:
                    97:de:8b:d2:c0:a1:20:84:3d:d8:cd:5d:a8:42:ea:
                    a0:50:04:68:7a:7d:85:d8:1b:a2:b3:75:10:52:b1:
                    eb:7a:e8:bb:99:87:07:76:22:dc:46:7b:c0:c1:4f:
                    b9:5e:f3:01:46:1e:47:2e:93:0a:ef:69:a9:8f:1b:
                    ba:bb:19:40:82:20:a1:ca:80:df:04:53:6c:ed:3e:
                    2d:3e:9b:6f:37:96:e9:33:4e:9a:12:17:a8:16:53:
                    59:00:57:c1:3a:41:9f:39:a7:eb:95:4a:c5:83:87:
                    a9:6f:e3:be:d2:da:b6:17:e2:5d:61:96:9b:15:b5:
                    84:b9:86:41:c1:70:bd:6b:d3:d5:7d:5f:a6:d9:43:
                    b4:90:c6:9a:3d:c0:1f:53:96:16:a7:f4:ca:3d:34:
                    4b:c0:51:c3:29:b1:f2:fa:de:13:5d:c2:ee:8e:37:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3E:0B:97:E6:8B:BB:CE:86:45:94:93:9D:8D:ED:A3:29:2C:E4:75
            X509v3 Authority Key Identifier:
                keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:b1:3b:62:a9:c7:e1:22:27:be:6a:54:65:65:29:9e:c6:
         ea:ff:bb:91:30:b8:b8:86:9e:d4:31:9b:12:60:6c:d4:4a:61:
         3e:2d:19:af:71:51:43:91:4b:1b:51:56:25:45:df:d1:20:ee:
         9a:cd:32:10:cc:e2:67:bc:f3:8a:ad:b0:16:a2:79:36:c0:48:
         18:d0:b6:47:15:20:58:7b:2e:88:10:74:cd:61:24:54:cf:6c:
         3b:01:b2:60:19:49:48:28:b4:7a:40:f3:80:6d:02:6b:26:f6:
         b4:33:db:d4:37:96:8a:d8:0b:20:45:3d:13:0c:c5:72:b0:2a:
         d0:45:ae:f6:6b:b1:60:eb:91:53:5a:3d:b2:03:d8:ea:60:2a:
         36:6e:91:be:76:be:f8:55:97:dc:80:46:c8:1b:12:eb:bd:9d:
         ba:b8:64:6f:81:ee:90:af:b1:dc:24:be:a4:25:84:d8:17:ef:
         dd:a0:70:ba:93:85:19:5e:24:4e:77:0d:c7:87:06:57:dc:ee:
         84:09:86:bd:88:2e:95:ba:ee:15:86:94:f4:12:7a:16:b0:9a:
         9c:96:f8:4d:57:76:84:31:71:65:3b:dc:b2:27:8f:bd:4d:ca:
         a4:4d:81:2b:35:f8:a5:c3:62:01:f3:6e:30:ca:c6:07:6c:bb:
         1e:a5:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----