Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File:                     u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier:          aLN/4YI9rw2PNOpPzr4WJm5fUltuXIGDJiwVhkqsKug=
Subject key identifier:   2F:1E:CE:31:12:29:4E:E5:1C:7A:15:EF:8F:37:93:EC:3A:78:FD:6E
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer:       /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial:       01962E61899C4B09B58CF36E56C965F228E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
                          2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: DH2XCQa+8aLTmTqfD8/9vWr8/KNWJkAWWN+T6FfA/lU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:9c:4b:09:b5:8c:f3:6e:56:c9:65:f2:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=2f1ece3112294ee51c7a15ef8f3793ec3a78fd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:64:f9:46:43:32:44:35:2a:65:62:4f:fa:
                    25:6a:b0:5a:8e:b0:be:e0:f8:75:67:10:1a:b2:6e:
                    e4:c3:9f:a6:90:b6:98:ec:1e:5b:ea:c0:30:03:0b:
                    be:74:c1:38:2a:78:7f:c8:1f:2c:82:23:22:5f:f7:
                    04:bf:e1:d1:24:ea:ea:b7:9d:e2:6c:a5:77:c1:e7:
                    9d:8f:43:91:15:66:3e:6f:9b:a0:ef:90:78:a7:88:
                    2b:2a:ce:70:ef:ae:d3:3f:b5:61:65:da:f2:2e:0b:
                    a0:cc:b3:da:8b:27:af:d0:ed:f0:86:d3:55:f6:b8:
                    e8:c4:4a:96:d3:09:0b:17:8b:d8:32:0e:f6:0e:7d:
                    a8:96:b7:ae:64:f4:c3:41:65:f5:6d:37:c6:0c:ba:
                    f2:c8:53:67:0b:61:38:0d:34:47:cf:0a:de:43:f4:
                    7c:33:6a:6b:f0:c4:ac:72:6c:e6:04:2d:9f:ee:80:
                    a4:c2:3b:a2:d7:6d:79:a2:fe:54:25:3d:7a:ed:eb:
                    62:e5:46:3a:8f:e4:d3:d2:86:a3:cd:8d:65:d4:f0:
                    4e:97:87:19:9f:27:75:73:34:08:d1:db:2d:1b:dc:
                    44:de:da:a7:e0:eb:2b:d7:b9:2a:65:e6:81:51:c4:
                    a8:24:46:b2:9e:45:cf:f0:b0:87:07:a1:42:fd:d0:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:CE:31:12:29:4E:E5:1C:7A:15:EF:8F:37:93:EC:3A:78:FD:6E
            X509v3 Authority Key Identifier:
                keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:f0:09:3d:ee:4b:53:72:a3:25:79:1e:84:9a:38:ae:23:
         cf:81:db:58:00:70:c3:bd:05:68:77:99:d9:2b:d6:ad:a8:46:
         a9:0b:26:3e:f4:89:12:a1:6d:a9:c1:49:68:d3:ac:97:fa:32:
         cc:44:21:63:e8:32:6e:9e:45:cd:0e:b6:1b:5b:3c:f8:25:bd:
         73:64:bf:84:12:95:ba:43:15:8a:c4:eb:0d:68:04:8a:05:55:
         ee:be:13:8e:18:b7:99:13:d5:ac:d8:4f:ab:48:f4:6a:26:6e:
         05:60:2c:b3:29:3f:29:0f:ea:d4:6f:d8:16:63:e6:fe:c5:0d:
         cb:df:02:4c:3c:60:e3:4a:74:0d:64:4e:92:9b:51:a4:6f:1c:
         54:99:3d:96:8e:62:57:e7:74:7c:7e:31:f8:b6:f0:bc:65:f8:
         e2:be:68:f3:a2:4a:2a:e1:c0:de:83:21:0f:94:36:a9:f4:dd:
         26:40:01:f9:c3:d8:e8:c2:93:a6:4c:79:08:3f:4d:6a:90:44:
         c6:17:a3:41:3a:5c:7d:55:18:d0:97:f3:80:46:5b:b3:de:87:
         f2:b1:3b:cf:4e:e5:00:2b:1c:f4:3b:ba:e2:ef:1d:8a:9f:9b:
         59:fd:15:4d:fe:80:5c:ad:a5:f5:09:c9:3a:15:8c:cc:3a:00:
         7e:1a:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----