Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File:                     U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier:          MloEqHfdG4lPVhYrfRvvK9qOvss4l+Z31+cgN4jIKeM=
Subject key identifier:   96:04:F3:A4:73:56:78:C6:D4:09:30:28:86:E5:A9:EA:F0:FE:EF:2D
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer:       /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial:       01962ECF6ECD925C03DB3CE337DD5960D5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number:          01CE
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
                          2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: llQybShSwJjiI5222A6haC7eibKtLhd8TcG2pkifD50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:cd:92:5c:03:db:3c:e3:37:dd:59:60:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=9604f3a4735678c6d409302886e5a9eaf0feef2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:de:51:a5:f0:ed:50:f1:0f:64:ea:f9:20:
                    ed:10:4d:6a:a2:51:8f:98:2f:6d:32:c2:38:c9:33:
                    73:cf:06:85:d6:cc:27:1a:50:d4:55:53:20:4a:31:
                    4e:63:0c:47:93:54:a3:04:5c:f3:76:ea:ec:7d:20:
                    6f:72:4c:67:e8:f7:4f:2c:57:18:bb:68:e3:0a:e4:
                    ba:eb:be:2b:41:43:ef:bd:2a:18:39:25:40:b3:14:
                    55:e6:20:85:f0:4c:41:81:11:1d:ec:22:fe:75:63:
                    86:af:0b:d0:eb:27:7a:85:ed:f7:05:4f:7d:5d:63:
                    88:eb:c6:48:41:29:45:23:c6:2b:b1:7f:e4:52:d3:
                    84:ee:bc:bb:b1:a1:06:aa:51:8c:b0:27:71:6f:79:
                    c9:4f:cb:60:6b:16:6d:70:db:cb:41:05:61:4d:da:
                    d0:25:a9:53:d8:14:4f:fe:c2:4f:94:1e:bc:e6:d1:
                    84:17:f1:98:b9:88:21:20:ad:f6:4c:ed:2e:aa:f2:
                    46:15:e7:07:6b:ff:10:69:87:ab:3d:31:34:06:d9:
                    39:0d:32:d6:ff:e9:81:3f:11:d2:2d:4e:06:cc:90:
                    ef:2a:0b:b4:be:c9:b0:8a:d1:bf:db:46:47:30:28:
                    af:e5:9d:ad:85:3a:25:bc:18:cd:e9:3b:be:93:ad:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:04:F3:A4:73:56:78:C6:D4:09:30:28:86:E5:A9:EA:F0:FE:EF:2D
            X509v3 Authority Key Identifier:
                keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:7a:05:91:bc:06:80:c8:64:5b:97:42:32:c0:d2:67:61:
         e7:52:e2:b2:b7:66:26:aa:ef:30:d4:d5:fc:d9:46:0d:45:a6:
         ba:7a:fb:f1:c4:65:fc:98:17:a2:12:12:0f:32:66:84:42:95:
         8e:dc:42:43:6e:f0:dd:8a:d4:ed:ef:de:5b:f8:c4:7a:11:e3:
         7d:10:68:c5:98:73:89:b7:ad:64:6d:fe:7d:d8:9c:60:b6:1d:
         1c:5c:57:f0:44:78:6b:c3:5f:ad:b5:f2:d3:d7:5d:a6:e1:d8:
         60:86:88:3c:9f:42:57:0c:41:b7:1b:b1:c3:98:b8:2c:cf:32:
         52:38:aa:db:e9:a5:6c:07:dd:91:18:48:75:04:6e:5c:02:b2:
         69:22:f8:7c:89:0a:cf:cc:65:dd:d7:76:4d:33:09:e0:03:71:
         df:6d:f4:06:fb:1c:83:10:5d:42:60:fc:c4:08:4b:ab:ce:3a:
         0f:c9:23:c5:e7:f1:b3:b4:f8:7e:35:00:b2:df:fe:23:47:cc:
         6c:7f:c2:cd:b0:b0:dc:24:ca:1f:07:4d:9e:de:40:2c:6d:a2:
         c8:ce:7d:95:84:71:82:f1:66:2a:7b:c9:29:a9:a4:07:4f:2b:
         1e:47:28:f5:35:92:0d:b8:6b:b2:36:0f:c2:f2:be:bd:41:e0:
         ab:27:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----