Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File:                     uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier:          8RYeNOnoAe6W6XIF14kMiDQIQQJsUR6y9Q/YW4w++mk=
Subject key identifier:   95:63:0F:F9:9B:4C:3E:87:6E:B6:BA:A6:A0:11:BA:5A:DB:A9:22:87
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer:       /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial:       01962E999A9161E017AF99AA39BCF718BF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: WSMlp/lFnj2jVRMwGx9vfTY62rKdBxtqblC30U6gK4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:91:61:e0:17:af:99:aa:39:bc:f7:18:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=95630ff99b4c3e876eb6baa6a011ba5adba92287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:0a:0c:f7:ae:a6:ce:38:e3:ba:ea:72:fd:
                    56:35:68:bd:03:4f:77:18:74:2e:8f:b9:4f:e3:82:
                    1b:bb:33:69:89:5e:71:b1:d6:20:26:84:25:f5:e0:
                    e6:16:f5:c4:3a:8e:10:33:82:2d:56:85:aa:74:6c:
                    16:3e:56:2b:82:9b:05:8c:7b:db:b5:de:ae:2f:fb:
                    96:72:80:a7:9a:91:8b:ed:d3:8c:5d:6a:5f:2e:e0:
                    a8:c3:29:2f:32:3e:26:0f:de:0f:71:e0:ee:1e:bf:
                    0c:aa:d6:87:a6:60:b5:ed:35:1a:fd:6a:bd:71:43:
                    68:92:aa:22:d3:a0:f1:d7:ea:0f:33:61:ed:48:e0:
                    11:cc:79:75:e6:97:02:b3:45:62:c3:53:55:51:4d:
                    cc:58:65:23:ad:75:5d:58:c7:03:30:82:cc:0a:ab:
                    99:6d:82:02:f9:9c:44:79:36:51:a4:a1:9f:69:89:
                    86:93:4f:43:aa:68:a9:7b:da:fd:5b:9d:53:7a:b6:
                    b8:6f:ae:a1:2e:2d:67:5a:36:20:bf:34:90:4a:ef:
                    50:6c:e0:81:7d:ff:f1:20:c2:16:46:47:f7:c5:1f:
                    ea:b8:49:d1:74:a2:eb:23:9e:8a:44:64:e5:17:ed:
                    2e:8d:ff:1c:59:d1:4f:1a:85:ae:c2:74:b0:24:73:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:0F:F9:9B:4C:3E:87:6E:B6:BA:A6:A0:11:BA:5A:DB:A9:22:87
            X509v3 Authority Key Identifier:
                keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:68:7c:34:18:f2:ca:f8:2e:0b:8f:a0:43:64:d2:6b:a3:22:
         04:c8:ea:e6:8c:62:4d:9d:1c:05:06:80:18:0d:22:63:6b:13:
         17:08:54:27:2d:cf:3d:02:be:af:8c:7e:10:a6:85:d9:6a:4a:
         84:56:96:72:2c:7b:12:0d:46:e2:aa:82:bb:ff:00:3e:18:5a:
         92:5b:03:2c:e7:ac:95:cd:fb:ca:eb:87:b4:7a:a1:33:e1:cc:
         97:bc:45:f1:dc:c6:13:51:25:c3:29:07:3f:57:b9:be:da:b8:
         07:b0:25:c2:a3:a9:42:71:4f:e4:a1:cd:a4:f2:2d:98:3e:8e:
         0d:22:8c:e9:2a:9c:cf:02:83:cf:dd:86:fc:a9:19:51:b3:21:
         5b:1a:f6:0f:10:2e:38:06:5b:eb:d0:37:a5:33:e4:e9:dc:e2:
         f5:ca:ab:d2:11:80:a8:9d:d0:17:57:5c:ce:6f:f3:06:03:47:
         16:20:c9:66:90:f9:0d:9a:a4:b7:14:ea:79:3b:84:60:bf:77:
         5d:66:ab:49:92:6f:ff:b4:cd:aa:fb:45:26:28:17:b7:9a:f2:
         39:7a:ea:0f:e1:26:1b:be:7c:83:27:f4:d8:c9:97:0a:56:a3:
         55:b7:90:12:57:5d:0a:28:e4:b2:77:50:d2:8b:eb:15:fe:99:
         55:1a:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----