Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          g08yL4YC0QJq3kLc7yUBK4L64kJ4UVi7ICxOHsJ/l90=
Subject key identifier:   0F:F2:BE:FC:BC:E8:5D:FA:74:A5:E2:06:A4:23:62:AC:39:BC:D1:56
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       01962ECF5AF3D0A96F103C07A8881515C25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
                          2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
                          3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
                          4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
                          5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: WHPcd/wn7V7MqzQR/d+CvOyv1oZKCdl5Hlz02sFMWjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5a:f3:d0:a9:6f:10:3c:07:a8:88:15:15:c2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=0ff2befcbce85dfa74a5e206a42362ac39bcd156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:db:41:a9:4e:e6:37:ad:e3:3c:55:b8:d3:
                    28:92:85:b3:d8:0b:fa:7a:6c:37:1f:0d:ce:6c:2f:
                    a6:c7:e7:fb:70:53:81:79:31:ab:d4:a1:33:56:04:
                    b5:33:bc:4d:c9:35:4c:23:36:89:47:9f:f2:76:10:
                    8a:90:2d:46:99:b0:09:05:b2:9e:7a:e2:ce:bb:d3:
                    1b:ef:75:0e:5d:f8:e1:51:a1:dc:b1:54:6a:8c:7f:
                    7f:12:d3:9d:c8:bb:3b:be:9f:2c:64:6f:a2:18:ea:
                    f4:9b:04:34:f9:6f:bb:ed:5b:f5:07:d0:ba:33:86:
                    30:69:87:59:17:fb:0f:d1:35:61:89:b9:bb:35:f9:
                    d7:2c:fc:b2:85:c6:c2:d0:d5:34:6b:a5:a8:ab:78:
                    dd:d8:ef:8c:03:4f:a7:b7:58:2b:db:b6:a7:70:96:
                    d9:12:e6:33:a8:9b:df:06:fa:48:8a:01:ed:2c:ea:
                    0f:64:c1:fc:98:c8:90:08:01:10:ea:3d:cf:d1:a8:
                    ed:25:4a:e7:51:9d:5c:58:88:48:6a:82:ff:7c:e9:
                    6f:9b:a9:60:07:df:db:4e:cb:6d:bc:45:17:ae:e6:
                    25:46:45:7b:5e:82:fc:09:a7:30:d9:90:fa:bc:cd:
                    2d:09:24:45:31:6b:7f:7c:11:51:3d:eb:02:ac:e2:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F2:BE:FC:BC:E8:5D:FA:74:A5:E2:06:A4:23:62:AC:39:BC:D1:56
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:89:a8:ca:83:1b:ee:fe:85:34:9b:12:ca:33:ab:44:02:93:
         1e:31:3a:30:ca:74:49:f5:4b:de:ea:9c:6d:77:a9:24:2e:27:
         61:cb:ff:02:6a:42:a3:18:ad:57:db:e5:ea:e0:7c:6d:6e:5a:
         c1:15:1a:e3:15:06:9e:8d:dd:c2:65:a7:fd:89:93:8d:1b:ae:
         52:00:15:15:35:30:06:fc:02:85:df:da:8f:97:50:19:b5:1b:
         56:1f:52:81:cb:ed:3c:eb:aa:a1:c4:6f:b3:6e:6e:0b:11:11:
         ec:79:62:17:61:25:98:29:3f:58:14:b0:e4:b5:17:76:03:32:
         13:79:dd:96:02:0f:24:6e:82:96:2a:d0:ce:76:0f:78:d6:47:
         ca:15:8e:07:45:73:c5:40:19:cc:06:0f:c5:1d:20:78:dc:17:
         04:14:37:8b:43:43:1d:75:e1:19:d0:5a:ad:39:6e:ae:b2:51:
         1f:02:c2:54:2e:80:8a:b2:fb:d6:3c:2f:41:65:7d:ff:fe:7c:
         0e:e3:3f:4f:91:05:52:ad:7f:cf:b5:1c:06:30:9a:27:86:1a:
         ee:6a:56:2d:1a:44:a9:5f:2b:5a:3a:28:f9:66:fc:38:16:9b:
         63:52:fd:83:c5:0b:11:0d:f0:0c:bc:3f:43:c3:f7:b6:2c:c4:
         20:3f:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----