Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File:                     uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier:          dLBVPuOMf7SQhvjUJhl/YpdygTDvhVeTw4CjqjQho/o=
Subject key identifier:   2A:85:5D:56:8D:6A:9F:29:96:40:BE:B8:6C:96:C5:73:25:17:9E:70
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer:       /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial:       01962DF41E81049CC5581561A83777AAED05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number:          0BF0
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
                          2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: GKRhzYX4lOPZWhTfcbxI/hK+NG0x12AaG5SpaEiG4gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1e:81:04:9c:c5:58:15:61:a8:37:77:aa:ed:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=2a855d568d6a9f299640beb86c96c57325179e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:af:5a:e2:1a:07:f5:b0:c2:da:47:72:c1:
                    19:ba:4a:26:b3:25:4e:d7:53:4c:d5:f3:88:2a:17:
                    7c:25:17:be:9f:0a:70:6b:7a:17:56:fc:b9:12:a6:
                    da:ac:7f:b2:40:38:44:20:1b:01:39:54:82:f4:2e:
                    cf:59:00:ae:9f:46:1b:95:3c:22:e7:77:75:a8:36:
                    16:02:67:35:af:f3:ce:11:18:77:bc:b3:83:be:54:
                    fa:ef:ef:31:ec:f6:ea:7b:f5:f0:47:7b:79:e3:1c:
                    3c:64:4d:61:79:24:2b:e0:a1:30:8e:27:00:62:dc:
                    6f:48:87:1b:3f:4c:82:56:63:de:75:57:c0:8b:eb:
                    33:0e:f2:3b:de:68:8c:7b:83:81:b9:44:b5:9a:60:
                    0a:bd:fb:34:a5:c8:99:a9:f3:34:50:d2:89:87:28:
                    99:90:b6:7b:f7:f4:48:96:be:d5:1e:7f:df:8a:ce:
                    14:ff:6c:0c:e3:60:6f:32:9c:31:80:18:b8:b3:40:
                    c0:68:e2:cf:bc:f7:2a:26:3a:46:ab:41:0c:c9:96:
                    e0:61:48:ee:83:a8:99:80:f6:2e:5c:c0:e6:c4:a8:
                    d9:9a:a6:ac:bb:48:15:78:89:e7:d8:d9:3a:1c:1f:
                    1b:76:b2:03:04:74:63:4f:e0:41:d7:f2:de:01:0e:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:5D:56:8D:6A:9F:29:96:40:BE:B8:6C:96:C5:73:25:17:9E:70
            X509v3 Authority Key Identifier:
                keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:41:84:42:2f:57:34:0c:fe:4b:4e:00:a4:ae:44:02:9f:99:
         13:0b:53:06:ee:20:f7:fa:86:52:a3:dc:fe:88:49:aa:6c:dd:
         4f:c9:f8:6a:b4:02:da:6c:48:f1:76:66:e6:79:6c:e6:e2:68:
         8a:18:d3:a3:43:49:69:54:c9:5d:d3:0f:ac:9e:38:62:d8:86:
         ac:ed:e7:41:08:92:92:29:08:bf:7b:a6:40:25:93:45:41:9d:
         20:a7:79:c8:05:b8:f7:24:6d:76:c4:89:e3:63:52:16:bc:0c:
         52:b1:05:de:5e:5f:d8:8b:39:6d:2d:d6:eb:8c:18:4a:1f:cd:
         56:75:d8:b3:16:83:a6:ac:40:da:fb:f0:da:34:3c:84:67:96:
         6c:b4:fe:38:a9:9b:0d:c4:db:68:42:0b:d1:90:f2:ca:65:e8:
         40:7c:97:28:5a:e1:e4:3a:de:d2:27:2b:e9:10:0e:f5:01:fa:
         74:2a:db:1e:a5:96:12:cb:96:db:b9:4c:31:e8:58:5a:40:02:
         75:19:25:83:a1:b5:22:55:1f:c1:18:dd:19:b0:fc:0d:1a:68:
         c9:37:11:06:7d:1a:63:21:1f:eb:5b:97:6b:0a:42:8f:9e:db:
         7b:79:b1:5f:4b:80:50:88:7e:f1:8c:52:8f:1d:54:df:69:85:
         0c:8b:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----