Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File:                     Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier:          QChO/BDXXEn40n2AgnwoqP0drrWgIFM1X01SkIwF6TU=
Subject key identifier:   0D:EB:D9:A4:16:00:1D:D6:3F:C2:ED:B9:F3:0B:18:4B:14:CA:D3:30
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer:       /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial:       01962E990B3CFC3A0E8F12BBECC64849ADE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number:          06A3
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: Jwm-Y1gLbkw4UaAdwxRZjNwmTZo.roa (hash: Q969PgNrXLr8Br8ONSHHTQG/i49jEw6PhYCVXnskszU=)
                          2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: WeqcymZMYqzW3Bxd4n4HzxoB6dLRvYmUmqXcJKlIRqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:3c:fc:3a:0e:8f:12:bb:ec:c6:48:49:ad:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=0debd9a416001dd63fc2edb9f30b184b14cad330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:65:62:7c:8a:a6:d7:1c:9b:9c:55:f5:d6:
                    f3:b5:05:3e:a7:3d:45:c4:f9:d5:81:d1:71:47:f1:
                    c6:05:ac:75:78:74:6c:38:35:dd:02:2e:57:a1:b4:
                    aa:d0:1f:5f:5e:45:cc:62:77:60:96:0d:0c:45:c1:
                    6d:e6:b1:02:2c:9b:47:da:b8:b8:d7:2d:e7:8e:3c:
                    1a:8d:7a:88:f9:b3:35:e1:a5:33:6d:53:f6:b1:70:
                    91:e9:a2:f1:4c:ff:78:39:a0:7f:73:43:e3:18:43:
                    95:16:02:64:da:bb:25:d1:0e:c9:c0:8b:9c:91:2a:
                    59:0f:54:20:81:98:28:01:94:9e:db:b8:15:5b:6d:
                    f6:37:35:85:99:77:3e:d4:19:bd:5d:5c:00:c7:50:
                    c7:a8:34:0d:42:58:a7:ed:8e:e8:f3:84:ee:33:7f:
                    aa:45:d8:f8:77:e9:b6:64:90:e0:6f:3d:9f:0b:e8:
                    7a:71:c9:0f:6b:c9:94:12:12:cc:77:1b:f6:6a:7d:
                    3e:11:8d:9f:46:62:7d:52:ad:5f:b7:9b:c7:4a:0e:
                    42:e9:ba:d2:43:5e:30:cd:85:5d:b9:99:f5:e1:1f:
                    7f:ad:97:18:e6:58:5e:c4:4e:ef:03:a7:df:5f:66:
                    8c:63:4d:e3:fc:6f:0a:0c:5c:4d:54:8a:de:16:91:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:D9:A4:16:00:1D:D6:3F:C2:ED:B9:F3:0B:18:4B:14:CA:D3:30
            X509v3 Authority Key Identifier:
                keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:d8:41:8a:48:cd:6d:88:ca:95:16:1f:aa:db:a3:cf:4f:
         5a:79:57:51:38:33:90:a7:79:29:fb:4e:96:02:fb:e5:23:ac:
         c6:a7:5e:36:95:3d:b7:c7:bf:58:4c:30:74:f2:29:11:f6:18:
         89:49:22:e5:fe:bb:ce:5c:41:e9:df:dd:4b:6c:aa:5b:f6:96:
         7b:0d:5e:a5:9d:cc:10:3a:2b:a8:d9:5b:d5:63:2d:87:10:bc:
         01:52:61:8f:10:04:e4:5f:b0:e7:0d:2c:71:ba:80:c5:f6:5e:
         de:fa:d1:88:d8:e6:6b:38:fd:b4:69:95:ee:12:ac:60:e2:2a:
         15:2e:04:90:5e:ca:c1:0f:00:70:71:d3:79:d4:b7:d4:bb:5d:
         11:7d:21:51:3f:d0:42:0a:14:40:80:a1:97:44:0f:03:84:dc:
         95:3b:7f:bd:fb:64:fa:2b:c6:ab:8c:2e:0b:a1:77:cb:6b:95:
         09:50:c3:bf:29:99:d8:54:c6:0e:78:12:0f:60:b3:fd:a8:50:
         ed:0a:37:01:74:ec:8b:34:49:d1:6c:1b:71:5b:33:f4:d9:fd:
         18:39:53:c1:b4:cf:77:65:52:d9:4f:90:5e:19:e2:ad:73:3d:
         3d:a9:0b:4d:b5:2d:a2:cf:c8:b5:e6:43:08:4a:f8:2f:c9:fe:
         46:99:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----