Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File:                     uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier:          k2nlNE53FY6C2mlCzTHUWx7/neseBgMNB/LTteMX0jg=
Subject key identifier:   1D:67:90:0C:88:09:C1:70:62:85:C8:B4:A6:74:9F:A7:FC:96:75:80
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer:       /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial:       01962DF404C2EAFFB9227BD6D4A4BF3B659A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number:          12CC
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: 2VWhNAywHcLFX1jAGXTzS00/xm/kdqQBur6Wg5nFwb0=)
                          2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:04:c2:ea:ff:b9:22:7b:d6:d4:a4:bf:3b:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=1d67900c8809c1706285c8b4a6749fa7fc967580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:04:4d:7b:9e:21:4d:db:c5:ee:0b:d8:e3:
                    92:61:94:9f:d6:f1:60:2f:39:c9:68:c3:21:f4:a7:
                    61:e0:67:c1:05:81:1b:ea:04:41:03:87:33:4d:ee:
                    3e:f1:92:6d:d4:0c:b7:34:cb:b6:93:1c:ba:f7:6c:
                    35:01:e2:ce:33:2e:90:7a:07:36:8c:e7:e0:eb:ba:
                    66:7a:6d:a7:fe:73:26:dd:9d:45:fa:12:63:34:5f:
                    26:a5:85:80:0e:97:36:de:e6:df:19:e0:74:0b:9a:
                    d0:d9:5d:16:3f:3c:2f:67:7d:80:2a:43:86:48:dc:
                    a3:a3:eb:7b:98:af:6d:80:9e:76:35:13:34:0b:db:
                    5c:f2:8f:49:74:83:85:7a:6f:f8:32:30:e2:88:1c:
                    e8:d9:08:67:11:65:16:cc:d1:cc:00:62:72:23:50:
                    78:63:3d:d3:56:c0:76:3a:b5:65:90:16:88:68:14:
                    e4:7a:1f:e1:65:2c:4a:61:f3:d7:6f:c6:61:3e:82:
                    c5:50:0f:8d:57:dc:96:a6:08:6a:89:c4:14:c1:4f:
                    6c:fe:fa:cc:8a:4e:b1:62:cb:db:b6:f8:7f:5f:60:
                    27:0b:2b:9d:20:6e:7e:a2:a3:89:a8:34:a8:3b:5e:
                    94:67:6e:0d:30:fa:52:84:10:8f:68:7e:52:e6:93:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:67:90:0C:88:09:C1:70:62:85:C8:B4:A6:74:9F:A7:FC:96:75:80
            X509v3 Authority Key Identifier:
                keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2e:b6:9a:89:59:4a:c6:3d:36:0b:88:6f:25:af:0a:fc:18:
         bd:c7:9e:d1:4d:87:50:a2:a6:e9:36:9d:86:cb:5a:e8:28:ef:
         23:78:03:fb:0f:84:92:4f:26:be:79:30:fb:a0:e5:e4:cc:4c:
         e6:d1:d2:47:ec:86:c7:20:e6:b4:a5:26:e4:51:d9:90:34:0b:
         84:cd:51:a4:b2:f4:a6:f2:d2:30:91:48:a1:e8:71:a1:25:cd:
         e5:9e:c2:a2:80:ea:55:a3:39:5f:e7:cd:a9:a1:d0:4f:00:22:
         b0:99:96:ab:c4:35:01:5f:80:4d:b4:ee:85:26:26:7f:89:99:
         4a:6e:dc:fc:ba:b5:33:ba:11:45:ed:de:a7:72:e3:2f:46:f2:
         7f:48:fe:1e:03:68:42:f2:d0:5f:a2:91:d0:41:46:aa:1d:7e:
         2c:21:21:34:43:d4:6f:28:7c:e0:d9:d4:5c:7b:fe:19:c8:9d:
         fc:04:29:8e:4a:d7:08:9b:82:88:cf:dd:ca:8d:ff:04:a8:93:
         5e:91:04:5d:e8:bc:59:0f:35:c4:fd:3a:c0:1f:26:7c:0e:f5:
         4f:1a:1e:03:7c:7b:1b:d8:72:33:ed:1b:c6:34:e5:d5:be:ee:
         13:e6:4b:86:dc:7a:85:bc:58:d8:d8:43:ee:7a:69:bb:54:69:
         70:59:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----