Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File:                     U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier:          J+zt1x+2GdS3nfIHevCpeeDgi9hwpVNBzQRf2mS8y/g=
Subject key identifier:   B1:61:2C:BC:B4:F2:B5:42:AE:52:16:DC:CC:DB:57:60:45:83:4D:6F
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer:       /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial:       01962F07151BF1D4EC778A3C961BAE2F6433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number:          04CD
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
                          2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: p6M3FIEXrXS8FgI/iyJNZ1C1kZx3RJEb14M0gn5N5zQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:15:1b:f1:d4:ec:77:8a:3c:96:1b:ae:2f:64:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=b1612cbcb4f2b542ae5216dcccdb576045834d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:81:af:77:e1:0b:6f:2f:6a:88:68:68:87:
                    52:bc:86:06:a0:c9:a1:99:7b:4e:f0:70:35:9d:96:
                    8f:a9:40:c1:0c:34:5c:03:c8:9e:87:c1:be:25:8d:
                    a1:f3:2d:93:1f:28:88:3b:4f:f3:4c:5d:c9:d1:eb:
                    f6:e9:fd:04:fc:df:c3:a9:ce:8f:b0:8c:75:0c:4d:
                    3e:f9:f7:8d:88:10:10:cf:1e:cd:92:1e:42:27:13:
                    59:1f:de:ee:1d:c9:3a:35:53:f2:6a:72:57:20:4e:
                    83:8e:04:8f:d8:5e:b0:86:f6:fa:27:73:f0:3e:b6:
                    51:d3:cb:c5:44:70:9b:14:14:e8:1c:5c:67:81:96:
                    6f:5e:03:e8:4d:ea:b6:ac:b8:4e:43:07:c3:77:46:
                    df:02:4e:c2:22:05:9e:9d:07:64:97:8a:02:bf:18:
                    3e:43:6b:cb:12:f0:6d:0f:3a:b4:a3:50:d2:51:a0:
                    05:58:03:5e:41:43:c8:cb:46:a5:a5:51:7c:bc:7b:
                    a2:6a:31:86:ba:4e:19:58:78:8b:81:b5:54:0e:26:
                    17:3c:c1:e7:14:91:f6:67:21:6a:63:82:c2:a2:36:
                    df:70:9a:a9:10:84:89:d9:88:f2:9c:96:42:bd:55:
                    5c:30:1f:8c:ec:f5:53:3d:20:33:9a:cf:2e:8d:eb:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:61:2C:BC:B4:F2:B5:42:AE:52:16:DC:CC:DB:57:60:45:83:4D:6F
            X509v3 Authority Key Identifier:
                keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:7d:62:a2:95:8e:00:df:6e:2d:75:1c:16:de:37:0c:bf:
         59:00:33:6f:9b:65:c9:60:16:88:78:bd:04:33:83:14:6e:74:
         96:8d:8c:30:ee:70:32:6e:29:d8:74:6a:e0:a3:4e:74:7e:8e:
         b9:86:ed:2c:2a:f2:89:96:a9:36:78:3e:b9:af:6c:7e:e1:0a:
         ee:9c:81:69:09:87:ad:e8:f6:df:a2:c8:5d:f3:1f:79:a5:f2:
         31:2e:8f:ff:70:0e:bf:80:fa:c2:a5:92:7d:99:93:f2:80:cc:
         c1:d1:d6:3d:05:22:c7:ef:26:70:10:b3:63:af:5b:ff:55:79:
         7b:13:9a:f5:d5:e7:66:9b:c6:ea:9c:dd:56:68:c1:a5:14:9b:
         82:9a:9b:3b:6d:c7:51:ec:61:ba:0e:7b:c4:d1:fe:dd:fb:05:
         3c:dd:53:17:2f:51:34:a7:6c:be:1b:9c:37:24:e6:00:0f:06:
         e8:5d:86:72:ad:0e:46:ca:d3:e4:6f:bd:62:b3:f9:81:5b:f5:
         3e:b2:7a:7d:e1:a1:ff:cc:05:42:54:a5:2e:f5:5a:1c:44:93:
         d6:27:0e:cf:f0:7c:04:ce:3a:c8:5d:d6:0e:9a:72:2d:17:ed:
         5f:f7:58:da:24:cd:0e:eb:ea:3b:12:11:a7:c9:5e:71:d9:f2:
         5b:55:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----