Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
File:                     u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json)
Hash identifier:          xmDrsrfOPl6j9NQZ7ucEcwvbxZ0EM94VQHr6p4Yb8wM=
Subject key identifier:   34:5B:B3:71:5B:F8:2C:80:35:8B:C1:DF:B0:5E:E4:19:B4:62:85:63
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Certificate issuer:       /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial:       01962F3D35E1FD755794B0E729E37320895D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
Manifest number:          12B8
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=)
                          2: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=)
                          3: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=)
                          4: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=)
                          5: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=)
                          6: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=)
                          7: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=)
                          8: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=)
                          9: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=)
                          10: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: Zzg38hFBp/ZhQ9nPoWBQ4W0oOLYkM/2iPVejRympF7s=)
                          11: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:35:e1:fd:75:57:94:b0:e7:29:e3:73:20:89:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=345bb3715bf82c80358bc1dfb05ee419b4628563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:a9:ca:a8:f9:d9:3e:a0:a3:d2:fe:75:e2:
                    35:58:04:3a:1e:35:e3:bd:25:4e:b7:50:74:75:8f:
                    d0:4b:16:2c:6f:b7:f4:20:50:4a:73:ad:88:37:a6:
                    2e:79:a3:26:66:ea:6f:94:68:08:a5:40:c0:9d:f3:
                    6b:62:e9:46:1e:55:9b:25:84:11:7b:1f:a3:b1:1c:
                    d2:3e:d6:55:2b:c9:48:15:35:14:70:f9:b2:ee:7d:
                    d8:6e:2e:5e:57:b0:1f:41:96:d4:83:0e:72:31:99:
                    8b:8a:82:9f:59:21:bd:ac:d9:9e:58:9b:00:06:3c:
                    98:ac:5f:e9:74:55:7f:a3:ab:b3:c1:17:16:48:8f:
                    a6:46:46:c4:8a:6d:16:2d:ba:8e:32:12:4f:b3:f9:
                    9d:96:57:8d:c0:6e:c5:d0:3d:5d:a5:22:15:d8:78:
                    c5:37:36:43:2d:55:c8:da:a1:ae:17:c1:3a:d4:79:
                    2e:76:c8:db:70:22:b8:66:b1:df:5d:c4:18:bd:13:
                    b0:7e:02:eb:50:10:1c:63:71:1c:c5:2d:ea:64:36:
                    85:f2:5d:ee:9b:ba:ec:b1:f7:c7:c8:c5:f2:ef:50:
                    3f:5f:e8:e5:87:3a:e8:b3:2b:e2:27:75:7c:dc:c1:
                    6d:c9:95:da:90:16:f9:38:40:85:a8:4d:56:67:aa:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:B3:71:5B:F8:2C:80:35:8B:C1:DF:B0:5E:E4:19:B4:62:85:63
            X509v3 Authority Key Identifier:
                keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:50:05:26:a5:5d:58:f7:63:f7:20:c0:df:ab:23:15:22:
         71:66:ea:e7:4e:8e:b8:c8:16:85:e4:b5:e7:f5:5a:47:1b:0d:
         78:14:30:b7:a3:cc:66:88:a6:7a:20:b1:56:1e:e7:ac:26:f7:
         dc:b5:42:6f:93:dd:52:40:55:91:d7:a8:24:5d:98:99:aa:39:
         3f:bf:95:fe:42:31:0e:11:32:35:f3:96:78:07:48:66:81:7a:
         7d:ca:7a:68:93:68:b1:0c:3c:b0:f0:86:b4:c9:67:c2:be:d6:
         82:0a:9c:a9:23:57:d9:d1:d7:cb:bb:4c:aa:81:b6:a4:71:4d:
         17:f1:4d:50:8f:b1:51:06:19:d2:bb:79:0a:11:5e:01:dc:15:
         d3:20:37:ab:fa:2f:6d:66:cd:09:f3:8c:c8:4f:fd:ce:67:3f:
         74:ff:70:03:b7:56:43:93:d3:11:dc:52:04:ea:02:94:1d:67:
         d5:09:57:a3:3c:bc:ca:fc:53:be:6e:39:76:61:a5:94:88:2c:
         2e:db:78:2b:8f:ce:59:e9:e5:fc:18:fd:4c:65:f8:89:a6:43:
         9f:34:d4:8d:46:91:f5:17:60:4b:60:67:43:ac:7c:65:21:af:
         a2:1d:f0:0b:49:64:2a:68:b9:c2:e7:4c:99:4f:79:9d:72:7b:
         11:0d:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----