Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          7XTUxhXC2pVWysE7dwpZXCn+Y1WmLsAUHInhPvil0SQ=
Subject key identifier:   86:A1:C2:D6:71:0F:A1:8E:CC:1B:3A:74:6A:62:B9:8D:FD:3C:13:10
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       01962F3DE8359D2FF8807A28BC8732620962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          0EFD
Signing time:             Sun 13 Apr 2025 13:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:48 +0000
Files and hashes:         1: RL9-61LJ-xL7UGImuGRdOdgZP1M.roa (hash: W3jLVStcHUC/Po0Yzh+5aEEvdCfFtCnTP/kBctED3eg=)
                          2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: ge5pD/eToB7gwnjLTk7INGZuBuR3MNERUSZczzJ/VSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e8:35:9d:2f:f8:80:7a:28:bc:87:32:62:09:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Apr 13 13:01:48 2025 GMT
            Not After : Apr 14 13:01:48 2025 GMT
        Subject: CN=86a1c2d6710fa18ecc1b3a746a62b98dfd3c1310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:86:a7:a6:c7:cf:4f:6e:32:1c:60:1e:cb:
                    8e:80:18:ca:25:a3:cd:5c:18:1c:40:86:10:28:b7:
                    31:75:2c:12:f5:23:89:31:13:cf:1d:a5:9d:3b:6e:
                    f6:ea:6b:db:2f:f2:24:3e:fb:ac:fc:47:76:f2:96:
                    4a:17:48:3d:85:40:cc:f9:99:f5:12:81:4a:c4:c2:
                    ab:e9:5c:1c:0b:7e:a1:52:70:f1:92:8d:88:52:3a:
                    4c:c4:2b:b9:06:bf:8f:e0:65:d1:a1:29:38:10:8a:
                    8d:8e:c3:2f:75:a9:44:05:22:80:de:44:3c:7d:c8:
                    e9:ce:f4:aa:06:bb:eb:6c:2e:c5:a3:aa:d9:a9:9b:
                    02:52:87:3f:ac:8c:b3:36:52:31:d9:7a:04:53:3b:
                    62:0a:a1:f2:d8:6f:7f:f3:9b:03:68:04:df:e0:a8:
                    69:6e:4b:bb:e6:c7:e4:75:0b:d4:ca:d7:41:ac:07:
                    0d:c7:1d:69:d0:50:7b:70:5e:61:fc:a1:90:8e:a6:
                    f4:8a:78:2e:bf:5e:a1:44:88:4f:63:6c:77:af:0f:
                    32:43:c3:00:0d:03:29:7e:25:eb:06:69:7a:e6:a5:
                    30:5d:97:79:72:4e:6d:14:40:1d:3a:b3:17:bb:83:
                    2d:c1:3c:f2:9b:5e:8e:a2:7e:9a:ee:dd:ee:2b:99:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A1:C2:D6:71:0F:A1:8E:CC:1B:3A:74:6A:62:B9:8D:FD:3C:13:10
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f8:0a:91:ce:cf:c0:30:f5:6f:83:0a:3c:9b:a8:6e:99:a4:
         eb:a2:2c:6d:82:ba:90:05:59:94:d4:a7:c7:f2:31:96:3e:8b:
         3c:5f:7f:f9:fa:a4:e4:dc:c1:52:4f:7c:1c:44:71:0d:d3:ed:
         4a:58:14:33:f9:ba:37:41:c3:29:57:74:6e:79:26:2a:ea:c7:
         66:8b:f4:a9:be:9b:83:a8:c1:91:67:f0:26:a2:c3:54:28:76:
         b7:1e:cf:5c:7a:2f:fb:eb:12:68:71:f2:87:ae:70:fa:fb:91:
         d1:4b:55:6d:4e:31:24:bb:6c:c9:53:aa:b1:b6:0a:3e:da:69:
         d0:0b:3e:3b:e4:81:8c:b5:1a:65:7c:5f:96:bb:18:e4:5d:ff:
         4c:43:05:c8:00:e9:45:f8:48:26:08:49:4b:8f:1c:b3:69:72:
         b8:54:9d:ea:65:fe:47:cc:e0:87:26:db:16:21:4c:31:af:9e:
         b3:6f:2f:5c:ed:0a:da:5c:59:1e:9a:48:b0:92:6b:f0:cf:5b:
         15:a7:13:08:ab:a2:3b:a9:c3:38:bd:59:0f:9d:6b:05:7e:21:
         e2:e7:97:9e:16:16:58:64:96:fe:ff:27:59:c5:1b:6c:9e:aa:
         2e:ea:e5:ab:84:9a:aa:5d:c9:fd:61:4a:eb:57:a3:58:12:8b:
         c0:5f:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----