Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File:                     uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier:          zefTV+HWap53C3gTG2BS+9ecbB5SFyvfwVCQegay430=
Subject key identifier:   5F:9D:F0:84:A1:09:AF:ED:94:8F:7F:06:7F:D9:24:85:DF:AD:AD:24
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer:       /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial:       01962F7440B43321E7D7D88B52F6FBE403A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number:          14B9
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=)
                          2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: O9jOr9KfBoFRjuxHM/urFGYANHhsQ5bmccRyTHHVYQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:b4:33:21:e7:d7:d8:8b:52:f6:fb:e4:03:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=5f9df084a109afed948f7f067fd92485dfadad24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:15:12:8c:22:a8:2d:1d:ca:3f:93:07:ca:69:
                    d4:69:4a:89:30:b9:3c:7a:ac:4e:e4:3b:90:72:cc:
                    21:7f:ad:34:a3:df:fd:5b:18:27:e5:00:1d:8c:fe:
                    e6:bb:6c:52:14:55:d0:57:fc:51:98:90:dc:e1:f6:
                    af:e7:8d:b5:f1:c6:60:32:5f:f6:75:49:45:db:09:
                    c3:96:a3:60:cf:48:40:ad:c1:67:22:85:70:59:91:
                    01:f7:49:93:88:af:ea:d8:5b:36:b8:60:fe:26:03:
                    8f:ba:20:30:0e:9e:ca:e3:bf:2b:4d:7c:42:40:f6:
                    bb:e3:0b:61:b5:fe:90:10:e2:e7:04:f5:fc:b9:c3:
                    ea:d4:e0:1d:fb:00:d5:84:04:ac:ab:39:c2:8e:3a:
                    84:bf:d8:54:c0:cf:94:08:ed:cf:07:3c:7f:af:f3:
                    6a:f6:71:db:c6:b6:35:8b:7a:47:50:51:35:da:b4:
                    d3:f9:ed:c9:61:52:87:3c:24:af:2a:b8:8f:68:6f:
                    34:e5:16:8f:2b:35:5f:0b:55:8b:db:8c:af:f8:5b:
                    23:51:00:1d:93:c7:b2:1c:a5:0d:de:68:b5:9a:15:
                    bb:36:db:a7:e8:09:6c:d4:a9:65:67:71:fb:35:d5:
                    a6:77:c8:2e:69:96:af:61:2c:59:fe:9f:b7:f8:6f:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9D:F0:84:A1:09:AF:ED:94:8F:7F:06:7F:D9:24:85:DF:AD:AD:24
            X509v3 Authority Key Identifier:
                keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:89:6e:98:1a:5d:d5:60:25:e1:70:85:9c:d0:c9:47:07:
         31:d8:35:38:41:41:f2:e4:c1:34:97:59:c1:06:a0:6b:fe:47:
         12:b4:1b:8f:c4:d6:e8:13:ff:e3:c8:c5:b9:1a:7b:1c:d3:c7:
         1f:28:17:a8:e3:37:a1:c4:28:9a:e8:65:d1:23:cb:ab:eb:4c:
         de:1d:f8:72:55:fe:b8:f3:b7:ca:81:6d:15:69:39:60:7c:89:
         2d:ad:49:13:57:72:1e:0a:81:bf:a9:85:b4:a0:4c:e3:34:f1:
         20:67:5a:be:48:3e:fd:c9:78:da:2c:13:99:2c:a9:4f:ea:0d:
         8a:ca:f2:4d:db:10:55:db:9a:70:97:85:57:cc:bd:0d:3d:40:
         7b:71:69:47:5d:85:a9:39:58:6c:3b:9f:54:6a:f0:14:ed:12:
         a3:73:53:d8:26:71:1e:a2:f7:27:d1:01:b8:04:f8:ca:80:71:
         1b:23:52:6f:e8:b8:08:ac:08:d2:da:e1:40:33:3a:1a:0a:79:
         31:df:da:e2:ec:80:62:25:04:c9:0f:81:c6:0c:ff:78:df:ec:
         1c:36:8b:2e:3e:c1:71:40:52:51:a7:f4:7d:86:dc:38:63:5e:
         76:58:e5:b1:dd:a6:9f:d1:bc:eb:5d:1e:c4:1f:9e:e7:8e:ee:
         86:28:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----