Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File:                     umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier:          OCpOu0zJ4hX0MJ1mqajKd9vMsJn5SI/9rk0FbpKmKuo=
Subject key identifier:   48:D8:CA:FE:35:B6:EA:13:28:B4:37:76:45:4D:F0:0C:1B:C8:57:2B
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer:       /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial:       01962ECFB0D24178C047B533FF345F99BCD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number:          0D87
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: Vevc9vrQGyVF5o4NzN0QFHnZAiA.roa (hash: AOWcNE88wNCBWfSzm2+MmaRV4c7usJ5kQGrhyE8Gj6M=)
                          2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: huZrvfMgI0oyZYzROxi7/ltkAQ70DLSTffuPrxNkV18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:d2:41:78:c0:47:b5:33:ff:34:5f:99:bc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba68595997900ded300e9925709da627e93f363a
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=48d8cafe35b6ea1328b43776454df00c1bc8572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:d4:1a:42:15:53:74:f6:2e:e0:d6:44:94:
                    87:39:92:db:2f:8c:69:15:07:e8:35:ba:99:ed:6b:
                    82:46:0a:62:00:e4:7f:ef:20:1d:61:10:7c:22:8b:
                    c6:f8:45:ef:50:b5:cc:3a:a8:77:c7:90:90:6c:0b:
                    a9:1a:82:cf:5b:fb:86:23:5c:00:37:9f:b7:0e:d0:
                    cb:f8:5f:c3:1b:b3:b4:f1:27:71:e0:4c:e4:1e:a1:
                    04:b7:c4:2b:6f:72:93:dd:a9:14:10:ac:8f:70:0d:
                    a9:8b:6e:5b:fc:73:c6:d1:86:ea:c7:d5:0c:a3:69:
                    22:d3:06:42:8d:ff:a9:84:f3:34:db:ac:6d:e3:32:
                    aa:54:7c:65:da:f3:ab:0e:42:c7:6f:02:2e:27:c3:
                    0d:92:18:3f:22:b3:70:1c:23:29:7d:f8:19:6f:e5:
                    f4:4d:60:e3:12:fd:ab:b3:91:4f:ec:b8:16:8b:8d:
                    9a:d8:2b:58:f6:2c:7c:ad:f9:f7:a0:be:df:da:41:
                    65:37:9d:e1:1f:cf:57:dd:ea:80:2d:aa:d4:01:08:
                    be:7a:eb:85:4e:7a:d8:65:b1:d8:2b:ab:cb:8b:e8:
                    d2:51:5d:44:43:6a:dd:a9:49:4d:58:c6:ce:c0:34:
                    35:4c:40:df:d5:42:41:4b:ed:ed:e6:35:dc:cc:7e:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:CA:FE:35:B6:EA:13:28:B4:37:76:45:4D:F0:0C:1B:C8:57:2B
            X509v3 Authority Key Identifier:
                keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:39:3d:1f:3b:ec:0f:41:bb:d4:8b:f7:9b:f5:ba:d9:0a:ee:
         ae:12:3e:38:4c:8d:0d:bc:9a:0e:e5:91:f8:3c:78:ee:1c:32:
         79:59:7f:83:5c:8d:93:12:f3:36:b8:65:b1:d0:1a:e1:bd:14:
         ee:12:f8:ad:1f:ad:87:2d:17:c8:c6:f3:df:da:38:9f:3b:12:
         91:ea:9e:ac:c7:7b:92:3f:ac:0e:cd:c5:35:0e:9a:4f:da:61:
         7c:e4:2a:00:38:52:a5:a8:ac:12:ac:07:c4:42:dd:b3:8b:e6:
         3e:d2:e9:54:82:73:4c:ec:cc:25:0b:0f:31:85:4d:7f:f5:18:
         fb:c8:7d:4a:fd:26:7a:3d:41:a6:56:e6:76:ae:3e:6f:c0:9d:
         e2:2c:98:be:29:46:c5:b7:de:d9:82:b8:22:87:55:3e:f0:6f:
         6e:e9:15:e4:08:0b:5a:ed:d7:6f:e1:52:9d:2c:89:36:b1:6b:
         da:ff:76:b8:d7:ed:50:83:3d:15:de:b7:7c:41:30:34:bd:25:
         65:4e:4f:74:35:5e:33:45:e1:f7:90:5a:36:ae:3d:20:3a:04:
         78:0a:33:df:e0:80:6d:a4:6a:a7:15:e6:01:0f:77:0e:ed:27:
         a6:c5:96:03:ee:f6:70:f6:ee:cb:54:7b:3f:e2:20:87:9d:93:
         7d:2d:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----