Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          SX28muBJLMtKgnGqhnKWUYOUv6JlFn4h+CZKJC9wC14=
Subject key identifier:   4D:EC:2A:D8:EE:4F:AA:9A:7E:B7:23:3E:BA:36:63:A6:69:BA:5C:E2
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       01962F744ABAC0224B96B1488CE07EA37FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: H82uaxzDzCgTF4MPWqnvioL3e+C49SfIuh6cZsrYJlI=)
                          2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:ba:c0:22:4b:96:b1:48:8c:e0:7e:a3:7f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=4dec2ad8ee4faa9a7eb7233eba3663a669ba5ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:1f:a0:ef:99:6e:24:96:b7:6d:ab:29:d3:
                    df:42:a7:7f:bf:60:03:68:ac:e0:45:27:27:21:2e:
                    0f:8c:44:24:f1:7b:b3:39:9a:ac:27:0d:0d:25:22:
                    ee:2d:94:29:f0:8d:95:c2:d4:7c:a3:df:ba:b5:75:
                    02:93:d3:7a:ab:3d:bd:5e:5c:ea:05:77:d4:c6:cd:
                    63:3c:f7:7d:52:a1:d7:01:a1:51:9f:ba:f5:95:e6:
                    b5:eb:2d:e9:cd:f3:70:63:c6:24:8f:73:02:63:3d:
                    6c:5c:6b:c2:d5:2e:9d:8a:dd:b6:96:33:c9:5c:f5:
                    8a:8a:a4:bc:5c:32:66:8a:a7:47:82:ca:42:19:60:
                    10:58:0d:d1:10:1e:35:47:bb:90:35:9a:f3:36:bd:
                    2f:14:06:6a:a3:9e:32:70:8b:06:b6:94:8e:43:55:
                    7c:6a:7f:d8:91:aa:3b:fe:b4:82:a9:e0:67:c5:41:
                    87:f8:23:e3:f1:af:5f:35:88:6b:aa:c4:66:96:e4:
                    59:30:9c:ea:c4:2a:e3:54:f1:24:23:17:11:d7:68:
                    43:a8:55:e3:8b:86:23:c3:12:cd:3d:51:79:44:01:
                    68:67:e7:18:92:ae:a6:55:4e:4f:ed:54:e4:f6:cd:
                    36:66:34:c4:40:a8:cd:10:19:33:a3:90:1b:7f:71:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EC:2A:D8:EE:4F:AA:9A:7E:B7:23:3E:BA:36:63:A6:69:BA:5C:E2
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:64:ec:96:7a:07:eb:1d:bf:df:36:19:8c:18:db:38:5f:
         e6:4c:2a:2b:18:ed:4e:a6:a3:f8:ba:af:10:df:59:45:29:e7:
         33:9e:aa:64:54:12:0c:e4:29:84:64:03:01:de:de:36:5c:5d:
         76:9e:f6:eb:bf:8a:8c:4e:74:f9:c4:8f:8d:77:86:55:8b:d6:
         0d:1f:9c:a2:93:97:45:33:9e:2c:95:5d:98:d1:df:e1:6c:8d:
         fe:85:08:f4:cc:9a:06:45:23:1b:f3:81:48:e5:23:2b:2f:01:
         b1:49:9f:17:ce:13:ab:43:f0:4d:95:b0:3e:86:e8:92:a5:6e:
         26:95:9e:9e:a1:74:6d:18:f3:70:b0:37:e4:ce:62:6a:10:2e:
         c2:c1:b8:b3:d3:77:09:1b:d3:b1:4d:ad:92:33:53:ab:5f:75:
         6d:4d:0c:a2:03:b7:d9:c6:42:5b:56:7b:ad:23:c4:0e:4d:de:
         fb:f5:0f:43:d9:16:d4:54:fe:04:52:d8:6e:ea:fb:36:18:60:
         c9:97:99:69:a0:77:35:2d:7f:bc:a3:92:5b:bf:cd:dd:7f:1b:
         2d:26:6d:7b:48:62:6d:92:28:c5:e1:fe:8b:01:6e:fc:b5:8a:
         b9:11:71:dc:b8:15:c6:0b:30:24:0a:89:00:ac:9b:d5:9a:4f:
         66:c8:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----