Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File:                     UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier:          1CxPiATPweuk9FtNijmI2FpMOlBBkPiis3u+6e4XRcE=
Subject key identifier:   19:30:97:4B:2F:F0:0D:BD:96:EA:A2:32:7E:ED:B1:CE:55:AF:32:7B
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer:       /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial:       01962E986BE6BAB23391AC6B319F618B7C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number:          086F
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: 6eifouU+Yp/3QL/Y5LO5BhIdzzCTw/NXt/22/9qg12U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6b:e6:ba:b2:33:91:ac:6b:31:9f:61:8b:7c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=1930974b2ff00dbd96eaa2327eedb1ce55af327b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:21:20:1b:80:28:00:d9:1b:b4:04:f8:7c:03:
                    be:c0:00:9a:d2:eb:03:47:d7:3c:81:19:14:71:be:
                    ed:d5:18:ad:09:f1:3b:f0:b5:15:5c:07:4d:0c:cd:
                    e5:01:df:87:0d:06:ea:55:90:0e:5f:d3:b9:e5:f8:
                    46:99:2f:07:d8:2b:88:7c:62:ee:f3:0a:c7:e1:72:
                    a9:d9:17:7c:d3:f9:a2:be:60:48:9d:03:ba:48:23:
                    12:2c:ed:53:fa:e5:43:2e:0d:01:45:ed:44:21:66:
                    0c:46:d4:ad:97:8c:19:a8:bb:36:18:f4:0e:d6:e9:
                    7f:3c:a2:93:18:f2:ab:db:bd:a3:e2:44:68:31:30:
                    66:0b:66:57:c0:3a:b7:69:4d:ef:c4:e9:77:45:97:
                    14:84:61:20:79:77:b7:2f:32:e8:5b:cd:41:96:2b:
                    1b:c5:ef:d8:ff:2c:94:43:32:67:b4:88:85:27:e1:
                    9d:00:16:4c:c6:7c:36:93:4c:e5:7b:83:fb:dc:6a:
                    ab:17:89:7c:e5:4e:2e:fb:fe:c4:1a:d9:36:97:b6:
                    ad:fe:f0:c9:c0:92:87:54:34:a1:b2:f0:28:f4:cb:
                    26:45:8c:6d:55:fb:a4:40:0e:1e:bb:84:29:2a:6f:
                    e6:7a:8a:dc:90:85:a4:60:04:f0:be:b3:58:65:31:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:30:97:4B:2F:F0:0D:BD:96:EA:A2:32:7E:ED:B1:CE:55:AF:32:7B
            X509v3 Authority Key Identifier:
                keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:d1:59:ad:ef:0a:99:ca:7b:54:ae:d8:7d:fd:2e:4c:69:
         2e:bf:10:04:b4:3e:f9:08:2c:b9:da:6e:c4:a8:07:fa:13:46:
         e5:29:e7:95:07:c3:cd:2a:a3:62:4e:8f:bc:03:5e:48:55:47:
         b9:c8:a7:a1:0a:c1:fc:50:ab:a5:c1:0a:c6:55:fb:85:55:96:
         27:48:25:a4:67:db:88:f0:0a:94:7b:e6:23:72:23:7c:0e:7f:
         34:0c:d0:c0:53:53:ba:8d:1e:14:eb:cd:67:77:31:d9:7b:ea:
         91:73:28:a7:5d:d3:f2:16:12:ea:5b:d2:03:ad:66:3e:52:e5:
         4e:99:37:85:8a:2d:3d:d1:87:07:7f:20:0e:b0:8a:f4:32:91:
         be:47:11:a5:ba:ce:20:0a:51:8d:ed:cd:42:31:cc:04:a7:00:
         c6:10:a4:05:4f:a2:44:15:7e:24:26:86:0a:52:85:47:62:77:
         d3:1b:38:bf:72:a3:8d:92:8b:3f:a0:0a:ad:be:55:fa:8a:8f:
         3d:1a:d2:15:69:56:9f:3c:f8:5a:b7:ba:a6:f8:27:ef:6b:c3:
         75:a6:51:15:97:38:8c:f1:66:2d:f4:3a:2f:1e:7b:b0:92:ad:
         3e:2a:aa:d6:8e:43:ba:64:9a:da:d6:ee:06:83:f0:d1:71:25:
         7e:db:75:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGvmurIzkaxrMZ9hi3wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODUyNmRlN2E0MmYxZTA4MDkxNjg0MGVlYmYzOTAzOGI4
OTNkMTYwHhcNMjUwNDEzMTAwMTAzWhcNMjUwNDE0MTAwMTAzWjAzMTEwLwYDVQQD
EygxOTMwOTc0YjJmZjAwZGJkOTZlYWEyMzI3ZWVkYjFjZTU1YWYzMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CEgG4AoANkbtAT4fAO+wACa0usD
R9c8gRkUcb7t1RitCfE78LUVXAdNDM3lAd+HDQbqVZAOX9O55fhGmS8H2CuIfGLu
8wrH4XKp2Rd80/mivmBInQO6SCMSLO1T+uVDLg0BRe1EIWYMRtStl4wZqLs2GPQO
1ul/PKKTGPKr272j4kRoMTBmC2ZXwDq3aU3vxOl3RZcUhGEgeXe3LzLoW81Blisb
xe/Y/yyUQzJntIiFJ+GdABZMxnw2k0zle4P73GqrF4l85U4u+/7EGtk2l7at/vDJ
wJKHVDShsvAo9MsmRYxtVfukQA4eu4QpKm/meorckIWkYATwvrNYZTFNaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkwl0sv8A29luqiMn7tsc5VrzJ7MB8GA1UdIwQY
MBaAFFKFJt56QvHggJFoQO6/OQOLiT0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEt
NTBjOWY1YjNjM2U0LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85NmE5MjgtODE5Yy00NzZjLWJhZTEtNTBjOWY1YjNjM2U0
LzEvVW9VbTNucEM4ZUNBa1doQTdyODVBNHVKUFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATd7RWa3v
CpnKe1Su2H39LkxpLr8QBLQ++QgsudpuxKgH+hNG5SnnlQfDzSqjYk6PvANeSFVH
ucinoQrB/FCrpcEKxlX7hVWWJ0glpGfbiPAKlHvmI3IjfA5/NAzQwFNTuo0eFOvN
Z3cx2XvqkXMop13T8hYS6lvSA61mPlLlTpk3hYotPdGHB38gDrCK9DKRvkcRpbrO
IApRje3NQjHMBKcAxhCkBU+iRBV+JCaGClKFR2J30xs4v3KjjZKLP6AKrb5V+oqP
PRrSFWlWnzz4Wre6pvgn72vDdaZRFZc4jPFmLfQ6Lx57sJKtPiqq1o5DumSa2tbu
BoPw0XElftt1HA==
-----END CERTIFICATE-----