Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          u3uu+epzykqUMjDbdlmuFmzdcwvRLGpf2lsxASOEcR4=
Subject key identifier:   E7:CE:9C:4C:0F:3B:E7:1D:BE:40:4E:41:C0:69:83:B5:F9:04:0C:1E
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       01962DF4266E9B16FC74F25B7EF9FFEA6D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          0C44
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: +gvSXx3oZFy8JRjmvAmyi/y5HQ3IDqSMqpo8HdalVx8=)
                          3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:6e:9b:16:fc:74:f2:5b:7e:f9:ff:ea:6d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=e7ce9c4c0f3be71dbe404e41c06983b5f9040c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:21:dc:1c:b9:e1:b0:47:71:3c:8f:49:ec:
                    a6:a5:1c:40:10:58:20:22:54:1c:1c:5e:e7:f5:4c:
                    af:9c:d9:18:00:a8:1c:20:60:4c:c8:f2:92:e2:83:
                    80:06:0d:4d:d0:e1:e9:e5:a1:c8:da:82:b1:b1:6c:
                    9b:1e:75:52:91:f8:00:d3:c9:38:79:8a:3d:d3:b0:
                    e1:89:a0:cb:bb:f0:ad:53:e1:1e:3b:a4:7a:dd:98:
                    37:a4:93:c0:ca:b4:a8:0f:4f:81:c0:3e:e7:6b:0e:
                    90:31:94:1b:36:8f:8e:3d:1d:c5:fe:82:10:0a:41:
                    c5:a4:cb:81:dc:be:41:2e:48:c6:61:0f:91:3d:a0:
                    bf:71:ec:68:f0:ad:cc:bb:e4:03:85:ff:2c:26:5a:
                    99:f5:14:77:7e:31:98:ab:40:ba:38:08:13:e3:f3:
                    28:13:f3:02:a8:60:c1:fe:0f:83:51:12:a5:57:a2:
                    b6:ae:e1:55:c2:de:be:80:e2:ac:f8:db:dd:a6:63:
                    7d:8e:2a:cf:f8:2d:4d:19:09:38:7d:2b:b6:8c:96:
                    d6:aa:47:16:41:73:93:65:79:85:5f:65:58:d4:9f:
                    67:cf:dc:bb:79:8d:73:cf:1f:e7:1c:2a:b6:b7:f4:
                    b3:d3:a1:53:9c:5a:17:83:b7:7f:ba:85:a9:f6:4d:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:9C:4C:0F:3B:E7:1D:BE:40:4E:41:C0:69:83:B5:F9:04:0C:1E
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:45:d6:88:b9:f8:ed:4f:14:88:53:88:1d:99:0e:f8:2d:
         52:af:1f:8d:99:54:43:e8:95:89:c2:5d:58:c0:cf:73:b6:fd:
         04:d7:d1:fd:12:51:44:19:c4:4b:77:1b:7b:d2:a4:2c:05:5e:
         e8:5c:86:f4:c4:83:64:37:29:2b:19:e5:83:f5:7b:34:09:33:
         ac:6d:b4:74:28:a5:8a:0c:16:6e:8f:be:a8:9b:17:7e:88:32:
         60:a7:22:10:33:e2:d6:5e:d0:bc:15:c7:2f:20:34:5f:a6:a2:
         5f:47:7a:11:8e:0c:b5:28:a9:d9:d0:56:06:57:07:46:c8:e8:
         52:fc:dd:44:29:94:ec:b7:10:db:58:f5:af:40:39:f5:88:c3:
         cb:8a:65:9e:e2:bc:4f:61:4b:7d:4a:c8:44:49:35:ed:d8:69:
         f7:fc:80:99:a8:b9:6b:07:d1:93:25:bc:b1:72:58:b2:f5:04:
         44:25:55:3f:5a:90:cd:bb:42:a9:b9:07:11:df:43:52:67:07:
         08:1e:ef:44:8a:bb:d4:fc:69:e7:5d:8c:32:1b:e0:7d:55:4e:
         9d:aa:d7:d2:71:1e:e2:64:1e:ba:8f:4f:a4:3c:8a:59:5d:d1:
         0d:8b:f6:3f:fd:1f:3d:99:66:a7:80:b2:3d:4e:16:6d:9a:96:
         eb:7b:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----