Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File:                     Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier:          +gSqlWuLdZYH/JBYK8gUZrodYdioM6ula4us/suhlu4=
Subject key identifier:   94:59:35:3E:77:4D:53:ED:59:6F:7E:06:AC:18:B9:79:91:A9:DC:6B
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer:       /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial:       01962F07263826BDAF8011E133A94F9E37FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number:          04BB
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
                          2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: K9O0US2LArKmyF9AUXDyUyHNg1/ONfwaKc2J2YtFPA4=)
                          3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:26:38:26:bd:af:80:11:e1:33:a9:4f:9e:37:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=9459353e774d53ed596f7e06ac18b97991a9dc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:4a:ac:eb:a1:8a:70:7c:6d:9b:df:e3:90:
                    b7:68:fa:0e:5a:d2:c2:a9:a1:a1:c0:d1:5e:bb:32:
                    2c:b1:d0:0f:2d:93:36:91:8a:09:de:73:a7:a5:d1:
                    2e:97:17:b3:5b:d9:4a:fd:ec:80:65:53:aa:2d:12:
                    f8:c8:6a:80:98:0b:3d:67:98:d4:4e:e5:e1:94:3b:
                    23:c0:02:a3:8a:4f:45:44:c9:ae:00:89:67:7e:ec:
                    5d:c2:d9:4c:c6:f0:2c:ca:d1:ce:e7:94:8a:33:95:
                    16:d6:e1:e6:a4:4f:6b:52:b8:00:54:ac:25:9e:51:
                    b1:3a:f7:98:ff:42:71:01:7e:4e:30:b7:32:b3:6e:
                    24:db:09:8c:9f:d4:b8:7e:e6:3c:81:9c:07:e2:7f:
                    68:17:f8:84:55:49:24:a0:78:61:3b:1f:37:3d:30:
                    c4:e3:9b:e2:f4:7b:3a:e2:1e:2c:43:b7:37:08:87:
                    f2:73:76:fe:25:e9:b1:e1:cc:d0:ae:32:9e:b7:db:
                    a0:81:28:32:33:14:d1:d5:a3:49:d1:c1:74:52:df:
                    1b:ee:a9:e9:44:fb:17:43:20:7e:5c:f6:c7:63:e0:
                    92:47:e8:a4:50:00:a8:0e:01:fd:e3:44:c6:82:34:
                    fd:e5:6a:6f:56:8e:60:c8:ea:ef:01:50:4b:30:9a:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:35:3E:77:4D:53:ED:59:6F:7E:06:AC:18:B9:79:91:A9:DC:6B
            X509v3 Authority Key Identifier:
                keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:65:3f:47:fd:a3:bb:ad:68:d4:26:73:c5:90:27:62:10:f6:
         c9:c4:42:14:88:41:48:3f:b2:0d:a2:3e:6d:37:11:73:c9:0e:
         2d:91:a0:04:a9:44:d5:b0:cc:43:fa:59:7f:35:cf:22:d7:61:
         62:72:85:e4:85:2e:b5:00:ce:b4:2a:3e:9d:cb:ac:0d:32:29:
         ce:02:be:1a:5d:1b:01:20:d5:82:a9:47:99:d3:c3:df:7a:b2:
         b1:7e:57:85:46:41:9b:ce:f6:3a:b6:ab:b8:fa:2a:29:40:5c:
         ea:09:54:72:21:dd:58:20:93:f3:52:6b:1f:67:1f:7f:b2:44:
         da:b4:58:2a:df:42:fd:d1:6e:83:f2:a8:9b:3c:d0:ab:40:48:
         46:42:b1:6f:29:c4:49:e9:28:d3:69:de:ca:c6:99:96:9a:96:
         25:bc:a4:05:21:11:a9:ec:52:b4:a0:ab:2d:b4:75:83:a4:6a:
         7d:86:02:ab:de:2f:18:ed:eb:4a:27:52:4c:59:5a:d5:b9:70:
         12:7d:c5:24:ec:a8:34:a0:1c:81:5f:c9:ae:80:7c:0f:f1:8d:
         b9:d1:e1:58:2e:a8:01:3c:33:a6:2f:e1:8b:2d:f1:bb:94:ef:
         e5:d7:96:de:ab:49:ce:ec:d2:0b:44:49:f1:66:0c:d2:49:2c:
         8d:a7:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----