Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File:                     Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier:          ztZ6GHBrdgUHJsc9hf/15ZqOAbqBSWHPZ4G3MraVMks=
Subject key identifier:   B2:13:4B:90:DC:32:E1:FD:46:05:B9:C4:9B:6D:D2:9B:7C:FD:CD:C9
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer:       /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial:       01962FAB627251B7AD5614A128FBC1233081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 23ykqlSoxhCVfaY9IS92DsNyWBE.roa (hash: EcOQRm/PU+EVIJkGyqpMDHmRcGo4Swnj7UgNzWEeajc=)
                          2: Ukpz258Pu7bNWf8NOO8xTSDm6ac.roa (hash: N3tcSeOhnfUpzG6xjoUCZ9+KDhbzHATSPGgHhTJK3Ng=)
                          3: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: ekGJ05lLXO2Lp+DCfrjJ9L8gQWf7o860LpdmlKmYWKU=)
                          4: eWric6r-5T_Rp4hV5FAy7I4IoJY.roa (hash: NkPTqBN+TTAOu9SJvsMG3iRYoMiT60DbDNclBXlGKDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:72:51:b7:ad:56:14:a1:28:fb:c1:23:30:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=b2134b90dc32e1fd4605b9c49b6dd29b7cfdcdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:d1:c6:1f:a5:37:b2:78:e3:30:19:31:a6:
                    9f:72:17:b5:5a:51:9c:39:55:ad:a3:62:99:06:f6:
                    80:81:3e:3b:e3:10:f9:98:b0:de:03:25:8a:c6:05:
                    a8:f1:89:7e:1d:2a:9d:7b:90:6c:49:12:dd:85:bf:
                    ee:15:f4:9f:fe:13:77:4f:18:65:7c:e1:23:17:df:
                    77:0e:9a:bf:b2:12:fa:b1:cb:6b:fd:0d:93:45:a2:
                    79:04:51:54:cb:fd:43:3d:ae:11:ed:74:28:13:d9:
                    94:8f:20:49:8a:58:a0:a1:c3:21:f1:3a:fc:90:fc:
                    00:20:ba:97:a2:b5:b0:68:f1:a4:7c:26:f6:5c:6f:
                    42:da:35:9d:8e:37:f1:c4:03:68:b2:80:64:7f:64:
                    8f:ab:2d:e1:95:36:7c:81:c4:4b:77:f2:23:66:5b:
                    6d:1c:54:68:d0:fd:70:25:ef:bd:ac:0c:18:c3:d8:
                    1e:92:cf:c8:9e:d1:c2:b1:b6:23:8e:8b:19:61:d0:
                    43:33:6c:3e:b0:6c:58:8b:90:6d:93:b0:9e:c4:a6:
                    db:1c:4f:93:5a:c6:eb:22:91:d2:81:6a:47:18:92:
                    43:57:8a:d3:94:d4:9b:26:b4:33:2c:81:e9:27:30:
                    53:2c:1c:3a:5e:8e:0a:92:52:fc:ce:e5:01:6f:66:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:13:4B:90:DC:32:E1:FD:46:05:B9:C4:9B:6D:D2:9B:7C:FD:CD:C9
            X509v3 Authority Key Identifier:
                keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:63:9d:eb:8e:f2:c9:ad:4f:00:58:e0:16:e8:8e:35:e5:
         71:22:00:69:da:d1:c4:3e:84:4b:e8:50:a6:93:ad:47:44:04:
         3e:a3:87:b3:42:4d:46:03:cd:62:a7:00:5d:f8:54:53:72:06:
         96:a4:9c:61:ff:fc:d4:8e:d1:d7:05:53:17:87:61:31:64:24:
         c0:b8:66:fe:59:e0:ea:7a:65:0a:30:a9:79:22:fc:02:26:35:
         01:2f:0e:12:bd:a1:62:29:24:e5:2a:f3:9e:a9:3c:e9:ae:18:
         8f:28:7c:d2:45:d3:60:36:6d:23:63:e3:11:ab:cd:80:dd:55:
         34:77:af:24:73:9a:98:9e:51:da:d5:bc:08:87:d2:9a:b7:01:
         80:c1:ce:ff:de:43:bd:e2:cf:84:3f:f7:6c:ab:90:4b:a1:0d:
         f8:e3:fc:6b:74:21:7b:ba:4a:24:46:18:b9:d3:69:af:7b:ee:
         73:ac:7b:ba:37:47:ed:79:fb:0b:47:9a:a1:7a:26:0a:10:4d:
         51:3d:45:f2:4e:6a:bf:ee:21:17:09:bd:33:98:9b:3e:0a:be:
         9c:f8:cb:26:76:0f:85:a2:91:bb:f3:ed:1a:5b:ab:48:41:7b:
         92:9b:2e:7e:2b:1c:73:1e:b4:8e:81:66:19:f3:08:f3:7d:92:
         56:eb:06:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----