Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File:                     UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier:          ndlrPv7e7fDavX9WETbISnDlvm9AqogQvx717EdHWSc=
Subject key identifier:   03:F2:53:D9:7E:82:CF:06:E7:30:E7:76:CB:42:51:5B:03:F6:BD:96
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer:       /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial:       01962F3DD33684737652243F8BEABC94F2C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number:          048C
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: z+SCkp1V9q/9i8gZBojtdxkNd989pGwKPUlKpkPoi1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d3:36:84:73:76:52:24:3f:8b:ea:bc:94:f2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=03f253d97e82cf06e730e776cb42515b03f6bd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:55:4e:8e:8b:6b:4c:32:77:d7:db:61:5f:
                    3e:5f:b6:ee:3b:7a:8e:d7:cc:d9:af:04:4c:b1:fa:
                    eb:e2:89:25:fd:94:fa:98:31:86:a2:fc:23:a0:69:
                    f7:16:47:eb:d4:e7:b6:12:a5:42:8f:2c:80:25:b1:
                    56:aa:b8:04:f2:28:b2:6f:ce:8c:12:fe:28:55:02:
                    4e:4d:da:e4:d5:18:94:5f:86:5d:db:12:e8:98:90:
                    e1:25:36:38:07:02:d8:0f:4e:a4:74:a0:66:13:d5:
                    65:53:b3:15:fd:89:9c:49:a3:84:1e:e1:a9:80:34:
                    c7:81:01:b1:a8:9f:11:01:5d:4a:ce:61:76:e4:55:
                    7b:df:08:97:37:97:68:31:61:be:12:2b:1f:00:9f:
                    92:f9:9f:ca:9e:a6:ea:44:07:6e:09:96:eb:89:7e:
                    fd:12:b6:c4:9f:46:69:1f:8f:51:27:d6:57:60:6f:
                    5f:4e:77:2d:fc:9b:6c:f3:36:dc:07:b9:f3:ed:7a:
                    c4:be:2c:46:3e:b3:97:d5:f3:86:f2:12:0f:f2:31:
                    39:d0:45:d7:b3:2f:be:2f:92:57:0f:ff:22:f9:bf:
                    0c:62:b6:ff:a6:da:3f:dc:fc:0b:ad:bc:95:0e:b7:
                    04:1e:a3:55:34:e8:6b:c5:18:8a:42:cf:e1:5a:27:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:53:D9:7E:82:CF:06:E7:30:E7:76:CB:42:51:5B:03:F6:BD:96
            X509v3 Authority Key Identifier:
                keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:1d:a2:4f:e3:c8:52:53:4a:8b:07:3c:47:58:d8:1e:b1:
         b1:44:77:67:2a:fd:f6:cb:5b:57:a4:99:bb:5e:e0:a0:bd:a1:
         3d:b1:f7:cc:e9:93:df:64:cf:81:5a:05:44:23:00:25:c2:fb:
         ad:1b:7d:27:ad:fd:a9:ca:1d:14:c7:0b:af:53:e3:3c:e3:5d:
         10:e4:1a:53:dc:ed:66:fe:95:14:68:11:ce:83:c3:a9:12:a5:
         57:2f:f9:a7:40:91:da:d9:39:26:6a:f9:2f:3c:09:02:1d:6e:
         df:f3:4e:14:32:cf:a5:93:6e:5e:df:4a:63:3c:5c:4f:94:fc:
         fe:5c:6f:6c:44:2f:7e:2d:0b:23:83:d9:92:9a:7f:17:5d:29:
         06:bd:33:03:0e:0b:a4:a9:7d:3d:9a:bf:0b:56:49:7a:02:1d:
         ae:9d:f0:e4:b2:6c:9a:6f:f4:47:93:db:e5:42:15:c6:c5:ac:
         b5:66:61:42:50:3f:c2:1e:2c:61:35:97:16:65:81:d4:27:4b:
         13:39:8c:c4:8e:e4:c5:39:ce:70:f4:86:53:7d:c8:52:d2:2c:
         8f:dc:91:4a:ea:5c:3d:bb:3b:18:42:f8:ef:7b:b7:b2:3c:d7:
         91:cc:ff:8c:71:34:54:91:a0:48:88:b1:97:a6:0c:78:3c:bc:
         50:21:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----