Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          TpAyZwPt+s4fQQ634oFukf5LgOfl6I6E0cB5AdtxnhQ=
Subject key identifier:   95:8B:3E:B5:F4:B2:6D:DC:8C:65:9D:1A:BC:C5:D7:5C:5D:97:B0:35
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       01962DF3B492FA21ACD43F866069D6CEF704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          0DFE
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: aPXPKS4o8dNLYrN/xaGHZNKOrgjLEsbrDWSJiTu4MS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:92:fa:21:ac:d4:3f:86:60:69:d6:ce:f7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=958b3eb5f4b26ddc8c659d1abcc5d75c5d97b035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:8b:28:81:6c:a5:25:0f:1d:71:43:d1:af:
                    8f:fe:90:04:2b:fc:6e:9f:08:16:b1:09:27:90:c1:
                    04:01:66:4f:d6:36:9e:30:4f:81:7d:70:79:0a:6d:
                    e9:e9:b8:ec:e4:73:04:ed:e9:40:22:bf:b0:db:4b:
                    eb:aa:63:0e:a6:65:97:fb:e3:9b:da:8d:f2:ac:93:
                    9f:10:9c:dc:39:71:37:89:2b:7d:3d:6f:a8:45:9f:
                    0a:b6:4a:4c:13:f7:c4:0f:68:d7:05:2c:af:b9:b8:
                    46:cb:b0:a7:ef:c9:7b:a8:0b:41:20:01:45:f6:8a:
                    cd:f5:f8:8f:cc:30:67:36:87:3f:d8:dc:2e:7f:af:
                    6a:79:31:6f:a3:4d:f7:b5:00:5f:be:55:03:63:88:
                    39:49:5e:87:c1:06:00:ba:c3:6f:59:6a:29:57:89:
                    1a:5b:f0:4a:f3:e5:a5:a9:5a:77:e3:68:44:b1:de:
                    0e:ae:ae:07:d9:fa:94:83:dc:54:1a:84:d2:e6:12:
                    60:88:42:67:fa:d7:b1:10:87:56:02:61:bd:26:e4:
                    ba:41:02:e0:e7:70:b2:62:67:3f:23:6e:1b:f7:95:
                    ed:b5:1a:62:29:bf:d7:a2:82:6c:59:5a:64:f3:e1:
                    81:98:d9:f3:e1:fc:75:bd:e5:bb:a6:bc:d3:8e:76:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8B:3E:B5:F4:B2:6D:DC:8C:65:9D:1A:BC:C5:D7:5C:5D:97:B0:35
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b5:11:e6:10:df:c0:06:90:b4:0b:be:e3:71:ac:6c:df:38:
         07:98:02:db:fb:2b:02:19:7d:ca:6a:41:db:7e:24:d4:d3:af:
         da:1b:34:00:b0:f2:8b:48:d3:26:64:f3:ca:b2:da:11:49:00:
         7f:90:b6:95:15:b8:7b:e4:c7:9a:4e:09:33:1d:8c:56:1b:d1:
         26:0b:3c:76:f5:0f:54:57:62:e1:fe:27:61:c2:3e:40:33:e5:
         f4:f5:78:e5:33:77:23:1e:df:c9:3c:fa:f4:e7:09:41:c0:5d:
         4f:0a:00:5b:03:03:71:57:37:57:26:46:d3:f4:38:33:82:78:
         96:a3:23:84:8b:3e:54:d9:a2:ae:57:6f:89:7a:f9:72:4f:f8:
         45:7f:c2:27:32:e3:a4:23:5c:ad:ea:9e:eb:36:ba:c6:3a:19:
         f4:95:8e:2c:a2:32:81:b8:92:10:38:80:e5:45:df:fa:7c:88:
         93:c0:fb:d1:54:1d:53:2c:85:3e:ca:23:29:32:75:b4:be:e2:
         0a:0b:c3:f1:57:7f:64:10:72:1c:57:79:5c:7a:82:62:73:20:
         f3:d1:44:4b:ee:d3:95:ea:76:3a:ab:80:90:a8:62:56:fe:26:
         ec:5f:1d:3e:4b:96:1f:88:81:e6:09:59:96:69:e9:f8:e2:5d:
         75:70:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----