Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File:                     UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier:          P1jM+OyVhdW3vysRMv425KdWgKBMKKFLt3POFGPinp0=
Subject key identifier:   9F:43:60:C0:B8:65:B3:65:FA:21:02:B9:3D:82:1D:EE:D0:1D:1F:27
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer:       /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial:       01962E2B2E9D8AEC45C3888D30F02C16467E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number:          037D
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: gouPg8xzVb9I7i14wlIgrjWlzRmIESZRpvIFjsCKkk8=)
                          2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=)
                          3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2e:9d:8a:ec:45:c3:88:8d:30:f0:2c:16:46:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=9f4360c0b865b365fa2102b93d821deed01d1f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:e0:8c:ee:58:7a:0c:12:fa:f9:ff:e7:2f:
                    e2:6e:d2:d6:83:a9:81:82:0a:4b:d1:6e:80:53:a1:
                    e0:65:67:49:f1:dd:e8:91:70:ed:df:f3:b2:54:d3:
                    1e:07:b7:cb:16:46:fa:de:5e:12:cf:22:bb:c6:1d:
                    a2:fa:d1:99:0d:3e:20:1e:48:e7:1c:7b:75:ef:15:
                    c6:f8:3d:6c:7d:87:8d:be:cd:b3:ed:41:49:e7:c3:
                    5f:5d:91:d2:7d:d4:c9:d7:b6:05:ad:23:07:2c:d1:
                    0e:18:6b:3a:a5:84:82:f7:47:0c:12:d2:ea:66:b0:
                    53:19:c1:e0:97:08:d8:04:5d:d1:ee:30:4d:fc:66:
                    cd:0e:d5:42:b7:47:90:23:b4:f3:ab:5b:da:1a:b6:
                    b1:41:ff:9a:05:fd:5a:bf:6d:e3:c1:33:f1:b9:74:
                    7e:7c:21:d2:5a:c5:5f:c1:79:99:84:a6:73:76:58:
                    0f:df:0f:6c:16:a0:2e:ac:27:0d:48:b1:e5:4f:9c:
                    ff:3c:9c:55:7d:8c:33:fd:94:74:ab:74:f4:43:c8:
                    8c:34:20:67:37:9a:26:ba:eb:f9:73:87:d7:e6:dc:
                    4b:12:10:38:96:59:dd:2d:8a:4e:76:99:5d:42:47:
                    ff:cb:83:78:8f:ee:5e:71:74:86:8c:b2:e4:54:c9:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:43:60:C0:B8:65:B3:65:FA:21:02:B9:3D:82:1D:EE:D0:1D:1F:27
            X509v3 Authority Key Identifier:
                keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:82:8e:ad:c4:55:2f:12:4b:ff:af:35:19:ff:6a:29:72:c9:
         7d:03:03:67:07:ab:96:48:75:9b:d7:ca:a6:8b:d2:24:7c:73:
         5d:3d:c6:16:85:6b:a7:df:fb:f5:b7:05:86:93:96:7a:b6:73:
         b0:75:d1:56:80:58:48:97:05:cd:6a:6d:03:b3:41:2e:09:0d:
         78:c5:71:35:da:ab:17:ba:9c:f6:48:24:aa:4c:ed:31:76:82:
         f2:90:42:71:97:f4:4b:90:3e:4b:32:55:cd:d1:d5:fb:93:ff:
         02:ba:46:94:4d:fc:3f:f2:65:2e:cb:c8:ea:e0:06:2e:be:0f:
         25:bb:42:54:0b:1b:4d:81:30:0a:24:d0:46:c3:28:32:14:b7:
         8f:5a:fb:31:35:e1:5c:31:92:05:fd:7d:8e:c1:2f:9c:12:6d:
         12:bc:a9:f0:87:a8:23:ad:91:8f:43:c4:49:7a:c3:2b:4d:fe:
         fe:7e:9e:f7:4d:20:b4:b4:9f:bd:de:ac:c0:e8:71:40:5b:cc:
         de:38:ff:07:85:3f:60:16:0a:06:35:b1:ac:08:f1:cf:f1:dc:
         32:7b:5d:bf:ec:1b:ed:8a:7a:6b:38:a3:6f:c9:1c:1e:44:d9:
         91:e9:50:40:81:28:7c:ac:05:d4:33:df:c4:b6:be:56:ac:c2:
         17:b4:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----