Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File:                     UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier:          eQlVizYTvr4018G4Yj2vWyBoKFSreOyc1Sx8Gf29Zbo=
Subject key identifier:   BA:DC:99:BA:04:1E:D3:A1:9F:DA:B9:9A:81:15:29:22:D4:27:D8:EC
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer:       /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial:       01962DF3B8BC24A811F2C9DCF1CAE7BCF78E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
                          2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: 39B7RovH05G5w8VaB5E8lTFYgPwcP77ce6EHZmvWAZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:bc:24:a8:11:f2:c9:dc:f1:ca:e7:bc:f7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51626068942586ce95702103bac899d23fcf7242
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=badc99ba041ed3a19fdab99a81152922d427d8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:04:5a:78:b1:79:0d:61:f8:a1:30:1b:25:
                    d4:df:0a:ab:2d:aa:6d:2f:dc:88:49:26:5f:88:6b:
                    c0:80:fe:20:cb:80:b8:ba:18:dd:84:6a:52:34:f9:
                    47:12:3d:bb:5e:8a:90:2b:da:a3:13:8d:8f:2b:3c:
                    3d:08:35:ec:3e:f2:62:2e:af:bc:cf:81:ad:22:b5:
                    ac:99:d3:96:39:28:c3:1a:01:65:89:4b:7c:de:77:
                    9d:52:76:aa:9c:97:50:16:39:e2:e1:54:13:00:33:
                    3f:d0:6d:0d:5f:89:68:20:9f:73:7d:92:28:a8:43:
                    ef:dd:5e:f3:1b:6b:8c:07:f0:96:22:14:d7:e4:5a:
                    13:4b:e4:e1:9b:98:d1:ef:fb:60:90:5e:6f:b9:12:
                    e8:52:06:38:77:2f:df:30:4b:b2:de:bf:25:a7:4c:
                    68:ad:f6:01:25:ad:3a:4e:4f:b4:88:1d:87:13:05:
                    f7:e5:62:d9:35:1f:69:82:86:32:8d:d7:c9:25:85:
                    f9:20:79:6e:ff:6b:fa:c9:db:3f:f3:b8:4d:36:c1:
                    07:4f:dc:d6:b6:c7:30:31:f5:00:78:0e:63:ab:f7:
                    19:f6:a9:aa:26:22:fb:42:2b:a6:76:72:a7:8a:f0:
                    d7:af:07:2e:02:a6:17:e6:3b:55:c6:2a:65:74:d1:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:99:BA:04:1E:D3:A1:9F:DA:B9:9A:81:15:29:22:D4:27:D8:EC
            X509v3 Authority Key Identifier:
                keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:1e:c2:13:29:6c:e3:54:0b:4d:44:45:43:84:6f:3b:65:
         15:39:09:ec:9d:ba:82:7e:65:1b:ab:0e:9a:eb:64:3b:20:7f:
         63:f3:24:7a:c3:21:19:8d:69:f6:43:98:48:34:4f:f3:9c:39:
         b8:39:db:88:fd:2a:95:ea:d8:d3:44:e0:c5:68:40:56:ce:7c:
         f6:ae:9a:77:85:2d:ad:ee:33:e8:00:53:f8:fb:f9:ad:7f:df:
         e8:66:f9:5e:d7:7a:eb:84:70:b3:06:7c:82:c1:50:5d:ba:65:
         2b:cf:6a:54:d6:3c:72:5f:7e:c9:f5:f2:7a:cf:52:75:72:0e:
         59:9c:e3:90:08:eb:1a:68:78:9d:c2:67:4c:3d:d9:4d:5c:9f:
         c0:25:5b:b4:92:af:70:ce:c3:69:e0:92:e1:be:26:8b:d8:56:
         20:a4:12:0d:a2:ee:f9:ca:0f:df:50:21:3e:87:27:9d:a3:e5:
         94:cf:55:8b:96:0c:02:67:b8:66:8d:47:ba:58:97:56:7d:f4:
         3c:30:15:05:b6:8c:7a:0a:8a:ea:17:01:ba:9c:cd:15:82:21:
         c2:b8:e0:a1:04:4d:c9:b7:6e:88:80:64:6c:24:88:f1:93:48:
         b2:4f:97:cb:14:6c:3d:cb:30:ba:53:de:d9:95:3b:48:ae:48:
         e1:66:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----