Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
File:                     U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json)
Hash identifier:          WmkNiy8GvkpyHyoXh3FQ2npzBJwwbgvygD3gAwZV7uw=
Subject key identifier:   4A:24:6F:87:24:EA:AE:2E:5E:09:59:23:D2:C9:D1:2D:5C:72:D6:AB
Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
Certificate issuer:       /CN=53a8b7bca8b11d27850e918ca599669880162929
Certificate serial:       01962ECFDE866176A6768891B7434AADCB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
Manifest number:          FA
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: hfxr3vn9LYcQuydpC9CAD51/vNA+TVT18q7cbC7K4FU=)
                          2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:86:61:76:a6:76:88:91:b7:43:4a:ad:cb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=4a246f8724eaae2e5e095923d2c9d12d5c72d6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:fe:57:e7:d5:c5:28:82:5e:4f:29:d2:e3:
                    a6:c8:e3:15:6f:d7:5e:17:3d:1b:48:18:f5:65:5c:
                    5c:c2:b3:5a:9d:de:ee:08:05:b5:a0:ef:13:87:be:
                    2d:f1:68:4a:fa:61:48:65:70:05:46:c4:9a:fa:bd:
                    38:39:c8:fe:52:da:a6:c5:11:3b:a0:fa:66:b8:f6:
                    6b:d4:31:f6:ce:fe:a8:79:c2:cc:89:3e:f2:2e:4d:
                    a2:0b:6a:7d:12:f8:b0:82:39:4c:25:e6:24:ee:c8:
                    27:9f:e9:38:f0:b5:2c:af:80:cd:87:0b:58:5d:c0:
                    84:00:a5:52:43:36:9c:bf:3c:ff:c8:2c:50:93:41:
                    95:d8:17:57:bf:56:80:4e:c4:a0:ee:d5:0a:a1:4d:
                    81:ad:ba:63:be:32:2c:aa:f8:41:4c:41:f6:a2:8a:
                    35:68:a0:68:9a:63:bc:d5:71:98:59:ea:9e:db:f5:
                    b2:1a:fc:d1:cd:31:e2:80:8e:e7:c7:e6:c7:05:d9:
                    db:d8:7b:ed:2d:22:78:70:1e:21:ff:8c:ea:f2:30:
                    96:79:4a:aa:31:74:f5:8c:cf:c9:9f:f0:ec:2d:56:
                    23:fb:d5:e1:30:c5:5a:4b:6e:8a:f7:c6:0f:d5:b1:
                    4a:7c:a7:46:2a:fd:1d:f5:ac:60:e3:49:92:c9:93:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:24:6F:87:24:EA:AE:2E:5E:09:59:23:D2:C9:D1:2D:5C:72:D6:AB
            X509v3 Authority Key Identifier:
                keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:cf:69:63:c9:79:1d:29:17:8b:15:ba:d0:aa:0c:27:dc:
         c7:f5:66:84:1e:5e:7c:5b:dc:a0:4e:85:7e:b2:51:54:04:86:
         9d:a0:f3:8d:d6:02:b1:7a:8b:a8:f0:ed:2e:46:3b:f7:b5:b7:
         5f:02:b3:f2:5d:53:22:a3:5c:11:35:f5:e0:96:86:2d:2d:0a:
         d8:f6:5a:52:93:12:1f:4d:4d:8f:4c:a9:eb:05:a6:aa:d9:b0:
         11:0a:93:73:a8:63:2e:e0:ad:df:c9:c0:9a:d8:11:5f:a2:b8:
         cd:b4:68:54:16:53:4f:7c:a6:88:98:e0:5c:a9:86:01:75:aa:
         0c:67:9a:da:ec:34:9c:f1:03:a1:f3:6f:f4:6c:1f:75:d5:68:
         59:24:db:f4:8a:5c:ae:28:a0:02:64:3d:e3:18:c0:47:b4:b6:
         c5:3a:82:c8:8f:ec:35:35:ae:16:28:6c:ca:9b:62:9a:9a:af:
         8d:9f:4c:ea:83:00:32:25:1c:6c:67:7d:2d:44:bf:d5:28:f5:
         75:c7:3a:6f:1c:49:c5:0f:b5:eb:b1:c1:a1:47:13:35:e4:8a:
         17:66:c1:b3:20:0f:c5:7a:74:8d:45:7e:b1:c0:b1:c4:78:76:
         93:87:66:b6:b3:a0:0e:ce:80:d5:8b:d0:88:fe:5e:eb:c7:27:
         0d:08:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----