Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File:                     UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier:          7CKoKetrswwyCTtHYq0QECsnlMiVXPyURIgPOh1FsCw=
Subject key identifier:   AD:26:A1:F2:D6:46:20:0E:B3:6C:30:03:20:74:87:B5:CB:AA:1A:0F
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer:       /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial:       01962E2AC25C88BA96C8402AFDFD95DECD4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number:          0CF1
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: KNIpt2o/lVQtqFuL6Y5zR/P5f59CU5UhHT7wFu/Hr9I=)
                          2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c2:5c:88:ba:96:c8:40:2a:fd:fd:95:de:cd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=ad26a1f2d646200eb36c3003207487b5cbaa1a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:17:49:35:5c:40:1a:00:76:fa:b0:14:9e:
                    b5:22:70:96:cc:6f:f2:6e:0b:25:e4:55:fe:b8:d6:
                    f2:02:a8:2b:fa:fd:1b:eb:af:5b:21:24:3d:37:98:
                    35:fb:a5:30:d7:d2:62:87:b1:f2:a1:1c:30:3c:c7:
                    b1:ad:ce:10:a8:b2:86:32:1d:79:eb:d7:da:93:d1:
                    2c:6b:7b:39:60:09:8c:73:45:be:58:30:4e:ac:31:
                    6f:e8:67:dd:66:d8:01:a5:13:36:90:e5:95:8e:84:
                    d7:17:a9:35:bf:6e:40:16:c4:97:e4:8d:48:a6:ba:
                    c7:79:4d:dc:57:2d:de:d4:55:e3:17:77:c4:73:90:
                    8a:ad:06:e6:17:dd:49:28:74:af:aa:60:0e:ec:5f:
                    ba:02:70:e2:f3:2f:d2:33:c9:e0:05:3c:24:5a:b8:
                    0e:b9:7d:2c:be:3c:48:9c:09:74:cd:71:d1:c4:7b:
                    b4:9a:f8:aa:a8:43:dc:30:66:8e:5d:aa:bc:5a:7b:
                    2c:9e:42:44:8b:2c:a1:fc:a2:0e:47:af:8b:51:54:
                    ed:05:27:e7:a6:25:4c:de:41:0b:6b:da:3f:c5:70:
                    eb:b3:74:f4:8e:a2:7c:a6:12:f9:f8:f5:ed:49:a5:
                    89:c8:67:37:85:3f:a7:c5:fd:58:7c:98:d1:8e:1e:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:26:A1:F2:D6:46:20:0E:B3:6C:30:03:20:74:87:B5:CB:AA:1A:0F
            X509v3 Authority Key Identifier:
                keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bd:74:74:1b:8e:be:f1:ef:e7:db:c2:b3:47:b1:84:a9:bc:
         8f:c8:a6:a5:a1:2a:36:81:71:80:62:ef:8d:b4:3b:af:94:fb:
         5e:13:0e:c4:9b:a6:e6:7f:99:b1:bf:68:2c:ac:17:a2:60:55:
         49:d0:50:7a:e9:72:61:b7:74:2d:b5:14:a9:78:5d:62:6b:da:
         7f:32:03:96:2d:c4:92:86:6b:bd:4b:05:2b:39:f6:35:b4:e2:
         da:24:8e:d6:95:ea:79:fe:90:bb:e2:f6:59:88:18:8f:11:f9:
         98:19:8f:1d:70:3d:21:93:bd:c8:87:2f:34:8c:0e:b5:e9:e3:
         6d:8c:84:6f:41:7d:c7:a8:f1:1d:d6:72:ad:42:d1:7a:4c:54:
         e5:8d:78:13:42:e7:75:52:bd:72:fa:67:90:d2:73:e9:6e:5b:
         71:89:7f:77:9d:3b:0e:8a:47:ff:f1:c8:93:bd:80:3d:08:9f:
         30:c9:09:23:b2:2a:f0:68:ac:e5:d0:4f:8e:b3:d8:c4:ba:6a:
         43:01:5c:58:84:45:2e:8e:eb:7a:7c:c1:db:6b:03:fb:6f:8d:
         de:7c:98:a3:b9:3d:ca:cf:ce:ff:d8:a1:f1:ff:2f:ea:0b:bc:
         8b:4b:cc:b0:0a:86:8e:2f:da:cf:6d:50:37:a3:33:ee:12:ba:
         a1:09:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----