Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File:                     UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier:          /eCaGZ9X0rYNr95tAEQAP+nUR3Pd2XzM+R27JVAfM9w=
Subject key identifier:   1D:3E:A2:99:4E:4C:E9:76:E9:C9:CD:D0:14:08:8E:0A:F7:C0:56:CD
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer:       /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial:       01962F3D88F057C54A71073418AD0EA60950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
                          2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: 8mIT+/bHn9wShekX+I/eaLrdD5O1wpO+WKLDGfxLeMU=)
                          3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:f0:57:c5:4a:71:07:34:18:ad:0e:a6:09:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=1d3ea2994e4ce976e9c9cdd014088e0af7c056cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:91:32:df:d7:d6:c0:77:0f:7f:18:56:5e:
                    be:b9:1d:33:ca:04:89:88:e1:bf:38:78:e0:6f:13:
                    94:00:7c:41:51:04:76:49:d0:f2:19:5f:24:df:c0:
                    c8:e1:a4:ed:dd:8a:48:ed:a7:0a:20:78:d9:32:5b:
                    0c:37:e2:ed:24:2e:2c:2f:38:77:b2:01:c2:57:3e:
                    4d:b3:67:e0:ab:a6:ca:79:94:22:5f:a5:1a:8d:9b:
                    ff:e7:57:94:da:93:76:76:cd:d1:c2:f7:33:f7:49:
                    03:4f:93:c5:f1:53:f5:4e:eb:dc:ef:4c:50:b3:f5:
                    83:d9:a6:59:22:f4:17:46:3f:da:33:6b:bf:59:9f:
                    02:a1:ee:3c:d8:d6:06:4c:56:af:6b:b0:bb:36:c2:
                    16:01:c3:2c:6f:86:b0:5d:9f:b8:f7:e1:1a:ee:89:
                    ac:7e:a5:d7:20:c2:10:e9:a3:91:95:fa:1e:e9:a3:
                    ff:e3:33:62:5e:70:76:0d:bb:f1:cc:ce:51:65:44:
                    54:e1:3b:ac:bd:a9:4f:eb:b8:3f:1b:54:16:21:30:
                    a0:2a:ab:f1:56:a6:2a:fc:17:02:29:5d:eb:0e:23:
                    6a:51:64:6a:a2:6a:7f:65:2a:17:fc:bc:12:ca:09:
                    0b:2d:f1:ed:86:28:fb:ce:f4:2d:c4:a8:7a:dc:34:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:A2:99:4E:4C:E9:76:E9:C9:CD:D0:14:08:8E:0A:F7:C0:56:CD
            X509v3 Authority Key Identifier:
                keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:9d:d8:eb:33:2c:1b:8f:1d:8e:fb:54:4d:c7:ed:c7:36:
         db:63:ea:a6:6f:1e:12:a6:b3:27:7d:3e:b2:cd:8e:ab:f7:32:
         17:69:18:cb:7a:8a:c3:51:fd:7d:4d:71:05:61:a8:e8:22:81:
         b5:ad:b8:b6:05:19:5a:50:ca:d1:3b:f8:90:6a:38:11:38:bc:
         dc:a1:d8:81:fd:67:3b:72:08:8b:56:6e:f5:82:d9:2e:b3:3b:
         6a:0e:fd:e9:18:88:a5:83:87:d4:a2:f4:bc:25:2c:cf:5d:85:
         35:b3:ac:ba:94:3e:c6:aa:1f:96:b7:e9:99:cd:5f:61:ae:6b:
         16:8d:f9:2e:3c:cd:95:ac:8e:ea:e6:b1:0f:19:a5:df:68:1f:
         5b:0a:1f:08:54:62:f9:21:69:4a:4c:64:90:d7:58:85:d4:a3:
         db:31:68:35:26:c3:d6:65:97:43:c0:4f:df:83:ae:ef:44:36:
         16:ac:d3:2c:70:6e:e8:8e:a4:6b:8a:c3:db:10:49:75:b4:62:
         d9:94:5a:c4:84:c0:22:0a:f6:24:34:23:64:8c:bd:5a:20:73:
         0e:94:93:dc:69:fd:54:c6:71:39:d7:36:bf:96:6a:98:77:11:
         1b:25:47:8c:95:0f:11:8f:15:46:50:d6:fc:71:25:11:f7:93:
         d3:0d:8b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYjwV8VKcQc0GK0OpglQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4
YWU4MGYwHhcNMjUwNDEzMTMwMTIzWhcNMjUwNDE0MTMwMTIzWjAzMTEwLwYDVQQD
EygxZDNlYTI5OTRlNGNlOTc2ZTljOWNkZDAxNDA4OGUwYWY3YzA1NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhiRMt/X1sB3D38YVl6+uR0zygSJ
iOG/OHjgbxOUAHxBUQR2SdDyGV8k38DI4aTt3YpI7acKIHjZMlsMN+LtJC4sLzh3
sgHCVz5Ns2fgq6bKeZQiX6UajZv/51eU2pN2ds3Rwvcz90kDT5PF8VP1Tuvc70xQ
s/WD2aZZIvQXRj/aM2u/WZ8Coe482NYGTFava7C7NsIWAcMsb4awXZ+49+Ea7oms
fqXXIMIQ6aORlfoe6aP/4zNiXnB2DbvxzM5RZURU4TusvalP67g/G1QWITCgKqvx
VqYq/BcCKV3rDiNqUWRqomp/ZSoX/LwSygkLLfHthij7zvQtxKh63DT3iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0+oplOTOl26cnN0BQIjgr3wFbNMB8GA1UdIwQY
MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt
NzliM2RiNjU5ZGZjLzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj
LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9qd2Osz
LBuPHY77VE3H7cc222Pqpm8eEqazJ30+ss2Oq/cyF2kYy3qKw1H9fU1xBWGo6CKB
ta24tgUZWlDK0Tv4kGo4ETi83KHYgf1nO3IIi1Zu9YLZLrM7ag796RiIpYOH1KL0
vCUsz12FNbOsupQ+xqoflrfpmc1fYa5rFo35LjzNlayO6uaxDxml32gfWwofCFRi
+SFpSkxkkNdYhdSj2zFoNSbD1mWXQ8BP34Ou70Q2FqzTLHBu6I6ka4rD2xBJdbRi
2ZRaxITAIgr2JDQjZIy9WiBzDpST3Gn9VMZxOdc2v5ZqmHcRGyVHjJUPEY8VRlDW
/HElEfeT0w2LeQ==
-----END CERTIFICATE-----