Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File:                     UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier:          JzB9MXy965AWCGoqgQhIJGLPH8Fg6UNkyO+dtqp7Mmg=
Subject key identifier:   F1:E4:26:5A:95:78:12:BA:92:B6:E8:BC:FE:2B:58:EC:00:3B:5B:77
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer:       /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial:       01962E9946262FE3BAAE82A918747A8669DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: IQxFZJYH4Zjb9fcW/nhrBZ/3KmPsQIAr0QWqSM8o0BY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:26:2f:e3:ba:ae:82:a9:18:74:7a:86:69:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=f1e4265a957812ba92b6e8bcfe2b58ec003b5b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:99:94:2c:4e:a2:cc:24:54:50:0e:8e:e4:
                    09:f7:8a:94:64:25:c2:55:6c:9e:de:f2:df:2f:79:
                    dd:66:c8:90:c8:a3:c8:cc:51:6e:89:5a:2d:49:5b:
                    cd:87:b7:7a:5c:24:0c:6a:00:d9:1b:6e:e1:8e:b1:
                    b9:11:0b:d3:b2:a9:00:e8:ba:14:5f:98:34:22:b4:
                    a5:d0:ed:20:bd:61:56:b9:c6:85:f2:4a:9b:cc:97:
                    bf:88:04:86:c5:e0:08:c4:ae:7d:94:72:a0:7f:28:
                    75:46:a4:d1:2b:65:ae:33:1e:c0:5e:aa:33:1d:3c:
                    80:14:05:96:5e:41:71:9d:72:52:60:55:d9:ba:69:
                    cd:43:53:30:71:b2:cd:92:88:61:27:57:94:ee:8c:
                    95:d7:d4:6e:bb:e8:e7:57:7b:65:e0:7d:5d:81:c0:
                    5d:37:b3:4c:bd:e7:2c:34:00:3e:88:82:d7:fe:1f:
                    6a:3c:58:4c:26:8d:2a:62:aa:87:23:d5:45:e0:3e:
                    02:8e:1d:23:61:11:60:eb:1a:22:a9:49:5f:20:7c:
                    3b:4c:67:cf:a3:39:09:b1:4b:c1:dc:b4:be:2c:2b:
                    b1:ae:83:ad:a8:05:cc:50:e9:bd:ae:3c:a7:a6:48:
                    f7:5e:fd:64:91:08:20:90:06:d0:59:fa:5a:52:c6:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E4:26:5A:95:78:12:BA:92:B6:E8:BC:FE:2B:58:EC:00:3B:5B:77
            X509v3 Authority Key Identifier:
                keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:62:22:c6:74:1e:6d:4e:9a:04:d1:31:6e:41:76:bc:c3:
         98:02:f0:8f:e8:4c:31:99:2f:ba:45:8b:83:49:dc:dd:86:29:
         2d:93:e8:e1:b5:88:3c:3f:83:ef:75:31:c2:f4:39:a7:d8:e1:
         49:12:20:31:ac:76:cb:1b:ba:26:6b:df:ed:73:7b:4e:d6:04:
         97:b0:2d:e2:33:51:ec:f6:21:0a:73:86:0f:2b:85:ee:e9:64:
         24:61:3e:6a:7d:81:5b:71:0a:38:2b:cc:5c:96:9b:fa:3a:71:
         c4:d5:8b:f0:42:29:3a:39:87:f4:7e:6f:f4:c5:b1:1c:4e:06:
         ff:8f:5d:60:10:97:89:92:d8:b7:47:88:29:bd:31:63:2d:bb:
         39:6e:8b:52:98:61:0b:6d:b1:f4:ec:13:ad:7d:89:28:ea:07:
         65:b3:90:36:77:81:a8:5c:41:d5:0a:98:0c:9f:07:36:6c:0d:
         c2:c6:a1:ef:58:35:c7:f2:aa:09:2b:37:49:2c:0e:9b:11:e7:
         a1:02:88:e7:e4:30:18:98:1c:0a:66:d9:90:89:f4:0a:63:18:
         68:bc:52:3d:a9:85:30:0b:61:47:93:9b:e7:0a:e4:5a:89:ea:
         b9:b2:e9:25:f4:9d:81:ad:fd:8e:5c:3a:41:97:ab:f2:46:7d:
         e7:e3:76:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUYmL+O6roKpGHR6hmncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOTg1NjdhMDM5ZTVjY2UyM2VlOTM3NDA5NmVlZDU3YmJi
YTI5OGUwHhcNMjUwNDEzMTAwMTU4WhcNMjUwNDE0MTAwMTU4WjAzMTEwLwYDVQQD
EyhmMWU0MjY1YTk1NzgxMmJhOTJiNmU4YmNmZTJiNThlYzAwM2I1Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KZlCxOoswkVFAOjuQJ94qUZCXC
VWye3vLfL3ndZsiQyKPIzFFuiVotSVvNh7d6XCQMagDZG27hjrG5EQvTsqkA6LoU
X5g0IrSl0O0gvWFWucaF8kqbzJe/iASGxeAIxK59lHKgfyh1RqTRK2WuMx7AXqoz
HTyAFAWWXkFxnXJSYFXZumnNQ1MwcbLNkohhJ1eU7oyV19Ruu+jnV3tl4H1dgcBd
N7NMvecsNAA+iILX/h9qPFhMJo0qYqqHI9VF4D4Cjh0jYRFg6xoiqUlfIHw7TGfP
ozkJsUvB3LS+LCuxroOtqAXMUOm9rjynpkj3Xv1kkQggkAbQWfpaUsaVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHkJlqVeBK6krbovP4rWOwAO1t3MB8GA1UdIwQY
MBaAFFGYVnoDnlzOI+6TdAlu7Ve7uimOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQt
ODhhYTgxNDg2NzgzLzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82Njc5YTktMDkzZi00YmMzLWEzZDQtODhhYTgxNDg2Nzgz
LzEvVVpoV2VnT2VYTTRqN3BOMENXN3RWN3U2S1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgBiIsZ0
Hm1OmgTRMW5BdrzDmALwj+hMMZkvukWLg0nc3YYpLZPo4bWIPD+D73UxwvQ5p9jh
SRIgMax2yxu6Jmvf7XN7TtYEl7At4jNR7PYhCnOGDyuF7ulkJGE+an2BW3EKOCvM
XJab+jpxxNWL8EIpOjmH9H5v9MWxHE4G/49dYBCXiZLYt0eIKb0xYy27OW6LUphh
C22x9OwTrX2JKOoHZbOQNneBqFxB1QqYDJ8HNmwNwsah71g1x/KqCSs3SSwOmxHn
oQKI5+QwGJgcCmbZkIn0CmMYaLxSPamFMAthR5Ob5wrkWonqubLpJfSdga39jlw6
QZer8kZ95+N2mQ==
-----END CERTIFICATE-----