Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File:                     UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier:          ljpsnLCe/DVkmzcJcgjzfbqLYVKVHeMnS+Q1iuiOuYY=
Subject key identifier:   FA:66:C4:3F:2C:78:79:D0:33:21:F7:27:8B:15:EB:E2:6E:E7:AD:65
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       01962F0702133CDFD04BFEF9DEDAA2D5A271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 3BGSsazfJf8DV-j0E3wTBcOWujk.roa (hash: PB1pHmSm/Egpw9UdFofIpc3WMt/5B941IfxXaR4CROY=)
                          2: DFgAMB_c4WeZyOx-eglKZBMeXuM.roa (hash: X7EnRSIwEjRtkMbUxZKI4C9GzuFGjpE6JJQKft4XunM=)
                          3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: icz+dE/UkP4lyqUBZKWNyxQm8HQxrk+L4W6BORnugbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:13:3c:df:d0:4b:fe:f9:de:da:a2:d5:a2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=fa66c43f2c7879d03321f7278b15ebe26ee7ad65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:40:f5:a3:a1:f0:56:b1:d6:88:59:60:f5:
                    bd:33:6d:51:8a:5e:6c:d7:1f:ba:c2:06:cc:65:f6:
                    0f:db:5e:2c:2a:08:2e:5a:83:5e:fd:62:7e:f7:5a:
                    e7:2f:bb:04:ff:e4:52:92:17:9f:45:23:a4:12:53:
                    f1:05:ba:c1:f6:0f:7a:db:02:40:8b:e6:c2:ea:b9:
                    44:16:65:34:22:8d:01:38:e7:05:e9:57:d6:dc:8e:
                    36:82:04:60:f8:2d:9b:80:db:d6:09:20:58:2c:dd:
                    36:62:49:e8:46:73:85:0d:8d:b1:22:38:f4:79:76:
                    c3:24:36:aa:e2:12:58:99:3b:79:2f:ee:b6:40:9d:
                    39:0c:0e:94:9b:1f:a9:44:d7:d9:14:f2:ec:8e:fc:
                    3a:86:48:14:cc:1c:ca:1e:2f:41:e7:18:a5:92:e7:
                    6e:6f:bf:51:ad:53:b0:13:d2:31:eb:44:75:24:ee:
                    f4:fc:20:b4:5e:9c:f2:1b:82:62:2f:99:00:34:9e:
                    26:bb:0f:2a:c5:10:3f:b5:db:fa:35:85:64:c6:02:
                    f6:c0:2f:78:be:34:e1:9b:59:2a:e2:d0:5b:83:e4:
                    c8:30:25:4f:be:16:bf:7f:b7:d8:e2:5d:4c:19:bd:
                    b6:f2:0a:94:48:7b:88:ed:1d:32:a4:54:96:85:cd:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:C4:3F:2C:78:79:D0:33:21:F7:27:8B:15:EB:E2:6E:E7:AD:65
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:44:79:31:c3:43:6d:90:d4:71:2a:2c:f0:2b:e5:1e:cd:
         85:4c:b9:8e:9f:50:31:20:67:24:67:e2:23:fc:31:c7:e5:f0:
         5c:10:54:d9:76:68:fc:4e:65:af:37:35:08:f9:99:27:9f:47:
         d7:c1:93:9e:68:4a:14:e7:7c:8c:42:69:30:e0:b7:71:5b:70:
         5a:5c:2b:f1:34:3a:a1:31:7d:e7:55:27:48:c1:ce:01:b9:96:
         4f:38:86:7a:79:0c:c0:95:8b:eb:63:1e:dd:0f:90:60:d6:ad:
         f3:a8:fa:f7:b0:e3:3b:ed:d6:13:26:bf:b3:69:43:52:32:cc:
         25:ff:79:bc:65:62:02:90:be:f8:ef:83:0b:c1:3e:6e:ff:31:
         05:6a:e8:68:b1:80:66:58:65:b6:8c:21:a5:df:40:48:e0:0d:
         5a:10:f0:0e:59:aa:a1:5e:4b:46:56:ef:f0:93:60:0a:aa:59:
         64:35:09:1b:c9:74:b8:fe:30:3c:a8:91:87:2d:7d:54:13:be:
         d6:ff:6b:3e:68:9b:59:59:0f:e8:23:5c:b5:29:0d:e6:0f:fa:
         e6:bd:0f:3f:b2:bd:2c:e8:6e:3e:9d:5c:53:b8:7f:b4:ca:e5:
         a3:c4:7a:ac:be:5d:b5:df:62:95:41:a5:b4:1c:3c:25:a2:25:
         87:a5:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----