Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File:                     UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier:          L9vf6e6aOYU7k21OX/QUnlFpRuAyB+ohY+WkOESNAH8=
Subject key identifier:   22:7D:CB:6B:82:EF:83:22:CF:68:9A:F0:2E:23:40:B8:E5:72:CE:B8
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       01962E61C645086367536BAF18695A45129B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number:          0DEE
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=)
                          2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: zIIgrSypL6rUjTKX+KSx/RG7ecRRjYAtLd2puwHyC5A=)
                          3: jCClE4UcGhBO2O17hYmlu4VMdbE.roa (hash: xUf30JSF1caq3EkHup8JJIOwj8vWi588sMeLSXGvQtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:45:08:63:67:53:6b:af:18:69:5a:45:12:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=227dcb6b82ef8322cf689af02e2340b8e572ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:84:18:04:2c:3d:c0:ec:d0:4c:4a:06:a1:
                    31:ae:74:89:6d:ca:73:4d:93:14:0f:a3:29:a9:a7:
                    04:19:8e:83:18:56:d2:de:cc:39:3f:d9:05:15:8c:
                    25:77:e3:df:f5:55:08:3d:72:9d:eb:10:99:e7:d9:
                    8c:99:d8:cb:cd:ee:0c:f1:b5:e7:74:38:18:dd:a9:
                    be:90:81:90:40:b8:04:f7:dd:a5:13:78:70:b2:52:
                    68:c8:3f:09:fc:78:be:8d:6b:a7:6e:96:d5:f2:52:
                    12:6c:61:dc:f8:37:2c:f5:5e:b9:2f:38:e6:31:0c:
                    9c:86:66:bb:61:b3:18:e5:9a:1c:25:70:04:e2:d4:
                    05:e4:94:88:1a:fe:f0:d3:ed:33:39:69:0d:bb:3d:
                    7e:18:fc:64:a1:75:cf:8b:51:07:4a:c2:59:50:95:
                    18:63:37:8d:25:15:31:1a:c0:f7:e7:63:c4:c2:c2:
                    04:13:28:77:1d:5d:5b:77:6a:1b:1f:d4:aa:97:d6:
                    5e:e2:c4:44:c7:5b:3a:67:6e:0c:2c:b0:fd:0e:f7:
                    a6:52:36:b2:dc:29:f1:90:09:33:a3:ef:8d:16:b0:
                    f9:9b:66:3c:63:e7:e9:d6:45:cf:96:48:c2:19:f3:
                    be:c6:f4:3f:f9:89:9a:49:ed:9f:f1:6a:1e:57:77:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7D:CB:6B:82:EF:83:22:CF:68:9A:F0:2E:23:40:B8:E5:72:CE:B8
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:26:24:48:ff:5c:a6:ff:da:88:c2:4d:54:cb:c1:f0:41:
         16:ab:9c:1d:d8:7c:a0:29:e1:d1:5f:0a:33:ad:6d:9e:02:48:
         57:b1:17:5c:45:ba:f4:89:98:0b:0a:ac:14:bd:09:f6:36:e7:
         93:6c:ae:91:89:16:4e:5e:a4:fe:49:e5:58:31:48:82:1a:d8:
         25:95:05:91:6f:de:68:db:25:43:5b:af:39:81:91:fd:5e:89:
         60:1b:03:a4:67:9d:74:8f:88:2d:a2:ea:c8:06:26:01:65:55:
         7b:1f:a5:8d:e8:6c:9c:f6:e3:b9:d4:6d:ca:69:b7:bb:d9:6a:
         32:33:ff:8c:12:59:31:0b:e8:b9:a9:28:f7:db:75:a8:18:b4:
         7f:93:f0:59:cd:9e:ac:b7:6f:58:9e:1b:00:db:6a:48:69:49:
         bc:12:51:d6:90:6e:6f:f5:6d:b2:10:16:8b:9e:84:d4:3a:a2:
         b7:f2:4d:49:b0:60:2b:b2:a5:37:2e:91:c6:f8:9d:25:18:12:
         6a:e7:da:05:59:47:1b:1b:25:a7:05:95:c8:c0:29:ad:30:a5:
         c5:d6:b0:e1:34:e5:22:76:fd:2e:59:b2:cf:fa:63:82:21:83:
         c2:38:89:7c:52:4a:d8:f6:65:1b:f0:4e:31:51:b4:11:3e:7d:
         e4:73:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----