Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
File:                     UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft (raw, json)
Hash identifier:          uqanfIPcHfYvHPMFB31D2/AwQzH7aglPpTvZvcWXSs8=
Subject key identifier:   8D:B2:CC:B8:CF:09:27:44:E7:13:4B:0D:F7:8B:AE:04:98:32:2B:D4
Authority key identifier: 52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
Certificate issuer:       /CN=52a65c628483a756688bb158c28ab7c0d47de27c
Certificate serial:       01962F0689B9AEAF5F7E7FFA682C7AB18A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
Manifest number:          02BC
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl (hash: 32lE30VJxTSCaaasH/EUpzY4u/XUyayfyfcuFZ/q5hI=)
                          2: tqDHXiS7i5dxh3CeCoDJkGQqezg.roa (hash: l6w/oRDzimMT8gSmQ7FtqRNlVcpqgstHkEfCIU2SJhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:89:b9:ae:af:5f:7e:7f:fa:68:2c:7a:b1:8a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a65c628483a756688bb158c28ab7c0d47de27c
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=8db2ccb8cf092744e7134b0df78bae0498322bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:63:df:22:65:76:75:97:cd:b8:b8:53:34:
                    1e:09:37:29:72:ed:5d:cf:c4:f6:a4:8c:25:d8:70:
                    0b:45:6a:b1:af:fa:45:bf:c3:e1:2c:13:f3:cb:4e:
                    18:e4:08:67:16:59:3f:cf:40:61:dc:4f:66:95:58:
                    60:36:96:b0:e5:1a:d4:27:11:43:ce:87:b2:47:c4:
                    05:16:16:0a:ce:c1:00:96:ff:10:c3:f2:2a:20:2f:
                    b7:f7:e7:80:83:af:43:0b:92:cf:bf:d1:3c:76:cc:
                    1a:4e:83:4a:70:6d:d3:0e:bb:ec:2f:0a:f4:eb:3c:
                    23:88:e2:49:68:8a:68:3c:55:2d:e7:4f:37:52:e5:
                    85:96:e5:81:c3:9a:7a:01:2b:d9:ef:c6:87:23:fc:
                    31:e4:a7:14:a5:c0:03:f6:ed:ea:1b:83:9c:8f:d9:
                    f3:fa:3c:17:bf:5a:c8:a4:6c:be:76:57:86:0e:29:
                    6e:47:e8:d6:8a:69:4e:4b:f2:96:99:06:43:8c:83:
                    7a:9d:18:8f:34:cf:09:ec:62:09:ef:bb:6a:98:ad:
                    fa:0c:2c:00:ac:2e:84:ed:df:20:6e:78:7a:a6:aa:
                    df:40:c1:c2:9e:03:48:63:74:66:c9:a2:15:53:ac:
                    f8:4e:cf:9f:60:cf:0b:d0:c8:72:9c:1b:fd:31:d0:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B2:CC:B8:CF:09:27:44:E7:13:4B:0D:F7:8B:AE:04:98:32:2B:D4
            X509v3 Authority Key Identifier:
                keyid:52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b2:f8:9a:3c:a3:ce:94:62:0a:13:34:8f:b1:a2:0c:df:b8:
         fe:81:f6:d3:b2:46:8a:4c:6f:14:2b:fc:ce:cd:4d:f9:87:93:
         02:c9:2f:e6:3c:29:27:75:a5:ec:7d:71:45:ad:c8:f9:e1:83:
         6c:bd:8c:ea:44:be:a7:8c:b5:46:37:68:3a:03:46:d2:47:c0:
         aa:73:2b:3e:75:64:2a:5d:4a:90:01:5e:3e:a8:f0:57:8b:7b:
         ac:f5:bd:68:ae:9c:ce:fc:fd:9e:3a:85:ff:d7:52:aa:c8:ab:
         ad:6c:e1:5b:58:70:c3:f7:ab:7a:25:fd:72:30:58:e1:4d:fd:
         39:8a:c5:c8:41:a2:b6:7d:19:1e:25:29:c9:be:ce:14:fb:31:
         55:b8:f4:fb:e0:07:6b:6e:b5:10:3c:17:8a:33:ef:be:7d:2d:
         da:99:1e:e7:ca:84:2d:95:5c:46:a8:93:a2:83:bd:c7:36:dd:
         64:49:9f:70:f5:10:0d:c9:98:af:df:eb:c5:72:3f:9a:11:70:
         a9:3f:57:63:33:7d:31:2f:81:95:58:10:21:89:c9:9e:90:18:
         96:c5:32:38:eb:1d:f0:cb:12:4e:69:40:e2:e4:35:26:fa:d7:
         94:9a:57:ec:bc:c6:e9:7f:9a:d1:84:b4:51:87:4b:29:9f:76:
         8b:57:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----