Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File:                     UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier:          AkuqV7VEif/GZ7uCZpTe6OEXLAY1iiQXc/bP36mKvgU=
Subject key identifier:   BD:C6:82:2E:74:A2:C3:D1:F3:50:B0:A8:62:F6:B8:12:32:A6:D2:EB
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer:       /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial:       01962F74C1E555A53E3BF009833AC06303A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: vncEqXWfg5DrKsdKslfFgMhRMXfZQrTSt/8r1oIJ+v0=)
                          2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:e5:55:a5:3e:3b:f0:09:83:3a:c0:63:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=bdc6822e74a2c3d1f350b0a862f6b81232a6d2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:f1:ea:2e:c8:43:3e:5c:3c:a6:77:bb:98:
                    74:aa:70:4a:55:91:e6:af:58:cc:3f:21:52:2c:62:
                    51:13:dc:f6:32:ac:1c:ce:b3:6d:83:a8:f4:6e:74:
                    32:85:20:75:92:61:5a:f6:25:fc:f4:f5:3f:e1:a2:
                    bb:a2:78:e8:fb:b8:07:5b:8b:4e:07:a4:fc:22:6a:
                    9c:40:e2:74:b0:49:ed:7b:f7:6e:e4:48:8b:9c:b9:
                    89:38:45:ce:6b:e0:ac:ef:fb:0f:f4:af:4a:07:b3:
                    7d:70:43:4b:22:47:9c:4a:ed:85:97:49:5c:6f:f0:
                    ca:cf:03:dc:a4:63:71:b6:65:f0:f1:d7:20:b5:1e:
                    2b:98:25:00:d9:25:66:87:32:ab:72:37:8e:36:b9:
                    93:47:89:1c:f4:0d:bc:7f:9c:03:ae:42:31:96:a4:
                    aa:67:45:56:3c:9a:f7:94:e8:6d:be:02:2a:a4:a5:
                    d3:5b:d2:98:74:5c:70:fe:4c:d0:5d:c2:8e:35:8a:
                    76:91:11:95:00:e7:d9:aa:46:b2:6e:bf:29:4d:3a:
                    00:dc:2d:06:11:77:98:18:26:72:0d:f6:39:10:ca:
                    9d:06:12:dc:56:b8:bb:32:a6:8a:a1:a1:3b:3f:31:
                    94:69:43:1f:c7:88:2d:e8:d3:5e:2f:d9:53:4a:56:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:82:2E:74:A2:C3:D1:F3:50:B0:A8:62:F6:B8:12:32:A6:D2:EB
            X509v3 Authority Key Identifier:
                keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1a:e3:f7:56:c6:65:f0:a2:36:6b:00:30:85:72:c2:00:80:
         c7:25:c1:47:ff:89:f4:14:cb:d9:c7:b0:7d:fd:1b:7a:3b:e6:
         36:a7:9a:8f:85:72:9f:dc:45:f2:3c:c9:ed:9a:29:1a:ab:f0:
         45:16:e8:f4:a5:79:40:94:df:b8:67:8c:30:c7:f7:4d:d1:bd:
         d7:6f:59:f1:fe:e8:a7:98:75:9f:1d:ac:db:de:1d:15:e7:b0:
         1a:04:91:a1:19:a5:e3:4a:7f:0f:21:3d:6e:a4:48:fd:56:6c:
         f1:e2:c7:61:2e:cc:b9:cf:af:e8:4f:8d:31:2a:38:8c:7c:e8:
         f8:3f:97:23:e9:06:4e:30:30:55:15:8b:5f:58:b6:37:30:31:
         4e:ae:38:7f:2c:7d:67:8a:c1:da:8a:d9:b8:d6:5f:c9:fe:43:
         89:8d:2f:3e:6c:7c:a7:f3:da:c5:19:87:3b:76:f7:fe:c0:39:
         1f:53:f4:02:cd:9a:f7:12:1e:ee:cc:85:49:bf:d6:5d:9f:4d:
         0e:03:4b:5a:a8:35:3e:f2:95:fa:74:ac:05:d8:04:93:70:ed:
         f4:d3:80:0a:58:db:91:3b:a3:dd:ab:04:9c:7c:dd:46:46:55:
         9d:e3:1f:cc:bc:86:08:09:c4:b4:5d:ab:e8:be:e8:d6:3a:9b:
         90:a3:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----