Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File:                     RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier:          1yEQ4M+hG5RTFXyU+lrVchO6PBOVTYCCS6wzFU0Qrw4=
Subject key identifier:   51:E7:33:12:B1:2A:53:B0:28:6F:8F:55:3A:99:4D:F0:45:62:B4:4C
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer:       /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial:       01962FAB4A8C52DA1ECEF2EAEAAD4C91343C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number:          0F72
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
                          2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
                          3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: ltQL9ZSrkv55eG4YSo3AFJG1eXgbN9zgc3fZp50IQb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4a:8c:52:da:1e:ce:f2:ea:ea:ad:4c:91:34:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=51e73312b12a53b0286f8f553a994df04562b44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:d1:26:bd:3d:88:b4:d4:99:63:55:48:54:
                    e3:5a:11:74:16:91:26:4f:70:46:bb:99:5a:03:ea:
                    8c:85:a5:4e:95:1f:04:6b:b0:57:0b:85:26:22:ec:
                    1a:0f:d0:47:48:f5:6b:fa:81:ea:51:83:8c:40:51:
                    74:ce:26:ab:62:35:49:11:c9:de:f1:19:99:4f:87:
                    40:1e:be:f8:eb:67:7e:3c:7b:9c:06:5f:df:f6:aa:
                    7f:a2:ba:94:a5:f8:4d:47:ba:73:a3:6d:66:98:35:
                    2e:52:7d:1e:d6:a9:d9:c1:65:f5:f3:34:9f:ba:81:
                    2e:7e:93:2c:88:e9:cd:cc:b1:f7:bb:02:e5:85:18:
                    f6:76:04:0f:1c:28:96:b0:e8:85:cc:d2:24:35:10:
                    4d:49:89:be:98:a9:f7:fa:13:37:1d:f8:7c:86:47:
                    c2:d2:3e:ab:76:8a:d0:b5:a9:51:9e:fa:75:d4:c6:
                    d4:a2:6e:87:fd:99:77:ce:bb:93:ef:dc:c3:44:2e:
                    d6:7f:16:ad:0f:0f:71:53:dd:15:92:68:cf:e3:73:
                    06:cc:57:b9:9b:0f:63:36:5e:64:6c:a7:e1:4e:d8:
                    87:66:32:54:30:3a:6d:fa:8c:f9:55:16:93:eb:9b:
                    cc:e4:e7:7f:67:12:69:d3:fd:69:a7:d0:d7:9a:e3:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:33:12:B1:2A:53:B0:28:6F:8F:55:3A:99:4D:F0:45:62:B4:4C
            X509v3 Authority Key Identifier:
                keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:56:50:c5:c6:17:aa:4d:1d:b1:c5:ff:cc:81:a8:38:dc:
         ee:e0:75:75:05:12:8a:27:f5:ec:a4:29:40:94:34:e0:d9:15:
         a2:1c:78:11:46:05:ea:f9:55:15:ce:fb:af:4d:c0:aa:13:5e:
         8d:90:4f:4d:10:9a:f0:a2:be:57:f9:6b:00:88:10:88:18:58:
         08:25:a0:93:6f:eb:10:71:bf:91:0e:a4:e5:25:b2:19:e4:07:
         5d:06:23:71:47:7e:23:86:77:e1:b5:d4:33:0d:16:1d:d0:b3:
         1c:71:26:be:26:d4:55:84:f4:bc:61:15:6e:d7:55:0a:7c:79:
         88:da:6a:7e:a1:2e:3c:62:30:b8:0c:56:d1:b7:e4:c7:bc:b4:
         39:83:46:6c:1f:6a:7d:08:8d:a8:a2:1e:a0:c2:a9:dd:80:b2:
         c5:7e:f8:78:11:17:a0:8d:d1:51:d8:f9:f4:9a:71:c5:a3:d6:
         3c:42:f8:f8:c3:77:cf:8d:65:69:86:56:7b:91:b3:57:42:ae:
         e3:5e:d9:6b:00:87:7f:95:be:77:f0:e5:a1:d4:cb:a1:69:41:
         5b:9a:cf:3e:5b:da:1e:cf:54:c4:89:ad:7e:35:9b:25:32:4a:
         6b:39:7b:aa:a9:60:87:c6:12:e7:bc:99:24:af:14:cf:98:80:
         a2:03:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----