Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File:                     UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier:          WlQCyTrda3nrP6zVzKu5wyOgsaDcAQmbDQDI50OoB7o=
Subject key identifier:   CA:EC:98:C2:81:1E:AF:5D:D9:58:82:73:79:2D:63:AD:96:9A:91:1C
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer:       /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial:       01962E61FC6907EF510199CC9E17F725A2DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: ktwzIyF3yZU3dRw+rQ4zOksDiWjcivLD9+Qw9jIlu7w=)
                          2: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fc:69:07:ef:51:01:99:cc:9e:17:f7:25:a2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=caec98c2811eaf5dd9588273792d63ad969a911c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:fa:4f:19:c6:b9:ca:15:f0:ce:c1:8b:4e:
                    40:53:45:68:35:16:a2:6b:23:56:45:a2:1a:28:bd:
                    2b:40:da:32:49:3a:5d:37:6d:c9:7b:78:fe:e0:16:
                    ae:66:c3:9e:a6:5e:fb:80:9d:b3:d8:06:e2:12:6d:
                    57:de:9d:d7:d2:c4:c6:17:56:4a:12:00:f9:cb:d0:
                    3f:47:61:c6:6d:83:47:b4:41:74:ca:59:1b:f6:db:
                    18:9b:b9:11:38:c6:14:13:12:fb:94:7d:8c:e4:c7:
                    19:ae:b6:2b:f0:67:b5:e2:e5:e2:fc:b1:64:b2:31:
                    39:77:1d:33:d7:3a:12:ef:29:97:07:d7:19:70:f0:
                    29:34:43:27:57:86:9d:74:e0:26:ee:0e:4e:35:af:
                    05:32:42:16:62:e2:26:23:e1:d8:02:2b:cd:99:dd:
                    dd:54:51:09:7b:4a:f3:0e:51:4e:41:10:ff:68:60:
                    68:3c:c4:9e:02:88:f5:9d:00:8c:25:36:28:01:d0:
                    69:59:b8:09:25:22:c7:e3:df:5e:64:8c:77:52:69:
                    58:77:35:c9:a3:49:a0:1a:1c:21:55:95:9f:09:7b:
                    18:21:28:b1:02:93:94:72:fd:0d:65:94:6e:1d:56:
                    cb:16:95:42:a1:c9:22:46:1c:b8:bc:f4:d6:0b:04:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EC:98:C2:81:1E:AF:5D:D9:58:82:73:79:2D:63:AD:96:9A:91:1C
            X509v3 Authority Key Identifier:
                keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:09:06:5b:85:c2:c3:14:13:71:59:f6:af:ab:b9:36:96:
         c4:1f:31:52:35:71:a7:72:b1:ea:28:cd:f2:4b:22:23:65:22:
         89:3f:22:e1:57:4a:21:d3:c0:8a:f1:a5:74:21:e3:3a:1b:8c:
         94:4f:2c:d9:4a:48:a0:ac:b6:8c:d0:72:8e:f2:6b:ae:d6:73:
         74:a3:b3:ba:b5:7e:ca:41:65:61:32:dc:56:d3:c0:94:38:f7:
         41:b1:9b:64:9d:e9:97:62:57:56:f5:dd:f5:01:00:c6:16:6c:
         c5:34:fb:08:47:84:4d:09:16:4a:ab:aa:5a:ec:49:85:ef:60:
         3c:11:93:09:5b:a7:80:20:84:eb:3f:c0:52:c2:31:5d:e1:14:
         af:6b:ae:17:08:b8:84:fb:d6:bc:01:19:10:01:18:f2:f8:e7:
         46:16:a2:0a:f0:e1:f5:fb:8a:b7:64:95:09:f8:a6:03:f4:b9:
         c4:af:fb:aa:4e:b8:f0:7c:9d:b6:98:14:86:43:2f:80:ff:f6:
         f8:9d:f2:01:32:a3:a8:ef:a5:c2:0e:90:a7:1f:28:53:2e:96:
         24:92:61:9e:83:e1:56:d8:b6:b5:5b:b0:77:f5:3a:66:57:16:
         dc:85:6d:84:c2:04:9a:64:a3:1d:57:b8:1f:75:78:5b:95:dd:
         b9:ee:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----