Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
File:                     UrEszH6hBoww14yVXFa5djvPO00.mft (raw, json)
Hash identifier:          4i58NgDZl1/ZPL3ZFSq1KopN+/TU/RoNPsjr/BjfsFs=
Subject key identifier:   0D:E1:FD:1F:0D:7C:F8:75:1D:FE:0A:E2:4C:2B:D4:D2:14:6F:F9:37
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Certificate issuer:       /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial:       01962FAB1184F5EC80C219C11F39738EBF0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
Manifest number:          0831
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: DHimsh5cf4B1cEow5B0sOoa89ZU.roa (hash: 4QGyiwHML4yioXbByOLrPfTNUUAH8+dM2e00mLX0LYc=)
                          2: UrEszH6hBoww14yVXFa5djvPO00.crl (hash: B74ZPxYwX6RB15ReduYE5/yHSZAYXLRy+5e8bb7/86I=)
                          3: kZrHy6O_C92bogsRpN6C84e22aM.roa (hash: J0JdPtLBeCRlUbxJ0oXF2YO76tJDIcSvEt4BcuHJUL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:11:84:f5:ec:80:c2:19:c1:1f:39:73:8e:bf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=0de1fd1f0d7cf8751dfe0ae24c2bd4d2146ff937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:f3:d7:13:bb:60:f8:56:70:ec:e3:23:4f:
                    92:18:d3:65:b7:1c:92:5d:f4:61:c5:ec:e1:66:a4:
                    0f:aa:e7:8e:58:f0:95:33:98:1a:95:ac:df:1d:e3:
                    82:de:8e:d7:72:7b:4a:15:54:87:42:45:c6:95:b8:
                    69:2e:8f:fa:d5:d8:56:4b:95:b7:85:da:ad:6e:4c:
                    f8:c5:9f:3d:f8:52:89:2f:ea:f8:88:17:77:9a:cb:
                    1b:49:30:4d:6f:10:b7:79:5c:1b:0f:68:c9:77:7d:
                    0a:c2:bc:8b:f3:4e:ac:35:cb:16:8d:17:f0:4a:1c:
                    9b:31:2b:f5:3a:fb:6b:22:40:c4:ca:93:34:ef:b0:
                    04:1a:08:21:6a:14:9b:74:f5:a7:22:80:88:44:17:
                    5e:8a:9f:ae:c6:18:aa:79:bb:a7:93:d9:a0:86:ec:
                    bb:24:28:a7:79:e4:da:5a:41:15:04:6f:a7:0b:12:
                    a7:24:82:ea:da:d1:d0:86:bc:f4:a3:70:0e:e2:3b:
                    67:ad:17:58:03:c7:eb:fc:15:ed:38:bc:08:58:f7:
                    fb:cc:c1:12:d5:61:c6:26:4b:5a:0d:1e:41:11:da:
                    c8:e5:d9:41:bd:1e:d1:a5:41:4d:83:93:c7:21:6b:
                    53:24:0e:0e:c3:e8:99:9c:ba:bf:b9:d8:fb:cc:d2:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:FD:1F:0D:7C:F8:75:1D:FE:0A:E2:4C:2B:D4:D2:14:6F:F9:37
            X509v3 Authority Key Identifier:
                keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0c:a6:9a:24:2f:ba:ce:99:93:ba:3c:73:fa:b1:88:ae:5c:
         44:76:d5:d0:a6:f1:4f:a0:97:b0:a9:24:86:a5:6f:45:de:54:
         c8:b8:7d:4b:8b:32:15:02:d9:ab:22:42:d3:49:81:a2:47:65:
         91:17:17:27:31:2c:db:19:c8:0b:ab:df:70:3d:26:a3:9c:23:
         58:f2:c5:21:55:04:33:d5:70:c9:69:e5:86:a6:09:5c:a9:35:
         43:d2:dc:83:ce:ac:5d:ee:80:51:a2:66:ba:c3:28:12:c9:51:
         21:2e:4c:61:7b:50:85:f8:ba:f0:eb:c5:e8:f6:17:83:14:af:
         f0:4e:a2:25:3f:e9:63:b5:4c:8b:5e:b7:7b:fe:0f:7a:96:5c:
         da:82:8d:f0:78:66:6b:ab:45:d1:be:d0:d6:d7:16:81:9a:59:
         c6:6e:09:96:79:2b:82:88:b6:2d:73:a8:73:a2:dd:a1:9e:41:
         77:ce:16:fe:c3:26:7f:c5:17:2e:fd:c9:9f:46:f9:31:a6:28:
         85:98:54:90:08:5c:5d:3d:d6:1f:ca:21:95:a3:11:94:82:89:
         64:66:39:b8:11:2d:f1:ae:69:18:f2:34:e6:8f:38:f1:93:4c:
         c7:b5:9d:f4:99:6e:9a:a1:37:b9:63:87:fe:90:ce:26:64:ac:
         35:37:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----