Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File:                     UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier:          gCkimqn0RwmiN/jBvikZ/tgSTAvvnyFZKolcyxm3W3Q=
Subject key identifier:   5C:F4:8C:70:05:4E:06:8C:F2:7E:D5:3B:93:AA:FC:DE:72:3B:17:03
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer:       /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial:       01962E9873D3EB9A7FF2B834EF585101555C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number:          0721
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: EmtReyDP5XmnoKXGQA5em0+AmHTh0CUVUdJFJsxmCQI=)
                          2: iWu72NaaTSDAiJGqIVfKYfSk9Cg.roa (hash: BiHkYnw80HRUON814fdKI0ZwVn2DSPqeEkVU4t9Jnsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:d3:eb:9a:7f:f2:b8:34:ef:58:51:01:55:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=5cf48c70054e068cf27ed53b93aafcde723b1703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:fa:a4:a1:7a:82:38:15:e6:1e:82:fd:bb:
                    3b:98:94:af:87:76:a5:cb:aa:8b:81:73:81:1f:e6:
                    f5:20:88:a0:8d:4d:cf:82:12:e7:df:32:93:b1:b8:
                    31:9a:d3:c2:ab:f4:57:29:67:39:a7:58:c3:8a:d4:
                    25:72:4a:fe:e4:c6:34:0a:19:88:a2:d6:dc:73:63:
                    f2:c3:c9:46:4d:23:e7:54:16:c1:9e:8e:ad:28:b1:
                    e0:0e:97:17:a5:c2:10:d9:ac:ef:40:47:c6:f5:d0:
                    1d:70:26:15:6b:8d:97:61:10:c4:51:97:1a:32:5d:
                    bd:2b:dc:de:16:af:48:31:2a:18:32:9e:1e:77:0d:
                    46:f8:50:19:0c:94:ed:3d:3b:39:db:d0:d0:29:f9:
                    4d:6e:b5:d6:65:c6:49:08:0c:f8:12:e7:b4:f1:59:
                    fc:b8:9c:51:8a:c1:69:0d:f7:e3:18:87:bf:f0:ae:
                    a4:9d:ef:63:ae:dc:74:b3:6b:70:5e:80:d4:ed:bc:
                    22:25:9e:e5:36:7f:0a:da:bf:7d:cf:cb:5d:99:c9:
                    e7:c4:33:42:1c:65:50:54:68:76:c3:3f:9a:e0:96:
                    a6:47:37:9c:82:1e:38:6a:ce:7f:87:78:9f:83:d7:
                    69:01:6f:06:f7:ff:43:bf:0d:f6:2b:b1:02:79:25:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F4:8C:70:05:4E:06:8C:F2:7E:D5:3B:93:AA:FC:DE:72:3B:17:03
            X509v3 Authority Key Identifier:
                keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:4e:5e:43:7b:be:67:c6:22:92:29:05:27:19:49:4e:ed:
         0f:cb:a6:d0:f2:59:48:e3:c0:5d:d7:c9:43:27:de:52:12:2f:
         0f:b6:76:43:d1:28:a1:e8:ff:18:7e:77:64:0a:31:7f:a7:9b:
         d1:65:35:cf:03:a6:0b:55:6d:33:02:54:b2:92:c0:f2:fb:ba:
         38:85:c7:74:84:d8:78:c8:7c:2d:e1:71:63:70:05:dd:93:a8:
         7b:1c:2b:de:3a:30:9e:5f:96:93:69:97:7c:f6:a8:87:75:1e:
         d4:e8:6b:03:f6:a7:7f:4c:be:bc:04:0e:00:15:47:07:b3:a2:
         96:26:99:dc:37:b1:8a:ed:ae:a1:65:84:0a:d7:b3:89:49:ae:
         96:4e:67:26:4a:a7:1a:0b:a7:19:2f:b2:2f:32:29:d1:e5:2d:
         9e:bf:9a:d5:fd:25:d1:ee:00:0d:0a:0a:88:bd:78:99:12:8b:
         bf:17:03:30:71:58:f9:1a:e8:bd:35:c8:33:95:98:04:63:c8:
         11:ad:84:30:0c:39:46:9b:74:0e:bc:ed:ef:a1:41:49:9d:8b:
         56:fa:c0:72:c6:cb:3b:05:a7:50:29:dd:1e:e7:ea:0f:d9:2d:
         eb:81:5c:b5:dc:ff:27:f3:0f:28:7b:e7:79:d8:01:51:ff:cd:
         f4:c5:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----