Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File:                     UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier:          tYJbhwS3zfHUIF596MjymjQD4Ii2S1R+63KtE2odVoY=
Subject key identifier:   78:9B:78:56:2B:06:F8:BC:6E:A6:B0:B8:BF:CA:51:F9:D4:6D:60:0A
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer:       /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial:       01962F072C41BD3C71E2E892D34FB951200E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=)
                          2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: zyk+crK/8A9s9KH257vaOpYw32nBesmaDHK7eyh6lhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2c:41:bd:3c:71:e2:e8:92:d3:4f:b9:51:20:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=789b78562b06f8bc6ea6b0b8bfca51f9d46d600a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:35:3e:79:c7:38:9b:3e:22:bb:6b:2c:50:
                    9e:cc:61:ca:d4:19:be:74:ea:68:cd:51:65:b7:cb:
                    cb:74:a3:84:72:61:0a:1f:9b:54:0c:21:29:bc:22:
                    f6:7e:60:80:96:ef:af:e2:2c:81:14:cb:b1:81:a6:
                    80:7b:57:75:dd:d7:bb:0b:37:85:9e:f2:22:5e:ba:
                    ae:85:c6:37:45:01:62:d7:f3:3a:32:06:51:80:90:
                    0d:c9:27:3c:67:b2:40:2d:02:85:a1:5a:3c:d1:ac:
                    39:3b:c2:87:2e:ce:e0:2c:4c:7a:ae:2e:ea:3f:79:
                    24:9b:2d:59:9b:85:65:65:58:ab:db:32:7a:c9:59:
                    0c:f5:8b:b1:4e:fb:a3:e0:23:26:fb:74:8b:0c:cf:
                    75:52:fe:ec:42:2e:06:bc:cb:57:83:52:de:ac:a2:
                    bc:d9:4b:37:12:47:5f:fd:0c:3d:f2:60:b5:27:fb:
                    5f:7b:38:73:0c:86:24:d5:d5:30:88:ec:68:ae:5c:
                    33:74:70:33:27:ac:14:7c:22:7b:e5:73:23:4b:e4:
                    03:ad:f4:49:a8:ef:f0:06:b6:bb:96:9d:9e:64:1a:
                    db:04:7c:a1:69:ef:2f:3d:f0:5c:fe:91:66:b1:82:
                    0c:24:7b:e5:a8:b5:6d:37:b2:41:b0:3f:ac:e7:a8:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:78:56:2B:06:F8:BC:6E:A6:B0:B8:BF:CA:51:F9:D4:6D:60:0A
            X509v3 Authority Key Identifier:
                keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:31:bd:1b:c1:c4:b0:18:3d:59:90:a6:06:3f:bd:5c:c3:ab:
         33:7c:b1:03:5d:af:9d:14:7d:10:51:fc:00:b2:db:00:c9:87:
         6f:7a:91:45:18:64:a2:25:04:22:cf:eb:fe:5a:3b:02:e7:57:
         be:0c:b3:81:e3:a7:34:c3:b5:b2:64:82:a3:65:fd:b4:71:20:
         45:04:24:f1:d5:a2:59:ad:9c:2f:fe:99:ba:7d:da:0c:d2:90:
         e7:7f:6a:1e:4d:91:03:7a:39:28:ce:28:32:06:08:ac:10:65:
         58:28:b1:d3:85:10:bc:1c:46:22:6e:83:38:ac:66:d0:bb:2e:
         6d:67:22:28:88:3f:8d:84:c2:a2:8d:05:1c:55:d3:79:5f:3e:
         9f:58:58:d9:00:c3:ca:44:85:66:8d:c4:de:fc:3b:f1:0e:d7:
         f4:df:fb:91:6c:a1:52:7c:99:a5:70:fe:11:80:3c:d4:62:6a:
         c0:68:2f:3d:2d:af:78:10:6e:34:e2:65:dd:5c:0f:03:e9:8d:
         a6:9c:40:42:ce:5b:bb:fa:12:17:90:d3:83:c9:9c:04:fa:8a:
         cb:ec:d8:81:31:8a:19:78:2c:43:3e:e1:f2:8f:6b:c6:62:68:
         a9:ac:b1:77:ab:03:c6:36:09:49:8b:b3:e9:d8:10:4c:93:41:
         bc:9d:12:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----