Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          OHKMTOhMxVKPRsz6xslzCpAj2miCMsn3YHxRT9AZNYA=
Subject key identifier:   67:8B:1D:37:FD:4C:57:95:B4:9E:9C:1B:37:AF:59:FE:3D:FB:3E:A4
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       01962FAB79EA8DDE8AC6ECA8ADAD50AA72EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: CYoL0OERfeRF75O3n/VV/cqnxeFB0gLW034Q9hCPrJk=)
                          2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:79:ea:8d:de:8a:c6:ec:a8:ad:ad:50:aa:72:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=678b1d37fd4c5795b49e9c1b37af59fe3dfb3ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:eb:bc:57:17:09:3d:04:93:83:d8:77:93:
                    45:1d:b4:2f:5b:7e:fb:e9:3e:dc:a7:00:4a:2d:8a:
                    c7:2d:31:79:28:bb:7d:f0:55:69:c1:a0:29:b7:ff:
                    fc:3b:da:52:7c:c5:64:93:d8:7e:45:17:7b:3d:7f:
                    db:4f:e0:3f:7a:e7:63:bd:47:04:82:45:2d:6f:1e:
                    5e:fe:de:d7:18:6b:a1:f4:d4:f5:ce:c8:5e:51:db:
                    9a:20:95:e0:53:cb:60:4f:ba:60:f6:37:41:39:c4:
                    d8:1b:36:1b:44:2c:bb:3d:f9:02:49:b8:d0:f0:d0:
                    de:fb:c3:32:c6:54:3d:55:18:be:45:5d:0b:21:51:
                    f5:87:e9:f9:c7:ce:e5:26:7b:36:37:8e:f6:54:e0:
                    0e:50:f8:cf:96:03:b1:7f:79:72:81:6c:ec:e3:44:
                    93:55:6d:39:9c:c6:e6:b5:95:c4:66:50:c0:aa:c8:
                    d1:c6:a2:b7:67:27:ec:87:79:a4:22:c2:93:c8:94:
                    98:40:66:6b:67:a5:81:1f:26:83:6d:2a:78:af:a9:
                    93:af:13:bb:01:08:8e:ec:d6:77:a0:78:c3:20:4d:
                    16:e9:9a:2a:18:a1:32:5f:2f:67:ff:69:bd:d3:76:
                    c8:b0:6e:2a:4e:68:02:46:93:28:6b:87:ae:85:21:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:1D:37:FD:4C:57:95:B4:9E:9C:1B:37:AF:59:FE:3D:FB:3E:A4
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:2b:16:78:1d:a9:52:e7:33:fb:10:67:d1:d0:89:41:7f:
         d1:80:26:e9:a9:1d:67:b6:37:c9:93:23:40:04:b1:3d:c2:43:
         31:64:d8:27:f3:05:f1:e0:08:31:f7:cd:82:c7:cb:50:97:74:
         5b:23:0b:cb:0e:31:1a:4b:53:19:74:cf:83:7a:e8:15:ee:7d:
         7e:75:ff:fe:ef:27:66:2c:e8:5d:98:bc:dd:c5:9c:e1:3d:7b:
         c5:06:f8:01:e5:b2:ec:08:0d:71:83:fe:f8:ab:cc:d4:e3:12:
         27:05:99:4f:f2:56:a6:6a:d3:65:32:74:59:ea:b2:c6:37:e4:
         cc:67:6a:ce:f6:c4:b2:5c:95:52:22:51:4e:81:96:cd:55:d5:
         4c:92:4f:ea:fe:47:91:a4:d1:7a:66:b9:14:55:8c:c2:32:75:
         ba:65:af:8a:fa:53:5c:27:60:9d:18:24:58:21:a2:87:f0:e7:
         c3:1e:f0:56:94:58:ed:cf:dd:6b:45:a2:5b:f4:bd:c0:79:c8:
         8a:ad:b7:43:32:6f:d7:49:83:d9:aa:cd:8b:6e:48:f2:7f:48:
         ee:5a:0a:68:62:90:21:a9:a0:aa:f3:68:69:9f:e4:89:32:0a:
         a4:85:6b:f8:c6:51:c2:14:90:ea:88:4f:68:b3:b7:98:0a:07:
         f4:55:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----