Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          WpkWelSiEcOHjFAg7XJ2CTCzJPRlUY3Ov3ldVGwA4To=
Subject key identifier:   C1:18:CB:ED:90:33:4C:11:42:2B:A8:7A:54:02:0A:80:87:E5:F8:64
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       01962DF43CE393655149AB0E1B883CEF4318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: bP8pDC+8MVJ+d5+TZkwNcSlNlxXU5HIw5AUjMjRXC0I=)
                          2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:e3:93:65:51:49:ab:0e:1b:88:3c:ef:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=c118cbed90334c11422ba87a54020a8087e5f864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d1:c7:b5:73:e3:74:8b:0b:92:cf:fb:a3:7f:
                    2e:dd:1d:31:1e:08:3a:db:32:7a:42:76:a0:2b:d0:
                    b3:96:32:93:ca:11:d1:69:8b:fd:ff:f2:db:d8:d6:
                    b5:41:1f:e3:a6:b4:b9:98:51:42:f6:ad:7c:93:a1:
                    32:cc:42:68:39:3b:f6:f0:c4:a8:21:ee:05:7a:06:
                    78:cc:7d:82:7f:d9:8c:eb:8a:ba:87:da:5c:c6:5e:
                    af:b2:3f:df:bb:63:41:53:6c:93:7f:1a:2d:d1:e0:
                    31:59:ee:92:0a:a7:fb:01:d1:ea:b6:ec:42:c9:e5:
                    d1:6d:0b:37:7e:5d:b8:7f:91:09:e9:dc:e1:1f:4c:
                    8c:fb:d9:ad:89:e0:de:81:e0:d2:34:00:42:c7:d6:
                    94:6c:a8:5f:fa:69:b4:5c:ae:77:b5:a4:45:2c:1e:
                    8b:58:d5:df:9c:ac:7e:52:8b:e1:d3:55:1f:35:d2:
                    69:c9:dd:f1:59:fb:e1:0f:7f:52:f5:87:b1:c7:f4:
                    32:75:9f:bb:5f:bf:31:96:f5:96:b0:43:4f:43:f5:
                    19:fb:64:be:72:cd:86:50:f4:45:63:29:c7:0b:54:
                    c5:8c:df:00:12:45:fe:08:b6:1c:64:2a:06:8a:b2:
                    dc:bc:b7:1d:3e:e1:6e:7e:ac:16:10:b8:55:f3:ba:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:18:CB:ED:90:33:4C:11:42:2B:A8:7A:54:02:0A:80:87:E5:F8:64
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:5f:95:eb:bc:d6:8d:b9:9f:f7:c1:42:ce:c4:cd:a6:f7:
         11:55:de:10:39:c4:33:1c:84:08:a3:63:08:44:2c:f3:08:03:
         d4:4d:b7:f8:99:33:1b:35:af:15:23:34:97:46:c0:53:4e:7d:
         b6:73:9a:92:ab:eb:71:ce:95:be:d4:3b:c0:00:52:45:ec:ab:
         84:0e:e9:8d:5d:7f:cd:48:7a:21:94:f0:bb:86:8d:3f:e6:2c:
         72:53:1f:a6:7f:e5:f9:25:18:33:9f:18:82:23:3b:81:b0:6e:
         ed:6f:ba:41:a9:b8:e7:12:a2:b9:08:b3:73:79:32:92:96:01:
         fb:6a:3a:9d:c7:d2:a3:c4:5e:e3:22:28:2f:8c:41:94:10:52:
         dd:3c:ca:f5:ec:03:45:2e:c8:20:9f:8e:67:cd:2d:b6:4d:13:
         98:03:25:42:82:9e:71:b4:e7:99:55:c7:67:df:48:6c:49:48:
         d5:bd:7d:6c:88:64:21:3a:7b:fe:e7:12:f7:f7:c2:ad:c6:9d:
         eb:7c:2d:2e:e3:19:fc:97:67:c9:af:4c:fb:55:4e:c5:b8:1d:
         87:91:e7:2e:0f:42:c6:47:1f:1f:44:34:58:bc:67:9b:17:f9:
         94:87:ef:fd:42:c7:cc:f8:6c:cf:2a:05:00:63:7a:67:2c:62:
         72:ac:88:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Dzjk2VRSasOG4g870MYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzlkYTE0ODNmZTM5OTNkMTk4NTI2MDYxOTczNWM0Y2Zk
MzgwMzMwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EyhjMTE4Y2JlZDkwMzM0YzExNDIyYmE4N2E1NDAyMGE4MDg3ZTVmODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89HHtXPjdIsLks/7o38u3R0xHgg6
2zJ6QnagK9CzljKTyhHRaYv9//Lb2Na1QR/jprS5mFFC9q18k6EyzEJoOTv28MSo
Ie4FegZ4zH2Cf9mM64q6h9pcxl6vsj/fu2NBU2yTfxot0eAxWe6SCqf7AdHqtuxC
yeXRbQs3fl24f5EJ6dzhH0yM+9mtieDegeDSNABCx9aUbKhf+mm0XK53taRFLB6L
WNXfnKx+Uovh01UfNdJpyd3xWfvhD39S9Yexx/QydZ+7X78xlvWWsENPQ/UZ+2S+
cs2GUPRFYynHC1TFjN8AEkX+CLYcZCoGirLcvLcdPuFufqwWELhV87rn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEYy+2QM0wRQiuoelQCCoCH5fhkMB8GA1UdIwQY
MBaAFFDJ2hSD/jmT0ZhSYGGXNcTP04AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQt
Yzg1NWRhZmFkZDVjLzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQtYzg1NWRhZmFkZDVj
LzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHURfleu8
1o25n/fBQs7Ezab3EVXeEDnEMxyECKNjCEQs8wgD1E23+JkzGzWvFSM0l0bAU059
tnOakqvrcc6VvtQ7wABSReyrhA7pjV1/zUh6IZTwu4aNP+YsclMfpn/l+SUYM58Y
giM7gbBu7W+6Qam45xKiuQizc3kykpYB+2o6ncfSo8Re4yIoL4xBlBBS3TzK9ewD
RS7IIJ+OZ80ttk0TmAMlQoKecbTnmVXHZ99IbElI1b19bIhkITp7/ucS9/fCrcad
63wtLuMZ/Jdnya9M+1VOxbgdh5HnLg9CxkcfH0Q0WLxnmxf5lIfv/ULHzPhszyoF
AGN6ZyxicqyIfQ==
-----END CERTIFICATE-----