Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File:                     UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier:          b8CXehDSGLWU/tjVws3ItUrd+9sy7SUvuB/jxKyqC8o=
Subject key identifier:   46:05:58:43:D6:F9:34:EA:80:83:54:DF:09:08:87:0F:61:96:2B:03
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer:       /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial:       01962ECFC018D6191712EFF807C9C2A35ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number:          0DC2
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: 7+Gx1c1IW9V8GIE6r2XCzvcDaCATbIC8tpfibg6AkmA=)
                          2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c0:18:d6:19:17:12:ef:f8:07:c9:c2:a3:5a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=46055843d6f934ea808354df0908870f61962b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:a0:24:50:ee:35:5b:ab:fa:b5:d1:7a:33:
                    b7:28:a5:36:9a:52:47:50:18:ad:83:62:2c:86:63:
                    51:c0:7a:65:fa:f6:b1:17:43:15:fd:7c:33:d3:5d:
                    de:64:11:5a:17:4a:18:a0:2e:3b:c6:8e:8a:bb:41:
                    c7:a6:14:6c:d4:b7:15:ae:67:93:41:f2:07:54:95:
                    89:22:63:62:f9:bc:c5:1f:f0:42:36:79:9a:bb:0c:
                    01:4a:05:0f:78:e9:d5:cd:47:f8:82:6e:a7:c7:2c:
                    c0:4f:30:40:50:71:15:50:f6:65:a2:ae:bb:bc:bf:
                    5e:62:bf:d7:ea:94:26:83:ce:06:76:ba:bc:c5:39:
                    d1:34:0b:87:87:cd:a0:d9:97:12:9e:7d:b4:9b:0d:
                    74:09:18:df:50:a4:39:49:25:7f:c5:90:fc:59:1d:
                    b8:a6:17:24:95:78:ba:71:2e:de:04:f7:44:32:77:
                    dc:6d:d6:ad:db:8a:30:09:68:1d:00:aa:31:2d:84:
                    d1:41:e3:7b:07:98:f3:0e:a9:22:e2:81:3a:09:5a:
                    de:60:40:60:3e:cd:10:2a:bb:3d:d6:3f:eb:69:0e:
                    8a:04:11:a9:d0:8e:f9:2f:51:f9:0b:e4:bb:c0:d7:
                    aa:39:87:74:16:68:31:d6:18:38:e9:5f:03:30:c4:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:58:43:D6:F9:34:EA:80:83:54:DF:09:08:87:0F:61:96:2B:03
            X509v3 Authority Key Identifier:
                keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:2a:66:ec:69:bc:43:91:ae:4c:8e:5d:59:9b:b2:78:97:
         1c:71:6e:f5:21:58:37:f4:33:88:1d:f0:cb:9b:4a:33:47:13:
         8f:21:0a:52:70:34:a5:78:48:76:66:36:0e:ae:b6:05:d4:3b:
         8d:a6:22:e9:e0:84:53:0d:23:1a:4f:0f:ac:39:c6:d5:f9:12:
         94:33:ae:6f:2f:1b:ab:7b:bf:c9:a5:64:96:67:46:c1:1e:81:
         77:16:3f:aa:ef:e6:ca:84:cc:b8:dd:35:76:60:a8:a1:26:a1:
         df:7b:e5:07:c6:4f:5f:59:18:b3:dd:2a:df:f1:a6:a7:5e:94:
         fd:11:98:7e:19:b3:26:eb:ad:41:a6:87:e0:cc:7e:92:7c:27:
         3e:c2:8f:21:35:88:ec:a6:9a:ec:a7:dc:af:6c:47:88:07:70:
         d6:b0:c7:aa:a8:dd:62:80:56:fb:2c:45:7b:26:91:ea:ed:b7:
         dd:4f:01:64:88:04:d1:b7:09:13:74:f7:c5:1d:0d:d4:67:3e:
         18:c4:89:e8:0f:6e:ce:d1:74:33:5d:88:a2:02:b8:2b:23:82:
         ba:d9:98:19:ed:0b:0e:f1:03:a3:e5:8e:a5:99:04:14:9a:40:
         1b:63:a7:cf:b9:02:42:bc:d9:75:fd:1e:70:e4:19:30:ff:b8:
         5c:4c:9a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8AY1hkXEu/4B8nCo1q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWZlN2U4YjlkZTY3NTkxMzEyMWU3ZWJiNDIyNmI2MmQw
M2IxY2IwHhcNMjUwNDEzMTEwMTI5WhcNMjUwNDE0MTEwMTI5WjAzMTEwLwYDVQQD
Eyg0NjA1NTg0M2Q2ZjkzNGVhODA4MzU0ZGYwOTA4ODcwZjYxOTYyYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG2gJFDuNVur+rXRejO3KKU2mlJH
UBitg2IshmNRwHpl+vaxF0MV/Xwz013eZBFaF0oYoC47xo6Ku0HHphRs1LcVrmeT
QfIHVJWJImNi+bzFH/BCNnmauwwBSgUPeOnVzUf4gm6nxyzATzBAUHEVUPZloq67
vL9eYr/X6pQmg84Gdrq8xTnRNAuHh82g2ZcSnn20mw10CRjfUKQ5SSV/xZD8WR24
phcklXi6cS7eBPdEMnfcbdat24owCWgdAKoxLYTRQeN7B5jzDqki4oE6CVreYEBg
Ps0QKrs91j/raQ6KBBGp0I75L1H5C+S7wNeqOYd0Fmgx1hg46V8DMMS51QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYFWEPW+TTqgINU3wkIhw9hlisDMB8GA1UdIwQY
MBaAFFCf5+i53mdZExIefrtCJrYtA7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMt
MGI0NzdjYTczYWM2LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMtMGI0NzdjYTczYWM2
LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz8qZuxp
vEORrkyOXVmbsniXHHFu9SFYN/QziB3wy5tKM0cTjyEKUnA0pXhIdmY2Dq62BdQ7
jaYi6eCEUw0jGk8PrDnG1fkSlDOuby8bq3u/yaVklmdGwR6BdxY/qu/myoTMuN01
dmCooSah33vlB8ZPX1kYs90q3/Gmp16U/RGYfhmzJuutQaaH4Mx+knwnPsKPITWI
7Kaa7Kfcr2xHiAdw1rDHqqjdYoBW+yxFeyaR6u233U8BZIgE0bcJE3T3xR0N1Gc+
GMSJ6A9uztF0M12IogK4KyOCutmYGe0LDvEDo+WOpZkEFJpAG2Onz7kCQrzZdf0e
cOQZMP+4XEyatQ==
-----END CERTIFICATE-----