Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File:                     UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier:          ZhmhaGmE3ZT7+BoGUdlpcl5DtY3W7jLq8QEgec0VWjg=
Subject key identifier:   3E:AE:EC:D0:55:B6:C9:D0:9A:CF:94:32:84:7E:DD:A4:CE:12:20:01
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer:       /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial:       01962ECFABF347C9F55875302B3FCF957A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number:          0CB3
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
                          2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: 8Udwf0a5FDzc+vhUd2z2QEr7sgbTx2To4W2vo7txCok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ab:f3:47:c9:f5:58:75:30:2b:3f:cf:95:7a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=3eaeecd055b6c9d09acf9432847edda4ce122001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:05:8f:30:b4:0e:f0:85:9a:67:80:35:e2:
                    2b:ef:7c:dc:60:8c:71:58:7a:e0:fc:ff:a4:95:d6:
                    81:f4:94:ee:f8:25:33:83:5a:cf:3c:f0:96:a2:d3:
                    fc:ef:41:4c:e3:7d:b3:1d:25:c3:4a:7c:e1:41:47:
                    dc:3b:4f:cd:e4:4b:fe:20:96:b9:03:9a:5e:81:2c:
                    80:1c:ee:ea:64:c4:f0:2e:e0:c1:a6:f5:69:8b:a6:
                    9b:5e:05:29:63:8a:e7:bd:13:be:97:5f:7d:71:b9:
                    fb:c1:35:a1:96:78:79:c5:cd:68:0e:43:3b:93:83:
                    99:f4:33:4c:5d:51:87:4d:fc:45:fc:08:3c:c9:69:
                    23:81:7a:c2:37:b1:5c:a7:f3:43:03:ce:30:77:ed:
                    c7:fb:22:a7:40:e4:ec:3e:13:02:57:cd:39:83:f4:
                    8b:00:1a:a4:cb:25:69:73:ec:cd:49:a1:19:7b:de:
                    fe:8f:a5:3b:93:c9:f9:59:cf:14:cc:ae:48:48:3c:
                    68:c0:54:40:c9:6c:d4:cf:35:be:27:dd:2f:92:7b:
                    de:a9:4f:c5:a6:27:af:27:80:39:64:55:9f:b5:49:
                    22:95:5b:49:ff:d4:6b:8b:8e:28:bf:f7:26:aa:46:
                    69:af:dd:c1:36:fa:f2:eb:1e:1b:cb:b9:ef:65:c1:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:EC:D0:55:B6:C9:D0:9A:CF:94:32:84:7E:DD:A4:CE:12:20:01
            X509v3 Authority Key Identifier:
                keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:c1:37:29:33:22:e2:44:ee:74:59:5f:de:08:50:88:fc:
         ba:61:0e:cb:10:48:57:30:41:dd:cc:2e:8c:94:c6:4f:6c:7c:
         6a:cc:9a:35:e0:38:bb:e1:7e:89:69:e3:c3:29:7f:43:4b:98:
         41:51:a9:13:7e:8d:aa:20:5b:18:59:89:2c:18:27:ef:2d:2e:
         34:2e:a7:2f:9d:52:b7:45:1b:2e:2c:13:2f:5a:94:5f:c2:5f:
         3a:ba:d2:a1:6b:3a:7a:37:a4:9d:7f:37:e3:4e:8d:52:f4:e7:
         30:6c:2c:ef:cd:3c:61:a9:01:6d:28:8b:4c:4f:10:dc:55:18:
         ad:ed:d2:c0:c8:36:66:20:d1:4d:33:d8:ea:21:38:ae:7c:7d:
         00:83:ef:fa:b3:c3:b9:a9:57:e6:94:95:05:f0:70:6f:fd:2a:
         2b:ff:9a:ff:f4:0a:0b:4d:b8:26:bb:99:22:df:a7:1f:ad:5b:
         be:b0:51:8b:1a:b8:04:ab:15:4c:f7:13:7d:cb:a1:3e:b5:74:
         7a:d9:4c:c5:9c:f4:27:65:a1:65:c2:af:47:a8:58:b1:44:a3:
         bd:e2:5c:fc:8d:83:23:fa:38:be:f1:5b:b7:8b:41:d1:04:d0:
         e9:a3:5f:3c:72:95:f9:0f:3c:59:ce:b3:ae:a3:ba:41:ea:6b:
         d1:3e:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----