Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File:                     UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier:          0dsAS1E1Y7Soah/Ai8KpMS5rUY3ULKCJeNx75XszgTk=
Subject key identifier:   79:13:E4:CB:64:ED:73:CD:4E:28:C3:04:64:F7:12:F1:A1:38:F1:F6
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer:       /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial:       01962F3D3318F5CFF5C9F05909CEC17F1D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: QfscxYCqR099gNnKNGy4wlSXrOuhQNiLblQpXaVev2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:33:18:f5:cf:f5:c9:f0:59:09:ce:c1:7f:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=7913e4cb64ed73cd4e28c30464f712f1a138f1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:01:fa:cd:1d:f1:7d:5d:63:43:fb:18:72:
                    5d:74:1e:d4:0d:95:e1:82:05:81:a0:dd:c5:7e:7f:
                    20:8d:fa:45:42:69:fb:ce:91:58:63:bb:66:3e:ba:
                    c4:e3:05:83:c0:29:e6:98:cc:e1:50:95:0e:78:d2:
                    d6:86:19:78:d8:d2:39:59:29:1d:c3:b6:08:fc:e6:
                    ca:ae:5f:b2:8e:cf:c8:f4:d7:85:7a:ef:aa:71:89:
                    ff:9e:8d:45:b6:71:a0:24:f0:23:b8:a6:70:f6:91:
                    5a:d7:07:94:f4:76:96:63:8b:11:d7:23:13:da:5f:
                    47:ae:08:cf:14:fd:dc:24:5e:b9:28:c2:12:b1:d7:
                    60:a6:0c:84:84:00:fb:21:eb:de:f8:35:31:8c:a2:
                    05:d6:a4:7e:7e:11:94:17:23:5e:f7:64:72:43:6d:
                    fd:06:bd:12:82:2e:e0:71:f5:3e:8a:2b:f3:b7:26:
                    dd:9f:d6:69:29:5d:3e:ea:fd:dc:74:89:ec:e2:73:
                    00:67:6f:cf:9b:76:4f:89:b9:f0:9f:ab:48:4f:70:
                    bd:d2:61:6c:c1:1b:89:8b:1f:fe:29:4a:17:76:07:
                    18:c3:06:0d:35:e6:af:a8:ec:96:d2:13:8d:71:14:
                    0d:69:3c:7a:ec:18:10:30:f2:71:66:aa:f8:7c:2f:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:13:E4:CB:64:ED:73:CD:4E:28:C3:04:64:F7:12:F1:A1:38:F1:F6
            X509v3 Authority Key Identifier:
                keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2c:6a:17:bb:2f:f6:d5:e1:11:a9:1e:5a:be:66:05:26:be:
         5a:47:30:31:d9:a0:46:59:49:a8:e2:b1:db:43:27:0f:b7:39:
         98:a3:c5:97:32:0a:84:12:97:3f:fb:2f:1a:44:2d:15:5e:cf:
         8b:8a:e8:55:e4:01:78:05:f4:52:2f:73:82:e6:43:74:67:ab:
         41:0b:f1:b0:9f:39:a6:2e:8f:dc:4f:34:49:02:3d:c4:24:8c:
         1f:92:86:83:01:f6:7a:bf:dc:cc:63:bb:8c:f8:dc:34:1f:63:
         a8:46:de:02:f2:ab:28:f4:56:60:a4:09:67:af:01:ad:ca:1b:
         0c:fb:b8:08:9c:98:e9:f9:b2:1b:d9:0b:fb:f2:75:a0:04:ed:
         cf:64:1b:0d:f6:33:ba:09:e4:8d:09:79:3c:17:26:ae:11:38:
         66:11:91:81:1d:ab:e1:0b:1e:cc:83:9c:4e:56:ec:49:d1:a4:
         dd:d0:a2:6b:d3:c0:07:bd:72:62:a4:a3:a6:2f:89:d6:f7:1f:
         3a:7e:8a:0f:4c:09:e2:cf:e5:d4:e1:c3:f4:b5:fd:4a:40:0d:
         2c:65:aa:9b:24:c1:6d:df:01:35:bf:43:62:bd:8e:6c:1b:6d:
         d2:57:17:c4:bf:f2:b9:c6:1a:f5:2d:f1:af:50:28:0f:fe:c2:
         80:ef:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----