Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          DG+MPoDPEuVUeZjJy5snOCre2XTw7OWIgduV5YTZdSs=
Subject key identifier:   AD:2C:BD:9B:89:7B:EC:DD:7A:B3:DC:AC:49:4E:C6:5F:D7:1A:A5:94
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01962E99795667E63E231E747A4076D59A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0E15
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: ipBiJO6znPigi7YXAtzRp0vKxC/lUSNfvoeFC/qz26A=)
                          2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:56:67:e6:3e:23:1e:74:7a:40:76:d5:9a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=ad2cbd9b897becdd7ab3dcac494ec65fd71aa594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:ac:91:84:8f:c0:45:59:16:3b:9c:00:9b:
                    31:5a:e0:84:51:93:ee:88:37:f5:d9:cf:dc:72:5b:
                    0b:2a:6e:43:9d:08:cf:f0:d8:e2:f6:5f:2b:b6:b1:
                    59:49:b6:65:d0:df:81:44:18:d5:d3:48:1c:1f:00:
                    42:ff:af:fa:84:a5:56:28:e7:ee:fe:08:17:25:dd:
                    26:23:e3:38:a4:c3:d2:b1:42:6e:0f:32:63:81:8b:
                    90:6e:63:43:09:c6:4c:a4:21:6e:bf:c2:e6:5f:c7:
                    27:3e:e7:e9:07:c1:22:9e:49:34:0a:a5:6d:b8:eb:
                    7d:73:37:ef:e9:98:1e:9a:26:cb:53:13:e0:06:9b:
                    46:2b:55:94:fe:fd:98:a7:fe:f3:b6:00:96:2b:2e:
                    d2:18:6c:ff:30:5e:a5:21:f3:5e:3a:50:40:24:9c:
                    44:c6:2d:55:a7:9e:02:46:b2:f8:ff:d5:0f:e8:a0:
                    dd:b1:e8:e7:70:26:ac:34:73:64:dc:a1:00:44:f6:
                    c4:d9:af:5f:dc:c2:e1:4a:06:3e:95:30:57:5f:0b:
                    bb:14:60:39:bf:3d:92:42:a8:32:6d:c9:61:43:96:
                    61:a0:51:22:93:e8:e5:2b:b8:07:6f:9c:32:38:55:
                    92:cc:31:2e:b1:91:e7:d1:22:6f:5f:ca:36:e7:d0:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2C:BD:9B:89:7B:EC:DD:7A:B3:DC:AC:49:4E:C6:5F:D7:1A:A5:94
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:01:76:29:5a:85:3c:58:9a:df:ff:9d:93:71:ea:e4:6e:
         e0:84:05:a2:38:ea:36:fb:e9:79:a8:33:70:f6:b6:5d:cf:26:
         e3:0f:1f:58:3a:e0:e1:7c:7e:87:ff:d1:be:94:e8:99:42:e2:
         2e:2c:ac:08:79:11:6e:b9:8f:65:f1:fa:d4:d7:21:77:b3:2f:
         ec:a4:85:0b:a4:20:c0:50:a5:58:63:e8:74:45:11:9e:88:9b:
         ec:85:5a:10:1e:ac:4f:8a:22:26:c5:b8:67:49:1e:cf:3f:bb:
         5e:a0:fe:41:75:75:ac:04:8a:db:14:0c:35:5a:c0:85:2e:94:
         24:73:8d:37:3c:0f:5b:6f:72:65:3c:8a:c0:ab:c2:6f:81:bc:
         e1:f1:17:9c:4b:bf:80:16:30:4a:26:67:7a:ec:a8:65:9f:6e:
         61:be:ca:35:0f:7d:27:d9:0d:83:a5:cd:a6:8b:a6:fc:e8:e8:
         a5:a3:30:94:a0:14:b2:85:39:5a:e9:5f:a2:6e:cc:22:9d:3f:
         b6:02:1c:62:7a:40:2b:9e:8c:45:3b:96:9b:f0:7a:9e:59:df:
         32:77:a1:7b:0a:11:72:01:61:3c:8b:d7:08:c6:54:2c:06:76:
         8d:18:bf:e3:67:50:21:e9:20:c2:aa:61:7b:88:42:68:99:db:
         47:40:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----