Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File:                     UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier:          65zDTcFB1guk6Vl8X2DIdz3j9C2Tzdqii/5HODTLCU4=
Subject key identifier:   2E:E1:3A:30:6A:29:E9:CD:BC:5B:2D:B3:93:52:40:A9:40:86:B7:CF
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer:       /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial:       01962E986CC367E699787E44D7C3BFD70280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: d9AtPGcBhkIqibiQJZ97rmHXSZZO8f4kXwbN8tAjik8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6c:c3:67:e6:99:78:7e:44:d7:c3:bf:d7:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=2ee13a306a29e9cdbc5b2db3935240a94086b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:99:5e:c8:44:74:67:cc:02:44:f2:c3:f1:
                    50:cd:3d:b9:7c:c9:ca:d4:51:16:46:66:01:64:29:
                    5f:ef:3e:9a:31:c6:0d:7b:65:b0:b7:1c:4d:5d:81:
                    3f:c9:51:30:9e:11:12:82:90:b6:ef:a1:6b:26:e3:
                    bb:e5:4e:b4:e8:a0:11:3d:ea:3e:2d:d3:dd:d8:82:
                    21:e4:fc:db:a8:46:21:c9:16:b1:a9:20:e0:4d:f8:
                    d9:bd:8f:a9:35:78:64:d9:ed:1a:59:80:8c:8c:52:
                    2b:3d:51:2e:86:38:45:49:44:cd:3a:38:9d:a3:16:
                    fc:3e:7f:de:f6:31:7f:e3:c4:7a:f4:04:37:61:33:
                    f9:af:27:6a:3f:04:33:18:41:a2:63:d3:7b:c8:5c:
                    25:b8:19:1e:1a:34:4b:13:55:1e:f9:77:e7:96:f5:
                    b7:65:8a:97:ab:5e:c5:f7:86:67:62:fd:f3:88:e4:
                    21:41:11:bc:a0:74:3f:96:bc:6a:11:0f:21:03:5d:
                    8f:41:f8:6a:1a:1a:bd:70:a8:ad:64:2a:82:73:d6:
                    f1:47:89:05:44:8e:2e:e7:69:e6:58:e0:25:98:0e:
                    3e:63:b1:86:82:0e:dd:c7:e9:d8:c2:31:68:e4:c2:
                    57:73:8b:c9:1d:0b:50:80:f2:6d:0e:cf:31:c4:8d:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:3A:30:6A:29:E9:CD:BC:5B:2D:B3:93:52:40:A9:40:86:B7:CF
            X509v3 Authority Key Identifier:
                keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3b:12:8b:9a:7e:1e:86:21:29:68:f8:3b:01:ec:1b:cd:fa:
         e3:b5:3f:99:90:0d:6d:de:c1:65:7c:d5:e7:2f:24:10:3b:71:
         b0:ff:e8:93:a4:41:5b:08:04:a3:ea:be:83:15:b5:49:06:07:
         bf:ac:21:4c:9e:ca:09:91:18:b8:22:84:31:fa:12:96:2f:b3:
         e4:37:f0:dc:47:04:61:85:4d:88:c4:3e:ee:40:4c:54:bc:c6:
         32:7a:b5:f0:ac:82:3d:0d:59:4f:c7:d7:6e:f2:b6:6b:e9:c2:
         f9:91:dd:65:0d:0f:fd:ae:68:15:58:35:45:55:df:26:45:b5:
         de:4a:4e:8c:4d:4a:ce:17:94:90:1f:f2:21:99:65:e4:5b:de:
         77:56:bd:c4:24:b7:f2:e4:aa:fc:e3:8c:e5:ad:31:fa:b7:60:
         30:66:79:dc:4a:7d:5b:5c:7c:e3:e7:fa:ad:03:1e:4e:bd:6d:
         eb:1f:92:35:72:d6:39:6e:4b:1e:2b:23:d5:62:67:76:25:d1:
         3e:9e:a0:e8:7d:ba:e3:6e:ed:94:ab:bf:e3:f6:23:eb:dc:59:
         2c:3a:08:d8:19:1d:f6:d7:de:b9:ad:fe:54:e0:38:17:99:c7:
         61:2d:0c:84:16:4a:fd:47:7a:0a:e1:9d:1b:55:29:f5:79:11:
         0b:2d:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----