Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File:                     UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier:          tOajQlNVsPoP2f6fECOaE9ts/jHWPmj3q+oDFGf7EIc=
Subject key identifier:   5C:EE:B1:06:2B:86:F6:8E:46:E2:14:6A:36:AA:40:C6:65:DC:A7:F9
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer:       /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial:       01962E61DD6A90710073F033779E807F071B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number:          124B
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: MggUNL8VW9yE4LnaTyr5YJxrDwU.roa (hash: GpA5vo0L4EKCpZl/rQZR5bRixQFok1LnqW2Xg8KUiaQ=)
                          2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: /aEyuZRQ0AZlJgRKvGu7AyJCwJUShmRqBOAYl2Cjrn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:6a:90:71:00:73:f0:33:77:9e:80:7f:07:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=5ceeb1062b86f68e46e2146a36aa40c665dca7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:2b:a2:f6:19:3a:6e:0b:57:43:df:e2:b4:
                    84:b0:43:3a:81:7b:62:6e:eb:ac:b4:a7:5f:3d:29:
                    f0:6e:e4:01:7a:18:38:fc:01:b3:34:bf:08:9b:b8:
                    68:2b:5b:5a:46:e6:9f:97:52:22:70:63:58:c4:b7:
                    b6:87:fb:f3:65:eb:5b:78:95:7e:b3:48:29:e6:0f:
                    24:0e:83:76:ac:94:6d:00:e4:b9:ba:0e:e6:85:bd:
                    5f:5a:23:d9:05:d5:e3:36:c2:57:f6:54:2e:9b:e3:
                    f5:37:34:2a:2b:f7:29:68:7f:ed:03:c5:de:ae:3c:
                    00:64:03:fd:65:6a:c5:d3:98:d2:2f:2f:d7:f4:b3:
                    d8:c9:f6:60:8c:a6:70:f8:47:48:63:67:72:f8:ae:
                    a6:6f:03:2d:85:6b:88:d3:2c:48:20:e2:db:fa:85:
                    94:1d:ee:1a:98:59:88:91:db:7c:2e:9c:97:b1:63:
                    fe:4b:6e:70:25:c5:48:b1:68:c1:d6:c6:44:13:85:
                    8f:11:a8:c9:5d:da:72:a3:29:8e:cf:9f:7f:08:c0:
                    3d:6d:4c:1c:20:3a:4d:8e:a5:c7:7e:1b:82:60:ea:
                    72:2f:d3:f7:f5:79:85:29:d8:a6:94:a6:ed:a6:f0:
                    08:24:1f:07:3e:6a:c4:b4:a2:74:13:25:11:ac:5d:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:B1:06:2B:86:F6:8E:46:E2:14:6A:36:AA:40:C6:65:DC:A7:F9
            X509v3 Authority Key Identifier:
                keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:1a:82:5c:b7:99:c3:0f:fc:1a:94:9d:ec:6f:1d:b2:a4:
         27:32:6c:2c:a8:1c:f8:3a:99:87:5e:6a:ba:9a:21:07:3a:a7:
         9f:b1:78:8f:e4:d4:6e:94:97:62:19:e1:ea:8a:34:00:82:4a:
         5e:82:0e:6b:25:1d:f5:36:1b:f7:05:e3:30:5b:27:47:a0:1b:
         d4:69:23:79:47:6a:6b:6c:f3:3a:6c:01:d7:40:34:64:49:4e:
         67:e4:df:32:df:c9:a4:45:88:bc:7b:ec:f9:6b:79:99:c8:84:
         0d:bf:39:28:10:a5:36:ae:6f:0e:c1:73:7b:4a:d1:b4:79:c2:
         6b:df:b9:13:3f:0b:eb:88:f0:35:69:1d:4c:a9:48:f5:e2:f1:
         f2:16:f6:a5:0e:49:c0:6a:d6:69:dd:47:90:ad:fc:a1:e6:24:
         34:cb:6e:ef:7c:bd:ba:f8:0b:9f:c2:7b:84:83:9e:36:1f:66:
         9c:75:50:bf:cf:e3:ab:ec:ab:2d:e5:b7:ef:35:04:2d:f3:29:
         ff:38:1d:1e:43:23:69:95:e8:6c:47:8e:e3:fe:24:ea:db:f2:
         35:e5:b9:82:54:41:d0:3d:f6:1d:2a:89:60:87:0e:c6:da:3b:
         8e:54:62:2c:66:46:11:76:8c:7b:60:99:06:fe:b0:94:fc:ec:
         8c:05:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----