Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          w9gZK+4IaJwOi1mNEmI/L6zFID8jz0S4e8FSampnDfg=
Subject key identifier:   1B:44:24:7F:95:B9:E9:D1:50:A0:F0:20:B8:DD:CA:04:7D:1A:E4:EC
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       01962E61EA4C4528F68D372874D1CD1BA9E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          12D3
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: HwgW1JpsmVFMGQc+VgjkDVg8R3G4DYy5HuvoA+f24SI=)
                          2: Xbs_--8RTj7NVNdnHjguAeVIjoo.roa (hash: wMCRs2Eg0y2oiiX2U9OgxEoMnX9Jd9Ptutf57Q4oqbI=)
                          3: dnwf0B7ghFQhubHpkV_b6aRmfaU.roa (hash: /ZpiVEXwKVsBxeMoy/4YPuoiF3m8c7Z0eTdmKuo2JTI=)
                          4: hhpnOw16P4QOaI6Yj27PCQwfLVA.roa (hash: ig3aG6IluBzRhUfWEo3gM6opkDOech5g/k8SP7esT2A=)
                          5: t5-UWdTdiMSI20SfoWThGHmUmkI.roa (hash: u89CpCdmqr7rKA71HZJcUjE6g736IrSgJ+2hOF705ak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ea:4c:45:28:f6:8d:37:28:74:d1:cd:1b:a9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=1b44247f95b9e9d150a0f020b8ddca047d1ae4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:80:b1:b0:59:80:9e:76:6f:ee:e0:eb:a6:
                    cb:67:76:c4:35:c9:61:22:59:25:56:11:5f:22:d2:
                    37:98:25:9d:b1:ce:0a:dc:3a:f0:f1:a7:04:b6:c6:
                    2c:16:01:a9:38:55:65:1a:61:96:ea:6f:93:14:08:
                    bc:6b:f0:cb:bd:87:70:56:07:0e:5e:f1:f8:4a:4b:
                    21:32:ef:b5:71:5b:91:dc:97:92:e4:60:ba:35:f1:
                    03:fb:0a:b6:dc:06:25:4b:30:e1:e3:2f:bc:76:72:
                    ac:e1:38:f6:40:30:ab:b8:14:a3:e3:6c:0b:06:cc:
                    b2:2d:25:56:51:04:fd:d5:d1:5a:6f:62:d8:de:d7:
                    45:ba:89:43:87:e0:56:cf:51:8b:67:81:35:ad:3e:
                    63:47:d0:90:e7:51:67:92:a6:53:06:62:db:45:10:
                    28:51:9e:ab:e4:68:57:2f:b2:4c:5e:1b:1a:33:2a:
                    5f:6b:19:56:2b:27:14:d9:f1:ef:75:b4:f5:23:6c:
                    0a:f0:65:5b:f7:0b:f2:77:8a:d5:8a:8d:36:3c:8c:
                    f7:13:5c:e3:46:c3:53:b0:ec:bd:1c:97:f9:cc:57:
                    b4:1e:d6:34:61:63:13:3d:a3:f7:a2:a7:e9:01:f4:
                    13:af:c4:6b:e3:62:cd:5a:9f:cd:90:9b:8e:f1:ae:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:44:24:7F:95:B9:E9:D1:50:A0:F0:20:B8:DD:CA:04:7D:1A:E4:EC
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e7:da:8a:17:67:ba:26:b4:cc:5c:28:5d:ef:f7:0b:5e:aa:
         5b:01:34:ea:29:c9:06:c3:91:33:04:3d:3e:bc:be:b6:13:33:
         c9:d9:30:ea:3d:9b:f7:37:c2:dc:63:c0:a3:c8:0f:a4:9e:a3:
         72:0a:c7:ff:14:dd:b7:a6:13:a6:ef:3b:1a:e9:91:5c:6c:2f:
         dc:92:36:1a:70:2f:95:3b:9f:54:f5:82:82:23:0e:52:32:66:
         ed:47:ed:ca:2b:dc:e5:1a:7c:79:53:14:ee:ef:27:d4:5c:40:
         96:ff:4c:21:41:07:0e:d3:49:eb:0c:19:5f:82:36:3f:e2:9c:
         58:17:65:22:18:37:79:ef:bf:3c:15:00:48:7b:33:68:34:08:
         cb:99:fe:6f:ed:5d:6d:d6:12:52:23:a8:10:2e:f3:9b:2f:05:
         d8:6e:b8:95:c5:a2:9f:f2:e4:a4:8f:8f:38:72:79:ff:97:c6:
         fc:cf:80:2a:d0:ea:9e:5d:94:8e:d1:92:d5:7c:0d:9c:a8:b3:
         86:03:3d:42:05:47:bc:64:80:6f:d7:59:60:4d:06:f5:01:d5:
         2c:2f:53:d0:e1:f9:76:c9:aa:73:74:9d:7d:9b:64:1a:04:22:
         ba:6e:e2:52:20:64:f9:9b:4a:5f:4f:3e:0d:e5:95:9c:05:1d:
         af:3b:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----