Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File:                     uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier:          kFF2ti3v9cpcLBr6WrGQJEA1Fuh5DLhnGdNUCQLDUGA=
Subject key identifier:   10:05:1A:9E:BD:FC:45:70:F9:5F:35:AF:77:D2:EE:8F:B2:0E:2C:F5
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer:       /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial:       01962E6207521248C3EA27CCCF90E2054332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number:          0CF5
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
                          2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
                          3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: VRKXUcqjQ5i7SWfjO+9CcRGR9J5/AHx1XZpqrmcvhwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:07:52:12:48:c3:ea:27:cc:cf:90:e2:05:43:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=10051a9ebdfc4570f95f35af77d2ee8fb20e2cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:07:7b:de:bd:bd:a9:28:8e:0a:ca:1b:cf:10:
                    8b:84:08:8a:72:e3:9e:75:d7:fc:f6:c7:82:f3:84:
                    dc:ac:02:35:a6:be:a6:87:13:af:10:01:83:8e:ab:
                    e8:46:2c:22:26:77:a9:41:3f:4e:3b:8a:3a:22:6f:
                    a3:1b:ed:ae:14:a4:c2:be:f7:63:2e:9f:85:bb:65:
                    9f:c5:6c:83:12:45:0e:1a:d1:cc:ab:91:38:ee:b4:
                    c5:fe:36:02:2e:9d:35:89:1f:c2:ac:5d:40:72:81:
                    5a:18:25:f7:1d:00:94:f2:7a:e3:2b:e5:ae:bc:f9:
                    75:20:73:fa:bd:b0:f2:07:20:ae:28:eb:8b:f6:99:
                    f9:a0:f8:63:b5:f6:48:e3:1f:72:9c:19:4f:4b:b1:
                    85:d0:3d:db:9e:52:c1:ce:d2:39:7c:e7:6d:51:3b:
                    b4:95:8f:98:df:6c:ab:30:32:85:8d:0d:79:7d:ff:
                    61:96:b1:65:0a:26:25:88:dd:bf:7e:50:16:57:fe:
                    3e:42:ab:19:7c:f9:a5:04:36:f1:82:07:99:8a:f5:
                    41:3d:6c:f1:eb:38:9e:bf:3d:c0:6e:1a:d1:f7:5d:
                    e6:5c:56:03:d5:2a:aa:d7:38:8f:19:47:6b:ec:8c:
                    9b:1e:a7:89:b6:94:0b:1c:4c:1c:dd:39:9e:53:be:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:05:1A:9E:BD:FC:45:70:F9:5F:35:AF:77:D2:EE:8F:B2:0E:2C:F5
            X509v3 Authority Key Identifier:
                keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:39:9f:87:9b:23:e1:b5:f2:59:1b:bc:f2:4e:5f:a2:36:
         13:e3:9b:37:33:28:45:5a:9e:ee:70:0c:9f:8f:e8:fe:ad:98:
         50:86:f4:78:52:15:69:b6:f4:f1:75:91:37:c3:42:a1:ea:a2:
         4c:cb:e8:3d:94:66:6f:5e:54:6f:2a:84:b7:6e:7d:5d:08:c2:
         22:41:9a:76:40:f2:f1:5f:6b:67:1f:a8:bc:9b:b7:7d:25:05:
         f6:44:5e:85:25:13:0c:3e:ae:b3:fd:d9:8c:18:7d:7b:e7:62:
         b7:a8:11:e2:f3:9c:d3:14:96:69:4b:ae:5b:41:fb:a3:a3:4a:
         7f:b2:48:77:2d:cc:29:05:4c:db:ae:34:80:cd:d8:5d:9f:5e:
         ab:dc:c0:80:ed:23:4f:dc:6b:55:9e:78:9d:81:73:2c:b1:cb:
         fd:69:2a:0e:93:0a:c7:8a:49:31:a3:10:c6:79:85:4d:b4:3c:
         43:56:14:64:c9:e8:18:f4:e8:52:98:ee:83:0e:34:e3:3c:28:
         2b:1d:0b:3e:09:04:32:a2:03:4b:78:5d:5c:2d:37:61:29:3f:
         00:be:c2:1d:2c:93:ed:e4:0f:de:05:d2:27:2f:f5:38:73:37:
         b9:3b:df:0f:58:db:4b:53:87:21:8c:6d:1a:41:75:c1:59:bd:
         33:28:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----