Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
File:                     umwdlY_wlMrxNGzGb3FszrbcUAk.mft (raw, json)
Hash identifier:          a2OAL6CD7UJJBidhbb8rI5IkQV1qYQTXRVqNbLY6GG4=
Subject key identifier:   1F:C4:E2:20:5A:AB:91:37:4F:A7:ED:D8:95:44:B3:BB:AA:7D:72:FE
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Certificate issuer:       /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial:       01962E98E9B6DF9C2D1AEDAE56060BA69DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
Manifest number:          11AC
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa (hash: gz7wbf7RuIAjOfumVR0HGG8azx+yCAuEY5X4YlBO90Q=)
                          2: umwdlY_wlMrxNGzGb3FszrbcUAk.crl (hash: WER0FPAfk8hI+M3DtUmvQ56dPsqF7/d3pUd/YTXIazo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e9:b6:df:9c:2d:1a:ed:ae:56:06:0b:a6:9d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=1fc4e2205aab91374fa7edd89544b3bbaa7d72fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:fd:89:8c:64:b1:95:42:b7:04:9c:fd:7b:
                    44:50:24:f3:32:4c:a0:b5:4a:4d:7f:f5:c6:6f:83:
                    55:71:38:ad:ad:ca:89:87:0a:0a:07:3e:a0:dd:b8:
                    b0:73:59:2d:27:d4:40:37:10:0f:c8:99:88:84:67:
                    40:11:ed:af:86:5b:a7:4e:d0:6f:fc:ca:27:6c:84:
                    5b:8c:20:26:65:cf:bb:b7:7e:06:67:b4:64:bc:17:
                    b3:bd:d1:31:4c:0e:51:dc:5b:fc:9f:f4:48:e2:7d:
                    5b:89:be:ed:64:7b:7e:6e:4f:5e:c9:12:51:24:26:
                    e3:03:be:25:21:bd:1b:26:e4:91:a8:97:a4:6a:aa:
                    fa:c1:9e:12:f0:ec:f6:1f:79:00:27:80:52:7a:c6:
                    f2:1f:5d:f1:4a:df:3a:de:bc:ce:88:7c:54:b8:a2:
                    3e:9f:90:f5:be:46:b8:0d:10:20:10:bb:18:23:d7:
                    85:5b:77:93:90:a2:a8:cb:92:7e:db:b7:6e:3f:33:
                    2d:40:07:2b:75:e0:81:b8:6c:8c:a7:38:38:d9:f8:
                    26:dc:75:62:b2:3c:79:07:2a:c3:d0:71:8c:72:8d:
                    16:1d:aa:db:bf:9e:f0:6d:b5:62:f0:6a:71:b0:8d:
                    40:c8:4f:54:69:5c:04:04:21:53:3c:49:05:1f:cb:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C4:E2:20:5A:AB:91:37:4F:A7:ED:D8:95:44:B3:BB:AA:7D:72:FE
            X509v3 Authority Key Identifier:
                keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:26:e1:3e:d2:bf:4c:ef:1e:a8:d4:e6:68:f7:20:08:c2:
         73:cd:a5:66:d2:ea:53:e6:45:20:06:6d:63:18:f9:d7:7f:3c:
         f4:c6:e2:27:e2:31:08:28:a5:bb:ac:48:1e:82:1b:22:60:79:
         04:98:70:cb:97:60:09:54:ac:cc:c4:ef:bd:ee:48:ce:60:f4:
         0c:e0:05:e7:f9:fc:ba:74:93:4c:47:0d:a5:49:70:0d:37:cf:
         c4:d8:87:d1:01:0a:0f:c5:51:64:5c:db:18:35:aa:5e:10:d8:
         3c:ee:6f:de:cf:da:95:fb:48:3f:34:85:5a:45:84:01:11:22:
         6f:c7:c0:cb:4b:5c:cf:84:c3:59:2e:7b:bf:3b:7b:4f:83:bc:
         a5:0c:2d:b3:ca:23:07:a2:c0:35:e4:11:80:ca:d4:66:de:a5:
         12:23:fc:74:8f:1b:73:3d:fc:21:5a:26:42:64:dc:f4:43:5c:
         e1:03:3b:0f:a7:d1:8b:94:06:02:92:20:20:4c:79:4f:bd:a6:
         7f:ed:ad:7f:3a:dd:97:d8:33:fc:9f:74:3b:83:be:8c:98:8e:
         d5:b1:36:7a:94:f8:2e:28:06:41:bb:45:42:6a:bf:0c:83:08:
         88:da:44:f3:60:50:8f:57:b5:59:bf:88:8e:0e:ae:95:48:45:
         8e:2c:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----