Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File:                     UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier:          JQ4+GpwpBlIwR+rRsWP51OnYt4eU9JRpmiTeIT9hVs0=
Subject key identifier:   B8:94:F1:C7:1E:4B:6B:99:1A:CD:CA:F0:48:D1:D4:A0:B3:1E:7A:C1
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer:       /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial:       01962F3DC7FDC1BE84A59F1BBA77B530DEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number:          0133
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: /Ihvd3mUd4UefPM5cwOqkBilvJxUSkO5mX7IlX4fk8E=)
                          2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c7:fd:c1:be:84:a5:9f:1b:ba:77:b5:30:de:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=b894f1c71e4b6b991acdcaf048d1d4a0b31e7ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:1e:fd:a4:37:6b:55:4f:0d:21:a3:2e:20:
                    1a:b6:48:b0:88:57:f9:13:5f:67:24:74:72:e7:29:
                    02:59:65:03:f0:2e:d3:09:cb:81:94:a7:f5:ef:e3:
                    e1:3a:0d:09:63:29:0d:17:d1:81:80:8f:3b:05:c9:
                    fb:c7:39:30:5d:19:74:b3:e5:3d:73:f9:fc:b7:94:
                    8c:f8:11:0b:fc:f6:74:ab:24:56:c7:00:e2:a1:48:
                    e1:f2:9e:ca:62:fc:93:e2:05:0c:e2:2e:87:3c:7a:
                    81:3d:60:f2:5e:5f:cc:73:59:85:f0:75:b6:e5:ef:
                    84:f3:fc:e1:61:8a:bc:a4:10:6b:38:a8:95:98:db:
                    cf:68:cd:e7:7c:24:98:9b:dc:56:97:8e:da:d7:c2:
                    d7:f6:91:6c:eb:cf:79:9d:14:e7:61:1c:0a:6f:81:
                    70:ae:6b:63:3f:d1:8e:e0:1b:6a:ea:3e:f5:f3:ba:
                    02:49:86:68:1a:49:de:41:23:6f:46:05:a2:2c:7d:
                    8c:7f:7c:9c:dd:e7:44:e9:be:82:b3:a5:aa:1c:65:
                    f0:60:8c:8e:02:99:18:6e:bd:23:53:6d:41:11:c7:
                    c5:4a:06:6f:74:ca:cb:1f:d7:a4:79:06:1c:46:6b:
                    4f:60:be:95:2c:b2:c6:53:7f:f2:1c:d8:23:6a:3f:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:94:F1:C7:1E:4B:6B:99:1A:CD:CA:F0:48:D1:D4:A0:B3:1E:7A:C1
            X509v3 Authority Key Identifier:
                keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:3a:90:18:8b:6e:bc:b9:10:fb:a2:35:ae:68:42:a8:52:
         cf:91:fe:2a:df:86:73:0d:2b:2f:59:c1:f5:14:3d:2a:51:dc:
         9f:9d:9f:eb:c1:da:f5:fd:fc:b6:0a:d7:eb:08:38:9b:0d:88:
         fc:8f:da:40:4b:cf:ef:18:21:a8:b3:0c:30:8f:be:c0:7a:c1:
         74:a6:28:0f:95:87:c2:c6:95:66:19:fc:d5:53:9f:85:c7:f2:
         5a:60:0c:30:80:98:f7:29:ad:d8:6b:55:2c:87:d3:ae:87:43:
         0f:62:77:d7:f9:42:55:82:59:aa:4a:63:26:c2:37:73:e9:c4:
         29:fc:2c:87:c9:7a:43:36:38:6b:6a:96:d0:e0:43:78:43:56:
         49:2c:a2:10:e0:7d:84:68:27:2a:91:2c:c8:06:6b:b1:d0:21:
         99:12:8e:dd:d0:dc:25:7a:41:02:c6:6a:46:73:7a:cc:3a:6c:
         cc:b2:f6:88:c0:16:cb:67:d7:62:1b:ae:c9:e6:5c:f2:41:3b:
         e6:cb:fe:c0:a9:22:8f:92:74:e0:c7:e4:3d:5c:0a:1d:44:b4:
         6f:3d:03:62:dd:d5:91:a1:ff:99:b7:cc:12:6e:c2:a5:cf:12:
         6b:f1:99:8a:3e:35:0a:04:ed:bc:21:7e:c9:8b:f3:55:e7:3b:
         51:1e:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----