Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File:                     UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier:          COpCa4kubQZYBlKbaGuVU8N0+xc9gRPOug67YuaWOJU=
Subject key identifier:   D9:72:07:29:B7:FF:49:AA:B1:60:B8:D4:A9:85:CA:77:FD:24:7C:1B
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer:       /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial:       01962E6186788279DCE43007A80813D7E9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: KUnlleWakTw8kulXHuvW/LKT6MQ71FsYPkvtnK6dUDk=)
                          2: wzHTUEDPSJ9fu6Go3MzUkAR9gVE.roa (hash: HH9rFvWwfqcHjpbJnsKsdwBfEEqoBLNu0bOt5Pi9+gU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:78:82:79:dc:e4:30:07:a8:08:13:d7:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521aa024758d8d104e1179c55039816636afe298
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=d9720729b7ff49aab160b8d4a985ca77fd247c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8f:99:31:69:09:a3:12:1f:8b:64:a9:df:b9:
                    43:c6:46:9b:02:81:cf:fa:71:3d:5f:1d:b5:1f:36:
                    6b:70:23:1e:88:57:8f:00:f1:66:bf:a3:15:3d:25:
                    11:17:6f:62:33:1e:67:f0:31:d3:bc:c5:2c:1d:87:
                    fa:5f:c2:2c:31:63:73:c0:ad:50:d1:75:13:59:c0:
                    47:e0:39:93:0a:ad:06:e3:69:ea:61:1f:9f:6d:9d:
                    a2:1a:d6:52:0b:96:09:e4:59:b1:5c:4c:63:18:47:
                    b8:c1:e6:11:a9:2f:92:01:89:e9:c4:86:08:13:6a:
                    f5:1f:cc:a4:57:f5:29:5f:e8:f7:65:2d:21:3d:36:
                    f5:e6:76:c0:2b:f4:71:65:87:2a:fc:51:ac:85:0a:
                    f6:88:ef:83:ae:2f:bd:3e:c6:a1:d0:0e:42:0b:86:
                    92:33:fd:e1:b4:96:15:53:93:54:79:4b:27:47:e5:
                    1a:15:69:1d:da:c6:b9:55:44:84:bb:52:9f:4b:c9:
                    b2:b4:54:c0:14:3e:05:42:f6:40:55:24:02:8a:b7:
                    16:fe:33:7f:cd:71:d6:42:7e:2e:f5:39:61:81:3a:
                    f2:47:60:92:34:22:29:a6:46:34:f3:09:94:a0:90:
                    1e:27:78:d9:3f:07:05:25:5c:57:ab:82:bd:82:33:
                    27:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:07:29:B7:FF:49:AA:B1:60:B8:D4:A9:85:CA:77:FD:24:7C:1B
            X509v3 Authority Key Identifier:
                keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:69:92:f8:9e:55:58:e9:fa:d3:12:43:02:ad:e2:ad:c1:
         ad:51:41:ce:7a:20:30:03:ca:6d:13:25:65:59:eb:c5:14:a1:
         6b:07:c0:37:2c:6b:7f:2f:b2:a8:90:a5:fa:01:de:37:c4:b2:
         84:71:7e:b6:be:da:51:31:24:18:12:3e:08:2f:60:63:10:6b:
         71:81:62:2b:d9:92:5f:e8:60:d9:69:32:3a:c7:e9:51:0a:5e:
         1a:4d:41:ce:33:fb:a8:31:be:9a:1f:87:4a:75:73:60:4f:15:
         7b:cb:a9:80:ac:f4:ea:54:ef:d0:27:f7:0e:d5:45:ab:cd:db:
         7b:84:c9:da:bc:13:e7:93:31:b5:d1:23:1e:a0:7c:b6:f7:4e:
         65:36:9f:2b:58:e1:e8:30:4e:a3:2c:3f:d7:a7:d4:d0:96:92:
         52:2f:3d:c9:55:9e:51:99:0e:bd:ab:d3:5a:f3:91:75:db:52:
         ec:44:b1:6e:2b:ef:38:94:27:a7:fe:e6:c2:f1:d6:f7:1d:1a:
         ce:1e:5b:4a:db:4d:f4:dc:4b:0b:b3:38:0a:5b:ad:fb:00:f2:
         d7:53:6d:b2:65:87:a6:5a:a6:0a:f3:da:cd:ab:d4:84:02:60:
         5e:8f:8d:6b:31:cf:bb:91:04:f6:e7:67:8a:80:3b:5a:75:ce:
         24:a9:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----