Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File:                     UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier:          HCoZqw0hODsKi9X+/4QPoduLKjndtdnG4mmIQuBHv04=
Subject key identifier:   17:39:69:17:A9:25:91:41:A6:EF:37:DB:CB:07:A1:EE:37:1E:24:4D
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer:       /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial:       01962E61DF96DC0954ECBE1280E780F453F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: +kxGtiKb+6axuKevPRn/h2loZ3LoD2BwSyG95JvsDU8=)
                          2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:96:dc:09:54:ec:be:12:80:e7:80:f4:53:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=17396917a9259141a6ef37dbcb07a1ee371e244d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:7b:ff:f2:3b:10:64:26:e6:43:05:d4:94:
                    64:ac:fa:ab:c0:af:45:d7:35:9e:0b:86:a9:c0:6e:
                    10:aa:bd:ac:25:d8:6e:60:a9:28:78:c8:d7:27:a5:
                    b2:52:1f:18:ef:7f:2b:a7:dd:51:89:f0:36:9e:51:
                    95:33:4c:57:73:41:12:a2:cc:27:4b:d5:46:ea:5f:
                    64:d1:cb:74:0e:59:ba:e3:1c:aa:17:c0:5e:41:72:
                    de:c7:e1:17:82:2d:34:c7:88:f8:cf:72:ce:9a:7a:
                    37:45:54:ae:14:e0:72:c9:6e:89:ef:a1:9c:33:ec:
                    11:30:80:8c:ec:a1:ae:56:6e:01:f0:23:a7:e0:51:
                    55:38:ff:ef:77:8e:14:6b:04:20:eb:57:29:25:72:
                    a6:6d:34:2b:c1:4d:24:f0:03:52:98:f9:8a:51:03:
                    2c:19:37:9d:a4:69:ba:99:4e:63:ee:be:81:b3:5b:
                    91:d6:cb:75:a8:6f:b0:8b:38:da:99:7f:54:1f:ce:
                    8d:9c:e9:bd:ae:cb:7f:0f:b3:01:d0:20:d1:81:29:
                    68:c7:48:f2:1d:5e:2d:b9:0f:a8:29:08:f8:e5:03:
                    ec:57:45:01:c5:ec:eb:16:8d:49:3d:c4:8d:6e:93:
                    8c:7c:48:e8:17:00:3a:3c:63:7c:6b:fa:6a:6a:c2:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:69:17:A9:25:91:41:A6:EF:37:DB:CB:07:A1:EE:37:1E:24:4D
            X509v3 Authority Key Identifier:
                keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:a6:a1:4f:8c:44:3b:f1:79:c8:d7:33:f7:46:9f:4e:bb:
         9f:c6:ea:ad:58:41:8f:54:00:19:c5:81:13:9a:1f:5a:c8:96:
         6a:c4:c7:fa:08:fd:6f:f4:af:6e:d5:aa:09:ff:b0:39:5e:5a:
         a3:bf:2e:c1:9d:71:7f:d7:92:ff:d1:94:73:1e:c9:e7:37:07:
         72:30:f2:c3:08:7c:ff:7c:6e:a7:3c:01:64:a8:05:d0:eb:f0:
         25:95:5e:92:92:ac:6f:56:45:ed:0b:cf:ac:73:d8:68:34:6a:
         07:dd:2a:f9:fb:b8:e1:b3:66:02:7d:61:d8:00:a8:7e:80:04:
         1c:a4:2b:bd:57:99:1e:54:6e:4d:72:e8:3d:53:85:d2:23:95:
         34:ba:96:ee:84:85:69:0f:38:83:06:b4:ca:b0:e6:f7:ab:98:
         8c:a9:14:55:46:85:ea:6d:25:9a:e7:b8:49:f7:ec:44:35:cc:
         5a:b5:67:bb:5c:3f:e3:73:9d:4d:0b:80:46:09:a9:42:34:dc:
         64:80:87:3c:d4:49:5c:91:a8:69:69:32:cf:d8:da:34:50:03:
         56:cc:93:1f:34:14:2c:ad:16:6a:e4:91:3b:7d:03:fd:c8:f7:
         23:c1:db:a8:1f:4f:9b:46:13:7f:d7:01:e5:3a:dc:d6:87:3f:
         98:e7:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----