Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File:                     UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier:          a7k7sXekgQ8SUDsTR1O6R/MAngP5pEyIltlXcyw2GGQ=
Subject key identifier:   69:1C:40:89:53:E1:A5:9B:77:EE:68:02:E8:CC:64:12:CE:54:B4:86
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer:       /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial:       01962E99052EAD86961F9A578DB41969D2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
                          2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: y0BZVUt1xEtzBDtsVSvNpZQCebX2fFlqO2X864XFgHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:05:2e:ad:86:96:1f:9a:57:8d:b4:19:69:d2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=691c408953e1a59b77ee6802e8cc6412ce54b486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fa:a7:86:d6:4b:4d:15:55:a5:67:ab:d7:73:
                    6a:db:0a:f9:50:73:81:03:37:49:f7:e1:83:50:f8:
                    7d:76:22:f0:00:eb:32:05:cb:ec:53:fe:19:57:84:
                    e8:2d:de:f6:bb:e6:98:54:9f:45:15:35:64:ee:51:
                    e0:ef:e6:31:b9:41:a0:de:f3:b5:65:a2:42:75:4d:
                    d8:ba:4f:68:3c:56:08:1a:74:ae:16:75:d5:17:0a:
                    d4:36:21:35:07:5f:d2:d2:c8:05:ab:ec:37:e2:01:
                    57:c0:9a:d9:25:e7:16:9b:84:c1:33:83:5f:20:cb:
                    84:7f:ef:6f:0e:f9:9a:a6:b3:7b:cb:ba:cf:7c:65:
                    52:c4:d5:33:9d:87:5e:63:00:f7:e1:59:38:33:d8:
                    77:05:b5:bd:e3:95:d4:b3:72:2e:9f:25:18:86:71:
                    c3:0f:3a:7f:f4:f3:77:d4:42:64:2c:f2:b9:bb:05:
                    17:1d:a4:e6:c2:85:f0:00:b9:13:12:e8:93:5e:ee:
                    62:d5:42:3a:73:98:b6:23:92:a4:7a:9f:b4:ba:5b:
                    e3:43:40:4c:3a:54:56:86:d4:4b:00:43:b1:c5:44:
                    94:cc:d7:4d:24:45:be:80:f1:96:26:9a:ca:26:81:
                    1b:59:8a:fa:89:12:36:35:5d:97:55:a4:7a:a6:9e:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1C:40:89:53:E1:A5:9B:77:EE:68:02:E8:CC:64:12:CE:54:B4:86
            X509v3 Authority Key Identifier:
                keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:12:ae:d5:e9:35:9e:b9:7d:15:90:00:37:e5:b4:c0:b7:4b:
         83:1d:6e:26:7e:d2:98:98:88:3b:30:90:03:45:96:ce:17:c9:
         92:ab:ef:a3:42:52:ac:bb:b2:e3:cd:dc:0b:54:28:ea:06:67:
         fa:c1:42:86:c5:ff:1c:ab:91:68:5d:70:43:af:e7:95:a0:66:
         5e:17:6a:8e:fe:fc:69:02:fd:ee:d3:c0:28:ca:50:52:f1:a6:
         5a:36:4d:ec:7a:97:ea:d3:a7:7a:4f:42:76:14:ee:71:41:2c:
         38:87:dd:ac:3e:83:d1:18:ec:68:fb:9d:82:72:83:77:cd:1a:
         1e:f5:91:1b:79:20:2e:7d:dd:42:5f:de:1f:97:d7:54:1c:bd:
         46:b8:55:db:d6:61:bd:7f:ea:c0:55:66:86:8a:69:c2:78:0b:
         7b:56:7b:db:17:d7:10:32:ba:ff:63:c7:2c:33:b0:d9:c3:a8:
         1a:3d:88:4a:f6:3c:97:af:92:e0:c5:0f:19:11:ac:36:94:a8:
         dd:09:56:04:55:a3:74:0c:a8:f0:e3:ae:aa:81:48:0d:06:96:
         66:40:2a:9b:d5:7b:6d:17:b4:59:cd:61:42:e1:2b:bb:1f:4b:
         e6:58:40:8e:cf:8a:fd:66:aa:2a:57:14:54:df:df:77:72:41:
         a6:90:74:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQUurYaWH5pXjbQZadLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTg2YjE0MWM1MWM2NWVlYWJkNmU2MmVhNTIyZWRjNTk4
ODUyNmUwHhcNMjUwNDEzMTAwMTQyWhcNMjUwNDE0MTAwMTQyWjAzMTEwLwYDVQQD
Eyg2OTFjNDA4OTUzZTFhNTliNzdlZTY4MDJlOGNjNjQxMmNlNTRiNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/qnhtZLTRVVpWer13Nq2wr5UHOB
AzdJ9+GDUPh9diLwAOsyBcvsU/4ZV4ToLd72u+aYVJ9FFTVk7lHg7+YxuUGg3vO1
ZaJCdU3Yuk9oPFYIGnSuFnXVFwrUNiE1B1/S0sgFq+w34gFXwJrZJecWm4TBM4Nf
IMuEf+9vDvmaprN7y7rPfGVSxNUznYdeYwD34Vk4M9h3BbW945XUs3IunyUYhnHD
Dzp/9PN31EJkLPK5uwUXHaTmwoXwALkTEuiTXu5i1UI6c5i2I5Kkep+0ulvjQ0BM
OlRWhtRLAEOxxUSUzNdNJEW+gPGWJprKJoEbWYr6iRI2NV2XVaR6pp4vFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkcQIlT4aWbd+5oAujMZBLOVLSGMB8GA1UdIwQY
MBaAFFLoaxQcUcZe6r1uYupSLtxZiFJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQt
YzY4N2U3OTJiMjVkLzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZjQ1YTUtNzI4OC00NTM3LTg5ZGQtYzY4N2U3OTJiMjVk
LzEvVXVockZCeFJ4bDdxdlc1aTZsSXUzRm1JVW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRKu1ek1
nrl9FZAAN+W0wLdLgx1uJn7SmJiIOzCQA0WWzhfJkqvvo0JSrLuy483cC1Qo6gZn
+sFChsX/HKuRaF1wQ6/nlaBmXhdqjv78aQL97tPAKMpQUvGmWjZN7HqX6tOnek9C
dhTucUEsOIfdrD6D0RjsaPudgnKDd80aHvWRG3kgLn3dQl/eH5fXVBy9RrhV29Zh
vX/qwFVmhoppwngLe1Z72xfXEDK6/2PHLDOw2cOoGj2ISvY8l6+S4MUPGRGsNpSo
3QlWBFWjdAyo8OOuqoFIDQaWZkAqm9V7bRe0Wc1hQuErux9L5lhAjs+K/WaqKlcU
VN/fd3JBppB0SA==
-----END CERTIFICATE-----