Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File:                     ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier:          HJx7nCAx/b2XOJUcQbLANl6X/ctivS3rRgM5uYthuCY=
Subject key identifier:   8A:FD:B0:7D:D9:AA:76:BA:85:7A:79:99:D3:98:84:4F:A9:E1:E2:4B
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer:       /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial:       01962ECF83A6D01832982AFAD97A7C32C4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
                          2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: WWLIJiZ912BH4CPBuOpf4FuJdRpAPivVtvVL5wCg1rE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:a6:d0:18:32:98:2a:fa:d9:7a:7c:32:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=8afdb07dd9aa76ba857a7999d398844fa9e1e24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:72:f1:01:b3:bd:48:66:a9:98:72:5d:cd:
                    11:b9:ef:fc:f2:60:d7:c9:5d:b5:c8:af:88:30:56:
                    b0:b8:a5:37:f3:fc:c3:a6:44:d5:d9:8d:e7:44:dc:
                    71:81:b1:22:de:d2:58:c8:0f:3d:a0:f8:c4:2d:2f:
                    f3:5a:99:31:c5:b5:bb:9d:6e:bf:6b:54:9f:cb:eb:
                    c8:2d:31:07:7c:8a:d3:20:ac:09:23:d7:86:4d:38:
                    45:4b:76:c8:5e:e4:d5:fe:a9:4b:b8:51:c4:20:51:
                    29:07:9f:7b:c8:6b:5e:7e:54:04:2f:b5:90:1d:60:
                    1d:94:35:55:92:5f:3a:42:0f:27:3f:52:76:d6:52:
                    a9:36:94:a4:64:09:dc:79:16:66:4b:f3:cf:70:85:
                    31:e7:a9:64:3a:bf:71:e5:58:c5:c9:2f:62:95:29:
                    92:f6:2e:be:83:12:83:09:8f:f8:47:94:47:b4:26:
                    aa:10:de:20:47:d0:11:29:71:a0:c2:b3:24:6e:09:
                    bd:50:1a:87:78:23:fd:c4:35:cf:bd:0f:b9:ee:fe:
                    d5:7a:2c:ce:b5:f2:2e:5e:35:4f:db:3c:b0:d2:90:
                    bc:6f:1d:40:a4:cc:6c:4a:96:a5:f4:94:36:50:cb:
                    e1:74:9e:4b:83:58:7f:5a:a0:6a:19:f1:84:a6:8a:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:B0:7D:D9:AA:76:BA:85:7A:79:99:D3:98:84:4F:A9:E1:E2:4B
            X509v3 Authority Key Identifier:
                keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:a1:82:b9:2a:a1:05:33:c8:5f:74:b7:6b:d6:52:51:97:
         bf:fc:8d:42:ac:9e:fa:7e:0a:87:9a:f5:15:12:4b:63:c5:28:
         2a:e0:0d:5e:ca:60:e9:ca:76:53:69:d5:8d:c4:95:af:17:13:
         8b:06:d2:9a:75:f0:76:60:ab:85:3a:c5:54:52:94:e5:e0:22:
         ef:fa:07:60:27:67:c5:ab:2e:9c:1b:de:9f:f5:a4:b9:f1:41:
         3a:64:eb:bd:72:7f:e3:01:a9:fa:d3:65:40:51:29:d9:e9:54:
         da:72:bc:b4:3d:51:cf:4a:04:da:62:83:4d:8a:cd:e2:55:5a:
         a2:09:07:b4:05:72:00:ae:33:91:16:9f:67:a5:0f:8e:78:5d:
         01:e4:1b:36:2a:0e:8a:6c:e6:47:c7:f2:3a:d9:6f:e2:8b:f9:
         9f:fc:4b:7e:83:fa:16:3c:97:ee:b4:15:19:4d:2e:84:ed:d9:
         81:c4:7d:e0:6f:a5:5f:c3:e4:6e:0e:e3:f5:dc:37:ef:1f:44:
         f1:f1:1a:98:dc:b8:d2:31:bb:8e:2d:53:e1:91:94:1f:55:f2:
         79:82:3a:0e:22:37:6f:78:9e:d8:e2:6f:6d:b1:1f:03:d2:96:
         7f:0d:0f:53:f0:65:66:78:eb:f0:82:ce:15:e9:c4:fd:49:c2:
         be:64:87:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4Om0BgymCr62Xp8MsTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3
OWM0NWEwHhcNMjUwNDEzMTEwMTEzWhcNMjUwNDE0MTEwMTEzWjAzMTEwLwYDVQQD
Eyg4YWZkYjA3ZGQ5YWE3NmJhODU3YTc5OTlkMzk4ODQ0ZmE5ZTFlMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWJy8QGzvUhmqZhyXc0Rue/88mDX
yV21yK+IMFawuKU38/zDpkTV2Y3nRNxxgbEi3tJYyA89oPjELS/zWpkxxbW7nW6/
a1Sfy+vILTEHfIrTIKwJI9eGTThFS3bIXuTV/qlLuFHEIFEpB597yGteflQEL7WQ
HWAdlDVVkl86Qg8nP1J21lKpNpSkZAnceRZmS/PPcIUx56lkOr9x5VjFyS9ilSmS
9i6+gxKDCY/4R5RHtCaqEN4gR9ARKXGgwrMkbgm9UBqHeCP9xDXPvQ+57v7VeizO
tfIuXjVP2zyw0pC8bx1ApMxsSpal9JQ2UMvhdJ5Lg1h/WqBqGfGEpoqi7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr9sH3Zqna6hXp5mdOYhE+p4eJLMB8GA1UdIwQY
MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt
ODIwZDVmYzQ0ZTM1LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1
LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0yhgrkq
oQUzyF90t2vWUlGXv/yNQqye+n4Kh5r1FRJLY8UoKuANXspg6cp2U2nVjcSVrxcT
iwbSmnXwdmCrhTrFVFKU5eAi7/oHYCdnxasunBven/WkufFBOmTrvXJ/4wGp+tNl
QFEp2elU2nK8tD1Rz0oE2mKDTYrN4lVaogkHtAVyAK4zkRafZ6UPjnhdAeQbNioO
imzmR8fyOtlv4ov5n/xLfoP6FjyX7rQVGU0uhO3ZgcR94G+lX8Pkbg7j9dw37x9E
8fEamNy40jG7ji1T4ZGUH1XyeYI6DiI3b3ie2OJvbbEfA9KWfw0PU/BlZnjr8ILO
FenE/UnCvmSHsQ==
-----END CERTIFICATE-----