Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File:                     UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier:          VR55kh6R7fQmWe1TZ3hXkiGAqV86537pFh6jDq5q8dI=
Subject key identifier:   E8:6F:BC:29:E4:91:6A:94:76:4A:63:39:2D:1C:ED:78:B5:9A:06:24
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer:       /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial:       01962E61FCCBB8C0E5507B64A869EF67B577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number:          A1
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: qztpHwJGNtk9jpvRNbdYFuucdOujid9FzV5hshGt1tQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fc:cb:b8:c0:e5:50:7b:64:a8:69:ef:67:b5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=e86fbc29e4916a94764a63392d1ced78b59a0624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:ac:67:14:5b:14:04:b5:07:98:43:27:7c:
                    e0:d4:1c:4d:66:b4:d2:a0:dd:64:b5:03:a5:e0:3b:
                    ca:55:f0:8c:29:ca:4e:78:b2:8f:4b:59:b4:93:c7:
                    cd:2e:f3:a7:ba:30:54:0a:17:7d:82:29:29:e3:45:
                    c7:cc:3b:3d:c2:2c:f6:db:8b:4e:18:ab:4f:d8:42:
                    a0:4e:d7:b1:4b:34:47:d2:49:79:8f:35:aa:82:1f:
                    25:cf:5a:75:c4:3e:60:01:50:ce:1c:8c:10:f4:d9:
                    a8:97:36:35:f7:c9:88:d4:65:9e:cb:26:cb:a7:b2:
                    40:14:fd:c1:9a:e9:af:89:9d:b6:9b:07:70:20:f0:
                    b8:1a:86:07:36:c8:fc:c2:12:99:ff:1e:00:ef:47:
                    f2:26:8c:2b:d3:7e:d2:c8:c4:94:ef:d6:b7:a4:3c:
                    b6:32:27:e3:b3:83:42:e4:a3:15:67:ec:f0:e7:65:
                    05:9f:54:22:c6:70:17:26:56:5b:64:71:1a:4f:fd:
                    54:a7:46:87:98:90:5c:63:dd:db:d5:1c:b6:44:2c:
                    1a:6b:81:d9:de:ca:1a:63:97:ca:49:c9:02:88:be:
                    3b:38:34:db:ef:fd:d9:02:7f:75:d5:58:9a:72:4e:
                    86:56:66:3d:11:87:79:4f:66:cf:d4:36:26:5d:2c:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:BC:29:E4:91:6A:94:76:4A:63:39:2D:1C:ED:78:B5:9A:06:24
            X509v3 Authority Key Identifier:
                keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:4f:57:c9:e5:ef:48:16:91:f1:df:e9:85:c8:5c:c5:05:
         58:ab:3c:6b:d7:c5:14:99:3e:c8:7d:82:f4:e6:c8:67:49:ba:
         96:90:d8:db:a4:83:12:1c:1d:77:b7:e8:0a:b9:df:db:3b:f0:
         9b:80:cf:4d:9a:47:b5:e3:f5:10:f6:8c:60:57:a4:82:19:f9:
         33:eb:eb:32:f7:36:59:7f:5a:14:4a:d0:7f:cb:27:90:c5:03:
         b5:82:e3:58:a4:16:34:b9:9f:d2:be:7f:78:58:8c:5c:9f:37:
         50:5d:c3:df:6d:cd:6c:90:23:ba:c2:03:f0:4b:35:09:bd:e7:
         85:51:d1:83:a5:ab:ee:e0:13:34:e6:21:6c:c6:19:24:79:08:
         fb:ad:79:6e:06:68:a6:61:a0:e6:4a:df:78:69:21:a6:f1:17:
         cc:a1:c7:cf:f9:ab:bd:9e:c3:9d:8a:e5:86:d9:84:06:e0:d3:
         e3:1a:67:4d:a6:e5:de:4a:9a:28:18:0b:0e:77:78:f7:2e:cf:
         5e:00:ec:2b:7b:c4:05:7e:49:6d:7b:e4:8f:41:49:8f:52:73:
         fe:24:e4:e1:1a:4c:b4:14:76:20:ea:0b:6e:80:0f:16:2f:52:
         d0:c2:6d:61:48:dd:9d:ae:b9:4a:55:e9:3a:51:f9:2b:9f:26:
         69:ab:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----