Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File:                     UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier:          dMbpU9IL5g/nIVCMfvQk2CGX2DupXnvHctTn4Y9dyTU=
Subject key identifier:   18:E5:E3:76:24:4B:49:97:F2:E4:44:1E:20:FE:F1:4C:D4:B2:DF:FB
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer:       /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial:       01962F74C70856A07D34BC4785442C2311C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number:          13B1
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: Sy9MkTO2BPRvKPMpsGDN-2TnmTk.roa (hash: Zvh1o0q4voreyVSKOLfHlxnIapN8G7OyPz3tE/wp4Tg=)
                          2: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: zw6Cr5IIg8CQG5d3VDw3DnUvoFvGU2H6EX/zF+HyLnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:08:56:a0:7d:34:bc:47:85:44:2c:23:11:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=18e5e376244b4997f2e4441e20fef14cd4b2dffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:13:4f:a5:f2:75:82:a0:9b:85:b2:f5:8d:e7:
                    3b:60:e2:ee:e7:0f:24:cb:1d:cb:13:ad:0c:50:15:
                    06:84:0b:84:76:d7:3e:65:bc:71:68:fe:5c:ff:91:
                    c2:4d:bb:c7:96:f1:7a:f7:fd:72:7a:43:3a:fd:d1:
                    44:9f:6a:69:6e:33:9c:0d:f0:8b:2e:dc:72:56:8d:
                    4e:77:8e:50:25:5b:4b:16:4c:07:4e:c8:96:bb:3c:
                    e8:f0:f1:c4:4e:48:56:39:29:33:d8:17:f0:7e:9e:
                    d1:ae:12:ce:62:20:87:e5:43:fb:d9:70:9c:99:75:
                    21:cd:db:fc:d1:de:7b:ee:26:3e:10:29:47:c6:b9:
                    48:15:75:3f:0d:1b:e9:43:55:9c:94:21:af:5d:0b:
                    31:6c:c0:db:08:cb:96:43:aa:fe:e5:13:d0:ee:33:
                    b2:9e:2d:f1:97:51:ce:35:17:c4:46:05:74:c6:c6:
                    c9:52:94:a1:84:98:44:ab:7b:63:db:b0:6c:cb:87:
                    2a:8b:fc:46:57:97:a1:b5:e4:40:0e:f0:2c:65:17:
                    df:40:e1:dc:1f:b4:4f:0d:7a:f9:be:a6:da:20:7a:
                    79:a0:5b:a9:f4:57:62:1e:bc:93:5a:bc:7b:be:86:
                    0e:92:ab:e9:0e:1d:e9:2d:05:8d:fb:da:d4:c5:e7:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:E3:76:24:4B:49:97:F2:E4:44:1E:20:FE:F1:4C:D4:B2:DF:FB
            X509v3 Authority Key Identifier:
                keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:fb:d9:14:32:f6:9f:5b:3b:c3:8e:0b:80:fd:8f:d8:6e:
         36:f6:ef:b9:29:c5:65:7e:0c:09:2c:2f:c0:50:3b:a0:2b:69:
         f4:ad:c0:db:94:d7:18:25:16:38:e1:58:a5:32:a3:19:48:fe:
         58:c1:87:d8:6e:3b:3b:82:a3:f5:2a:c8:6d:78:05:50:77:08:
         d4:af:a3:09:5a:16:86:c4:a3:53:9b:8a:55:6f:89:e0:3e:ee:
         0b:8a:76:25:63:6f:2f:34:b1:e2:4a:1c:4b:10:59:97:60:91:
         aa:d2:7f:33:28:a8:bb:af:ed:e2:57:80:67:be:24:77:c1:13:
         ba:5b:68:c7:75:ab:6b:c2:93:82:c2:e5:4a:6b:33:33:1f:1c:
         89:15:75:a7:0c:38:01:13:0f:71:5a:90:6e:43:54:58:2f:e9:
         55:df:e4:fa:59:9a:bd:84:8a:67:26:14:34:07:08:0a:79:b3:
         2e:cb:da:de:f9:ee:6d:b4:97:37:0a:61:6b:3a:58:db:44:14:
         8c:22:27:3e:33:ed:c0:ac:eb:24:fd:ee:00:d3:a1:9d:8e:60:
         00:d6:43:0f:81:d6:0f:12:76:85:25:73:ab:b3:3d:5b:24:cc:
         36:75:a9:93:1c:5d:72:38:09:46:83:cb:c0:02:76:0e:fa:69:
         c1:48:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----