Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File:                     Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier:          GxYKNBIWNhgtgHsAVlsdgIluG0ycppnBFtcIJ6pVcbw=
Subject key identifier:   0F:12:63:FC:FA:C3:F0:B2:3D:C0:25:61:A3:9E:D9:72:33:08:CF:15
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer:       /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial:       01962ECFA4CD542C09C5DC97C65421B9D817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number:          0B54
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
                          2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: +Xhx/tR6JhGBA8LBphJkhhMQ7hNBeGS947mdB/Dpmhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a4:cd:54:2c:09:c5:dc:97:c6:54:21:b9:d8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=0f1263fcfac3f0b23dc02561a39ed9723308cf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:e6:e0:01:8a:25:31:8d:95:f9:00:24:0e:
                    ee:56:46:94:27:a6:9c:15:74:91:85:32:56:27:46:
                    f1:74:fc:79:f3:04:55:c6:d0:3a:a0:16:8b:9e:15:
                    94:6f:39:0b:eb:57:4a:c6:85:d6:0f:02:89:41:1e:
                    22:9b:5b:95:fc:5a:8f:0a:3f:2e:94:2b:13:3b:2a:
                    e2:c9:ef:cc:ac:50:22:a4:35:0f:ce:f9:77:d7:27:
                    34:47:1d:4d:68:77:24:4e:fd:87:09:a8:9d:f3:55:
                    5d:e4:78:14:2f:8c:fb:31:0a:8d:f6:46:28:f0:6d:
                    9a:ce:23:0b:20:ea:d1:6c:a2:75:1c:0c:0d:f6:5e:
                    eb:a4:6f:92:63:11:2e:84:d1:1f:6f:38:73:05:d7:
                    71:f7:ee:0b:e6:d1:71:f7:65:69:96:fe:fd:b7:1d:
                    cc:d4:3f:08:73:54:8e:05:b5:f1:89:66:7c:ea:72:
                    88:6f:ec:84:0b:fc:ac:58:b1:1a:39:73:e4:26:c3:
                    55:ff:62:5a:5e:9d:d5:51:b1:fc:fe:ab:34:01:6b:
                    c5:d5:87:cd:af:e6:62:15:db:ae:e5:9d:72:c9:0f:
                    65:c9:a4:4b:aa:99:23:06:f3:72:27:9d:b2:e2:75:
                    34:45:a7:06:d1:4e:7c:37:31:dd:b5:9e:51:02:91:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:63:FC:FA:C3:F0:B2:3D:C0:25:61:A3:9E:D9:72:33:08:CF:15
            X509v3 Authority Key Identifier:
                keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:aa:29:17:04:2c:d7:52:bf:b8:fc:8b:29:b7:1b:a8:cc:
         ae:e9:37:02:0a:f1:2a:c8:f3:a8:28:87:f4:16:5d:9c:00:cc:
         92:d5:4a:3c:02:13:53:45:e2:34:68:fd:63:8a:dd:bb:3a:d3:
         77:99:0e:b7:18:14:6d:52:f1:ae:33:ee:4e:e7:05:b4:cd:eb:
         0f:89:15:26:5e:24:f5:87:ae:07:21:91:ae:b6:a7:1b:21:09:
         50:4e:91:3a:af:d8:14:0b:05:c0:ac:da:9b:4d:67:5a:99:67:
         76:9f:37:ec:25:a6:95:1f:ef:4f:17:57:a1:55:20:8d:0b:5e:
         69:16:79:11:d4:a6:10:22:22:fe:e7:8e:ab:66:4d:63:11:55:
         dd:33:9d:e6:e4:8e:58:c7:77:97:b8:3d:72:1d:bd:96:97:44:
         c1:16:c2:4d:53:15:2f:7c:4a:2c:d8:8d:ac:cd:ac:ff:2f:19:
         ef:c6:7b:d2:93:89:d0:70:3b:b2:b7:80:ea:6f:ad:17:0f:2d:
         1b:bc:ba:1e:ba:8e:f0:ae:a3:1c:5d:89:a7:a9:80:98:ab:6a:
         26:e8:99:50:b6:90:8b:cc:89:71:bf:09:35:50:75:9a:cb:88:
         74:07:71:c7:13:1f:f2:64:7c:89:69:cb:b9:26:6d:1f:8e:2e:
         25:94:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----