Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          ZXfQkipknaZk7EA3WOmht6VJ4nyqFDZpi5xndi53Mr4=
Subject key identifier:   95:4A:5E:53:41:EC:3D:1F:B1:0D:B7:61:FA:80:91:8F:85:14:BF:9F
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       01962E61C18408C664561BFA009E3D84AE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          0536
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: PdctoMgTw2-Nt4ZPBmRXGu0XZPo.roa (hash: n9lnP0LlXaq1mXYcdy8fdP94AepAw+KQCy1tAj0j/P8=)
                          2: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: O0lXxTOu/BH5dc6wTOZACIqjWrPS02aPaSfwxcgFP9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c1:84:08:c6:64:56:1b:fa:00:9e:3d:84:ae:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=954a5e5341ec3d1fb10db761fa80918f8514bf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:31:80:37:35:ee:4d:a5:5c:79:72:28:e6:
                    69:6b:35:c2:d7:f2:e5:24:ec:80:67:c3:cf:80:38:
                    22:1e:eb:fd:02:9c:b7:e5:a5:77:65:79:8c:27:8f:
                    47:bf:e8:04:df:6b:3c:75:90:b4:9a:d2:d2:ee:a6:
                    f1:aa:4c:a0:a6:7c:10:1f:ec:5e:b7:d7:d1:dd:5c:
                    63:dc:fd:80:c2:0f:cb:b6:89:12:71:57:20:d0:52:
                    84:ba:e8:aa:ff:95:31:dd:e2:8e:cb:99:2f:a8:04:
                    91:24:92:99:ab:b9:35:d3:70:fb:a5:d7:b5:02:02:
                    f6:53:84:06:4d:df:77:fe:3a:a9:c3:c5:c8:40:bd:
                    24:6d:34:9a:a7:04:93:54:65:af:f0:e0:8f:9a:5a:
                    d1:56:6a:fa:9e:f5:e5:ce:80:aa:57:a3:34:76:0c:
                    9d:d5:37:99:69:1d:2f:33:8f:02:48:e0:ce:1c:49:
                    cd:29:7d:ae:f7:d6:cd:31:26:c8:96:b0:2b:73:44:
                    c4:0c:0c:9c:40:ee:ea:29:2f:ba:dd:79:00:b6:1a:
                    b3:28:65:89:7d:77:2d:af:86:36:b4:b0:ae:04:e9:
                    d7:09:3c:68:5e:a7:c9:7e:e0:bf:a9:52:fa:18:ad:
                    45:b9:03:e8:33:6b:64:43:f9:42:0a:fd:c5:bd:b6:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:5E:53:41:EC:3D:1F:B1:0D:B7:61:FA:80:91:8F:85:14:BF:9F
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:11:70:43:3e:de:d9:5d:a0:93:1c:96:c8:86:e1:e6:09:
         a0:e5:9f:50:e8:41:83:66:0e:91:ee:ed:ef:79:b5:05:3e:11:
         73:01:53:63:49:fd:67:09:19:4f:21:aa:a9:cc:9e:1f:83:5c:
         17:72:2a:f9:ed:3d:1d:ac:71:35:11:71:54:d9:15:b4:30:28:
         56:2d:58:7e:2b:a2:f9:51:75:83:47:9b:24:36:25:ed:bd:84:
         51:e8:98:b6:01:a1:0f:99:57:0d:ff:7d:0e:0b:df:9f:e8:90:
         4d:d3:6e:12:7e:60:36:7e:4d:3f:fe:23:de:a1:02:ee:65:9a:
         58:d6:65:41:76:82:22:ef:ef:f1:76:2d:d1:7c:d0:46:fe:ea:
         62:8b:8e:1f:54:c8:29:07:6c:a8:00:73:69:13:77:7b:aa:8f:
         d7:c3:8a:3a:75:55:9c:8e:07:a5:82:44:0d:40:18:04:8d:e0:
         1d:58:b8:43:ab:3f:aa:a9:c9:0e:c3:d5:59:9d:35:0b:57:57:
         16:95:97:48:35:04:02:9b:36:2d:67:5f:f6:b8:2a:a3:6e:a4:
         f5:8c:f8:62:b8:be:76:e7:c3:97:9d:6f:fa:2b:ec:5d:c9:18:
         a5:61:2c:d4:3d:10:31:08:91:46:4e:bf:d7:cc:71:bb:23:09:
         2f:bc:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----