Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File:                     UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier:          yFsQNZfPHOXDEEGFMpVRTNtEfLCBeUuaueWKLEZjBN0=
Subject key identifier:   C8:80:47:63:6E:42:10:EE:0D:EB:FF:0D:03:16:45:24:A9:33:FE:93
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer:       /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial:       01962DF44092370968DF4E9A86125F0CD882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number:          144D
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: o2ddu4xEIUSyayR2DG84MdHZn3H5Fk7m2HpX/cBrWNw=)
                          2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:40:92:37:09:68:df:4e:9a:86:12:5f:0c:d8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=c88047636e4210ee0debff0d03164524a933fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:90:78:8e:25:69:8d:d7:35:10:e5:cd:a4:
                    c4:30:92:85:8b:f1:3f:98:7f:28:4c:c1:b2:e2:4a:
                    0d:02:b5:06:d8:ad:9c:a2:dd:85:a7:64:5d:24:8d:
                    ae:e1:c8:5c:d4:e8:37:e9:db:48:49:89:c2:27:47:
                    5c:aa:0a:db:85:a0:4a:ce:f2:0a:c1:37:4e:49:93:
                    91:d9:52:7a:7a:74:9d:74:36:0b:b3:ed:ca:cc:84:
                    22:ae:e1:b0:7f:35:c1:ed:de:22:7b:68:96:d1:65:
                    8d:9b:31:67:5a:af:ad:c6:ea:3a:ca:cd:d2:73:dc:
                    96:ff:74:08:3e:77:50:d4:ab:a9:ac:98:16:cd:a9:
                    bc:a6:fc:2c:ee:6c:94:d2:71:97:29:fa:13:98:4d:
                    87:6a:a9:bd:8b:0b:40:29:55:d5:03:b1:f0:79:c6:
                    98:05:95:4b:ab:de:e8:3a:a2:61:62:b4:fd:57:03:
                    3e:b5:2d:96:b2:61:8c:61:82:ce:01:6f:a3:36:37:
                    22:01:a1:8f:17:dc:99:4e:ed:00:d4:1f:82:bf:69:
                    66:ea:23:4c:49:1f:55:d6:22:9e:e2:c8:fc:f7:86:
                    a1:30:b7:9b:d9:c1:e5:6f:08:5c:40:f0:9b:15:e6:
                    60:cb:ac:66:c8:59:e4:33:3b:17:55:04:6d:58:cb:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:80:47:63:6E:42:10:EE:0D:EB:FF:0D:03:16:45:24:A9:33:FE:93
            X509v3 Authority Key Identifier:
                keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:5c:63:74:71:75:f1:55:da:36:ef:5e:5a:16:26:6a:42:
         e3:5f:ee:b4:c7:a9:34:01:d8:4f:8b:15:58:b5:00:07:41:9f:
         dc:c6:84:90:70:b6:35:37:d2:06:ad:74:46:96:b8:12:65:56:
         3b:9b:82:79:54:39:13:38:24:8e:22:61:aa:b1:60:59:62:9d:
         dc:15:47:65:13:5d:0d:21:a6:6f:3b:8a:0e:91:58:03:b3:1c:
         f1:ca:38:ea:43:78:d1:a6:6e:51:4b:2c:66:53:f8:97:01:7e:
         4d:7b:f4:37:8f:ac:c8:ac:c4:76:4c:af:db:29:32:13:90:7c:
         af:26:c4:a6:7c:25:c1:64:58:73:4a:e0:46:62:9d:2a:4b:e8:
         db:4d:93:d2:fa:98:3c:28:14:20:5b:2c:a4:77:32:8b:0e:d2:
         8e:01:8b:4e:4c:45:49:50:04:40:1e:ce:68:cd:df:3f:0f:5f:
         27:94:10:32:f8:0c:f5:34:18:82:2d:2f:78:44:91:1a:56:95:
         c2:13:a3:04:46:b3:9d:6a:3e:6b:e5:27:34:fc:13:bd:27:52:
         94:5b:2f:65:50:80:0c:cb:24:de:d5:85:7f:83:ca:57:09:b0:
         c5:60:74:e1:7a:11:7f:72:10:12:51:ba:f0:ac:91:2c:e0:5a:
         13:6c:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----