Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          IfmMrOoRfk0IVKYcuQVsvL//zx1frmRBYW8OfM5Cbi4=
Subject key identifier:   BD:67:2C:06:45:06:FD:B8:12:25:6D:D6:17:B1:6E:84:E0:8E:71:59
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       01962F06D6F86B035DC3DD4C4C7916B097E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: ai2c/9dpRaTdchNzU39TxKt2wJkvgy0iXdquEZPENcU=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:f8:6b:03:5d:c3:dd:4c:4c:79:16:b0:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=bd672c064506fdb812256dd617b16e84e08e7159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:e2:06:69:ce:9b:17:42:67:1a:57:a9:5f:
                    77:d0:aa:dd:bd:e0:eb:0e:7b:7e:67:50:b3:bc:8d:
                    93:94:0e:dd:7c:f3:b4:38:23:6d:aa:6e:09:43:c9:
                    74:89:31:33:b6:34:dc:c1:a9:55:84:15:27:97:cf:
                    9b:7f:86:e1:b4:27:87:88:b9:97:33:3e:5b:bb:54:
                    96:16:c7:10:e7:fa:13:41:7c:68:15:3c:1e:bd:a6:
                    86:47:ac:9a:d9:66:d9:fa:e5:ca:e8:37:86:e3:9a:
                    7c:5b:7c:f8:4b:cb:53:c5:ed:bc:a7:ce:82:61:b8:
                    12:44:2f:28:c3:7d:ea:d9:ea:16:fc:59:67:46:b8:
                    ea:d6:f8:d8:10:93:a5:06:9b:9f:56:a0:8a:64:ac:
                    f3:d2:6e:9b:7d:66:43:81:24:62:b6:45:e9:4c:40:
                    33:0e:a7:2d:64:1c:96:12:64:a0:a9:90:f5:88:d0:
                    e8:2d:60:fa:43:ad:20:cf:c6:3d:7b:82:fe:f0:a0:
                    81:32:32:88:dc:92:23:2f:dc:95:9e:34:b4:b4:18:
                    d6:c3:79:80:bb:63:91:ea:47:f6:7d:2b:1b:3a:4c:
                    3a:11:94:4a:35:e7:dc:1f:d1:48:17:92:e0:bb:67:
                    e2:8f:c3:52:f4:75:0c:fd:09:a1:a7:31:36:49:74:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:67:2C:06:45:06:FD:B8:12:25:6D:D6:17:B1:6E:84:E0:8E:71:59
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:a5:1a:25:2e:69:02:b5:92:8c:ec:38:ce:7c:ce:91:51:
         30:06:25:79:e8:2d:f9:24:38:60:d2:dd:8d:9f:8a:98:e0:01:
         07:6a:d0:f5:fe:76:ba:f3:9b:8e:6e:c0:90:0e:ed:a0:e0:30:
         df:cb:b7:e5:b2:6d:82:ff:c6:8e:50:f2:b3:21:95:bb:70:fd:
         0f:e1:48:79:11:f9:02:ab:73:4f:86:60:b7:7d:f2:3e:73:5c:
         78:a1:a6:61:18:86:83:73:0d:95:7a:ad:f7:80:88:04:73:58:
         ef:9c:76:75:6a:7a:62:3a:e9:ba:28:27:06:b3:c7:18:fa:c3:
         82:b4:b7:9b:9e:22:27:e8:3e:0f:53:08:7a:9d:8c:c1:fd:35:
         7f:e9:f7:6a:a8:ab:f4:8b:f4:c1:1e:b9:13:e2:83:cf:fe:b7:
         14:db:6e:23:c7:8c:b6:88:6a:e2:a8:b1:60:d6:96:67:52:ff:
         8c:96:4d:9f:96:e4:e5:b5:94:57:ae:34:5f:49:4c:10:82:88:
         c6:aa:ab:ad:aa:03:82:22:2b:ba:92:10:93:11:03:21:83:f9:
         e4:05:2e:ef:e7:30:50:d1:38:50:48:11:97:76:35:8f:eb:b5:
         14:52:b3:a7:de:81:74:e1:04:2f:ed:82:3e:a4:3d:27:cd:60:
         ee:d5:8c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----