Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File:                     ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier:          AQdA8MjLqHI8oi1u9L4FBa1hUE5glfn0jNq+vaN4cpI=
Subject key identifier:   5F:D1:04:AC:CA:B1:B6:DB:62:4D:54:8F:68:95:EE:FC:2B:94:13:9D
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer:       /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial:       01962ECFE5E4C3BB0590790832715F6B0168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number:          1263
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: O5/a6uxgqYGrUTtUkdXKjtk4fS9YcRErl53kFf53cdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e5:e4:c3:bb:05:90:79:08:32:71:5f:6b:01:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=5fd104accab1b6db624d548f6895eefc2b94139d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:87:d5:7b:d8:4d:6e:2a:de:41:09:86:4e:
                    6b:08:63:ac:c7:2c:c9:80:e5:10:1c:07:20:8d:1a:
                    ed:d8:06:b9:3e:ca:cf:70:9b:eb:1e:be:bd:c7:da:
                    b2:0e:46:c2:32:d5:38:68:6c:2a:75:50:24:7a:d1:
                    84:bb:c8:f4:96:43:72:cf:13:f8:60:9d:85:c2:03:
                    4b:ac:e3:3f:bc:92:42:84:9a:38:20:ce:f5:06:55:
                    50:e7:47:12:4d:cb:43:a2:e4:e7:52:34:5c:10:6d:
                    57:d8:22:37:bb:79:2f:3b:77:ab:0d:0d:12:94:7e:
                    bc:91:83:b6:b6:86:6a:c6:52:04:f5:9a:5a:70:99:
                    d3:73:64:d7:3f:d7:27:81:a5:0d:3d:d8:bc:2a:11:
                    6b:b4:29:27:34:e2:ca:49:02:9b:bd:b2:e6:3d:29:
                    05:59:78:a8:9e:7c:8d:12:19:35:bd:5d:e3:81:75:
                    93:e2:39:b0:bb:16:0b:4b:59:4b:11:57:81:af:72:
                    c0:57:e3:a2:0a:2d:52:34:56:85:5f:e4:15:4a:da:
                    82:00:77:40:d6:6f:47:4f:32:b2:56:bc:35:2f:e2:
                    cf:59:15:8c:62:5d:14:07:9d:30:e0:56:f2:e4:27:
                    0a:db:85:8a:c3:92:36:34:5c:a7:2c:0e:a4:9e:67:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D1:04:AC:CA:B1:B6:DB:62:4D:54:8F:68:95:EE:FC:2B:94:13:9D
            X509v3 Authority Key Identifier:
                keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:c6:4c:92:0d:4a:f8:95:20:fa:31:f5:f8:8a:14:36:c8:
         3d:f6:a8:26:2b:31:fc:36:c5:25:68:43:24:11:e1:38:11:36:
         2a:32:8d:6f:28:ae:68:e7:41:6f:4e:28:d5:48:e3:ba:00:42:
         e1:cc:95:f6:30:68:c2:bc:f7:c5:7e:03:04:5a:e3:ad:77:a5:
         3d:ff:ed:fb:15:0f:ba:fc:ea:5f:00:50:0f:98:6a:83:3a:43:
         e6:ea:19:a5:31:e9:26:6d:cf:3d:fe:4b:f8:9d:4f:66:d4:31:
         83:e6:da:e2:25:5d:30:5a:d3:7f:a3:fa:dc:db:00:9c:0e:cf:
         5a:cc:a0:0e:b1:2b:c6:d1:36:14:4b:d8:ad:04:eb:0e:d5:19:
         29:71:0f:0c:19:95:36:62:9c:11:31:1d:2a:5d:fe:50:7e:df:
         1d:a1:28:46:a8:d3:42:92:45:9b:0f:8a:43:92:0e:d4:4a:59:
         8a:30:d1:08:4e:9d:96:48:00:37:cc:f1:43:d5:92:12:36:a7:
         91:8c:af:0a:87:e2:51:76:89:88:b7:0f:e6:08:10:d0:39:fe:
         60:09:e5:de:8c:eb:65:e4:34:c6:6b:12:8f:77:44:1e:1a:9c:
         2d:b6:8e:1f:bd:b5:8d:96:34:87:8b:fe:b1:78:56:c8:c2:b7:
         8e:47:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----