Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
File:                     UlvgKcsyyovigKZJcDcY09iLtHU.mft (raw, json)
Hash identifier:          IGoprs057LDEqT5KQnw6927r7XV5QqulMM15TTnoQvg=
Subject key identifier:   9E:15:3E:AD:06:B5:42:C3:85:DD:45:E2:E5:24:DA:E4:00:A5:C1:02
Authority key identifier: 52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
Certificate issuer:       /CN=525be029cb32ca8be280a649703718d3d88bb475
Certificate serial:       01962FAB56740B9FC5F2C1758716D043B9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
Manifest number:          046C
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: UlvgKcsyyovigKZJcDcY09iLtHU.crl (hash: DCbEgzk7tf783GcH2E8HyMEfgLaUkLOOygsciMud2yM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:74:0b:9f:c5:f2:c1:75:87:16:d0:43:b9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525be029cb32ca8be280a649703718d3d88bb475
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=9e153ead06b542c385dd45e2e524dae400a5c102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:e3:90:fc:06:5f:8a:02:cd:fb:e4:6d:0f:
                    fe:c0:09:28:45:79:b9:9b:8c:e0:78:f6:c6:a6:aa:
                    3f:c9:ea:c5:18:b6:7b:af:f1:8b:64:fa:bb:ad:c0:
                    39:6b:0f:c5:e0:67:95:ef:71:60:5e:5e:43:10:13:
                    52:c2:4d:01:b1:49:11:af:49:11:65:84:29:09:16:
                    bd:1a:2a:b5:ae:52:cf:24:6f:2f:cc:77:51:0c:54:
                    68:89:06:48:ca:8f:df:f1:13:62:f2:77:6e:bc:28:
                    44:d2:eb:83:f2:77:5a:92:69:14:3a:11:29:0d:8b:
                    c2:4f:d3:ef:a1:d5:dd:6d:4f:99:8d:77:88:1a:e9:
                    7d:a1:ef:91:77:6d:3a:c7:32:cd:aa:49:d7:a7:e5:
                    ca:5e:5f:e6:cb:eb:2a:dc:46:0a:5e:c4:7b:07:64:
                    c7:96:2c:fb:39:5f:13:3c:ef:17:0a:d7:76:77:08:
                    93:30:f8:e6:79:6f:bd:94:50:f3:f4:6e:73:45:a7:
                    e4:cf:b4:b8:42:8d:b5:9c:b1:1d:69:df:0c:57:4c:
                    7a:60:70:65:69:0d:69:71:77:cc:92:3d:02:45:8b:
                    b2:ac:06:d9:14:f3:2e:c0:75:9c:65:c8:e6:95:13:
                    0b:41:57:5c:63:60:2a:6d:21:2e:2c:3b:a3:44:35:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:15:3E:AD:06:B5:42:C3:85:DD:45:E2:E5:24:DA:E4:00:A5:C1:02
            X509v3 Authority Key Identifier:
                keyid:52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:2f:50:d1:b7:80:c6:1b:18:a5:61:26:6c:2f:bd:60:24:
         c3:8a:c1:62:04:55:24:4f:3a:51:be:75:79:b0:f5:fb:6c:23:
         8a:15:5e:ea:da:c1:30:23:de:10:d6:c4:93:8d:1d:25:c6:a5:
         0b:ab:2d:de:60:57:00:83:a4:52:93:75:7e:30:66:e2:84:1f:
         fc:2a:68:69:f3:ce:6c:ba:75:35:ac:2f:04:81:c9:a7:d6:dc:
         2d:f1:8a:ec:8d:7b:b7:6d:3b:03:37:b6:39:3e:ad:94:84:b9:
         6b:5f:0f:40:1e:f1:59:11:1f:d1:e1:47:9c:a5:c1:dd:ef:8c:
         a8:bb:58:05:56:3c:d5:fa:55:7c:a9:df:8b:5d:7a:0b:22:e9:
         40:fe:80:2c:b6:6b:89:e3:bc:2a:d4:09:a8:35:9b:1b:54:a7:
         0e:61:00:66:82:d7:e9:2d:8b:54:fb:20:6e:d6:55:c5:db:17:
         c6:fb:08:e4:c1:ed:e7:46:9f:8c:9f:da:f7:3e:b0:78:b1:5b:
         06:c0:f7:a6:93:d8:e5:9b:41:ed:58:98:96:f5:b7:b9:56:c1:
         34:5b:0e:65:8a:3d:b6:a9:59:c4:55:3d:62:87:8b:bc:95:d1:
         97:36:ef:c4:eb:5c:5d:d1:08:44:32:6a:89:e9:20:7d:27:34:
         4e:57:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----