Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File:                     URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier:          PHQUF2aqHjFmZmgGcBFjWMGgwmQTqbjXGu6EL6dNgks=
Subject key identifier:   8A:D9:8E:71:EB:FD:AA:FB:CA:43:B7:08:C2:B3:30:EB:29:DE:03:D1
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer:       /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial:       01962E2B1AD183A1FD520BB4A0A4CDC8446F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number:          01F6
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: QjbD0Mv43Mggjnv1dD3aQlZ_dnQ.roa (hash: wA7EasBNLkMqkW9XYIKGBOp/xluoqSrHxbZPHdScXQ4=)
                          2: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: poBj/OgXhj8u5FmlPsG45oqOnZ6zY1xDb/qH/2NX1Gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:d1:83:a1:fd:52:0b:b4:a0:a4:cd:c8:44:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=8ad98e71ebfdaafbca43b708c2b330eb29de03d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:57:64:22:b1:39:ea:57:44:bc:ad:b7:f5:71:
                    23:47:f6:3d:29:3f:dc:06:e7:cc:00:14:98:22:a1:
                    5a:1d:a1:f6:02:a2:c8:8e:35:75:f6:c5:0b:a7:c5:
                    0b:e5:be:c3:c9:80:8a:09:27:74:3b:6e:20:2a:05:
                    1d:68:7b:03:b8:65:af:a4:a4:68:18:81:f1:dd:ef:
                    0c:a5:1f:04:06:68:d8:ce:29:47:c7:15:7d:73:64:
                    3e:ec:7e:33:1d:42:84:40:a0:36:8c:ee:c3:fa:a6:
                    98:26:9f:2a:b6:73:bc:3a:b4:25:dd:da:8b:0c:7d:
                    5f:44:da:36:2c:c4:99:bb:fa:bb:af:4b:03:ea:b4:
                    73:64:a5:c3:b4:2d:8b:93:5b:f4:f3:7a:bf:6e:61:
                    d5:77:52:2f:5d:5d:a2:07:c8:22:4c:ef:b1:92:75:
                    1b:0f:a2:18:7b:b4:59:87:de:67:1a:0a:2d:a2:de:
                    b5:01:af:4e:c2:d0:1f:8f:9b:75:eb:31:39:4b:0c:
                    0c:68:91:db:c1:bd:8a:e0:59:34:76:66:22:eb:14:
                    c7:ad:40:02:09:db:c8:d1:e8:fb:8f:9a:4a:10:8c:
                    5c:6a:5f:89:e3:3d:83:17:6c:51:0d:22:df:d0:5c:
                    26:ed:3e:3e:df:b0:b5:e9:fd:80:7d:6c:78:a1:79:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D9:8E:71:EB:FD:AA:FB:CA:43:B7:08:C2:B3:30:EB:29:DE:03:D1
            X509v3 Authority Key Identifier:
                keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:82:54:b2:90:15:11:fd:86:9a:d1:29:8d:83:78:2b:ab:
         32:82:ca:54:be:b4:2a:23:78:bd:5e:28:48:f8:66:b2:b8:e0:
         81:93:19:ad:d2:b7:1c:0c:21:d7:b0:06:09:16:0c:ad:55:22:
         dd:8a:b0:a5:df:3f:50:63:f7:bb:f9:0d:f2:23:49:d6:8c:d5:
         fd:0d:43:0a:3f:fa:f6:47:45:fd:f2:29:65:bf:05:fa:e0:bd:
         b6:03:e9:76:59:b7:fd:0b:0e:3d:d9:df:44:7b:6c:74:5f:87:
         ce:e1:04:4b:08:e8:f0:fe:97:79:87:6b:26:3e:8c:d7:b1:8e:
         34:0d:63:2b:65:3c:40:d7:3f:06:84:1c:3f:8a:4f:07:3b:42:
         3e:74:29:13:51:a7:04:ed:8d:81:7c:13:52:33:45:e9:46:50:
         26:f6:d4:15:5e:eb:f8:45:43:3c:5e:44:73:06:a2:3f:5a:d9:
         d8:b9:14:df:26:91:29:63:5c:07:e4:02:91:3a:6f:a3:4f:25:
         52:87:4c:1a:c8:50:ca:35:35:e1:15:df:f3:14:fb:23:35:e8:
         3c:1e:eb:e3:8e:81:eb:15:04:7f:4d:a1:0c:73:6e:82:d9:40:
         06:af:47:65:bc:77:62:ab:cf:29:12:b8:f7:5c:f0:19:9d:73:
         87:1f:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----