Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File:                     UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier:          Ei25pdwZQto25cEJDzJpb8THuGioEMhUS/027PeURt8=
Subject key identifier:   53:27:8A:81:40:66:EC:86:7A:0C:6A:37:25:D0:38:4C:86:75:F6:A5
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer:       /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial:       01962DF41FDBBD0BABC34D2488EA042BBDAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number:          139A
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
                          2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
                          3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: FUIzq0w8VN6F9vkodgv7N1X8srnxwOlfIw/l3SVgcgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:db:bd:0b:ab:c3:4d:24:88:ea:04:2b:bd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=53278a814066ec867a0c6a3725d0384c8675f6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:3d:eb:04:67:c0:df:dc:bc:3a:c0:b0:c1:
                    02:80:d1:1f:51:bb:e1:96:ed:6f:31:21:65:46:33:
                    01:c7:02:d8:32:05:9d:43:c9:f2:4a:b9:6d:d6:56:
                    43:c5:e9:a5:a9:36:48:a9:10:3b:c0:6d:71:57:f1:
                    d0:71:cd:e4:27:8a:a4:d6:d7:90:b7:d8:17:40:c3:
                    c6:b3:cb:f3:01:cd:15:04:f7:38:de:49:fb:60:57:
                    fa:e4:83:af:e8:b7:a8:3b:3a:4a:f6:9c:2a:f2:5d:
                    97:cc:69:c5:0d:a1:63:89:6e:7c:34:86:ff:b2:d7:
                    77:74:d6:a5:ea:d0:ad:47:58:ce:33:9f:fd:e9:a0:
                    92:5b:2e:3d:2e:ef:17:d8:32:fb:c3:1b:a6:05:cc:
                    72:42:e3:3f:6a:0c:61:6d:73:b0:3f:09:2e:6e:03:
                    08:11:4b:f8:9a:5e:5d:d1:38:82:42:88:c0:d7:88:
                    52:1c:16:d8:44:9d:fe:a3:2b:fa:1a:cd:fd:5b:39:
                    04:53:77:23:9f:62:d3:14:41:4f:95:f0:2f:03:2c:
                    17:3c:04:c4:35:be:d8:d0:e4:95:ec:e3:09:9d:fa:
                    6e:f3:b7:e7:10:00:1b:ed:be:a2:e4:cf:58:12:12:
                    f7:e9:45:ad:37:76:37:68:23:7a:21:cc:2d:67:a0:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:27:8A:81:40:66:EC:86:7A:0C:6A:37:25:D0:38:4C:86:75:F6:A5
            X509v3 Authority Key Identifier:
                keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:89:03:5c:79:ab:fe:04:54:eb:df:1a:88:2e:ae:ba:f3:
         70:86:cf:f4:25:08:3b:22:02:52:dc:f0:74:9f:f1:2b:d7:f3:
         2d:c9:2a:e6:04:4b:fb:0d:8b:83:6e:d7:40:25:72:39:e6:24:
         e8:8f:e1:16:ea:a5:a9:60:88:6a:ad:17:07:dd:f6:64:f9:91:
         59:40:42:af:60:35:32:38:29:f0:cd:f4:e9:c4:75:81:df:d9:
         54:74:98:4c:39:9f:35:99:1d:8c:c8:29:6c:ca:59:92:c8:52:
         1f:27:fd:13:05:e7:1d:d1:b6:4b:fa:28:38:aa:b7:e5:aa:87:
         8a:17:8a:c6:6d:2e:33:6d:c4:d1:43:08:06:a9:5d:36:7b:53:
         63:3d:36:d0:ff:5e:01:c8:5a:a6:bf:be:e9:62:74:20:fd:ac:
         89:20:18:77:a0:8f:f7:27:1b:41:8f:ae:94:ba:38:7b:e2:a8:
         36:09:a1:7f:d3:b9:4f:47:1c:f6:f6:de:5a:23:bc:d6:04:4e:
         37:ac:b5:21:44:44:2b:4b:16:9c:5c:9e:11:cc:7e:5d:d4:32:
         da:12:4b:ca:b0:a1:78:4b:d4:43:3e:24:1e:81:b8:b0:0a:45:
         f6:42:ba:50:19:a0:f3:8d:7a:48:81:1e:ab:66:41:cc:b8:9f:
         f7:d6:41:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----