Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File:                     UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier:          SCIVHguDhp6Y5sv89rJek8QfoHcKDF75B/24O9RLYqc=
Subject key identifier:   D9:56:D1:A1:B3:7B:6B:E6:B3:46:8C:26:11:1B:C3:62:34:1A:0C:A2
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer:       /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial:       01962E989C6DA81B067E6ACCCB67626653C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number:          0E0D
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa (hash: 0loawEu3EsQvN0YOhlZpUuKsy9W2F4KZ2P7ZrPoURyk=)
                          2: 4Vp82kMVFy3SS-QpMeiBb_LCuZM.roa (hash: eQLhAc0fHmyRxdit6MMg+tHEhHD6XioTBzmbHJz5rsE=)
                          3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: o5+Bl5IG/iRGgjpQYAdaaYsWYjrRZrQ+uotqFPoDNNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9c:6d:a8:1b:06:7e:6a:cc:cb:67:62:66:53:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=d956d1a1b37b6be6b3468c26111bc362341a0ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:56:18:9c:11:6c:7f:2e:4a:1a:7a:61:32:
                    61:e4:e5:9b:37:89:9f:33:f6:2a:cc:30:69:78:89:
                    11:85:26:7c:89:f9:d2:b4:3b:10:6e:d9:1f:61:47:
                    72:00:06:f2:fa:b4:24:a1:9d:e5:0c:14:6c:4a:d0:
                    80:92:89:f0:49:86:67:73:a2:b0:e4:62:48:84:6a:
                    6a:dd:e0:bf:d0:ab:ac:46:69:c0:e6:13:07:58:78:
                    84:ae:0b:36:79:d0:38:28:cc:28:9b:d9:c3:6e:bc:
                    8b:27:80:6d:6e:f6:f1:f6:0b:f5:15:b9:96:50:40:
                    fa:42:9a:9e:a3:64:0b:fd:75:5e:57:1b:b1:16:c6:
                    eb:82:25:d3:3d:4a:d6:1a:be:17:08:c2:15:15:2d:
                    1d:09:6a:36:b4:87:2d:ff:4c:0a:ea:f9:8d:8b:76:
                    f4:d0:e2:54:83:66:d7:07:86:0c:26:2c:03:94:68:
                    c5:09:06:94:ef:7d:8b:9d:a7:83:b3:67:85:2b:3d:
                    5a:f5:ed:62:20:9c:54:f9:2d:c1:64:f5:1c:3f:e0:
                    5d:bf:50:cf:19:63:23:d5:1f:3c:ea:54:80:d5:2e:
                    d1:d2:9b:a5:a3:ae:f9:89:18:f5:6d:b0:c3:2a:39:
                    aa:5a:16:fb:65:67:b9:b7:bf:ad:de:5f:33:38:d6:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:D1:A1:B3:7B:6B:E6:B3:46:8C:26:11:1B:C3:62:34:1A:0C:A2
            X509v3 Authority Key Identifier:
                keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:38:21:de:ea:d2:39:46:b4:74:d8:9e:e6:fc:99:2d:78:dd:
         ef:b9:09:a0:d6:ee:a7:28:6b:a6:98:4f:9a:46:58:c8:40:fd:
         21:fc:80:05:0e:e9:7f:a3:fe:ce:05:f2:ff:d7:f1:65:99:0a:
         3d:d3:54:c9:ce:0c:f1:f9:c0:80:7c:e5:84:ba:4c:67:8b:14:
         52:c7:8b:d9:7e:6c:4f:83:91:bc:b6:26:2c:31:8f:71:ae:c6:
         98:c0:80:68:e2:b5:cd:5a:42:6e:bc:e1:b3:e7:88:1a:28:1c:
         50:8b:d2:e9:1c:94:88:a9:19:f2:c5:41:f7:c1:6c:58:b7:53:
         d1:46:a3:ea:95:88:e0:4f:02:15:ec:44:0b:a5:ff:c2:69:62:
         5b:3f:bf:05:5f:d9:09:bb:79:60:d7:46:57:b9:c1:eb:ce:02:
         0b:36:c7:76:e4:db:58:24:c5:08:43:bc:78:70:67:d3:4e:f4:
         8a:58:5a:a4:a7:90:c5:a1:e4:c6:2e:24:4e:cd:33:a1:ce:38:
         83:05:8a:5d:a3:e7:92:7f:62:7f:4c:6d:99:a8:a5:f5:2b:b5:
         79:26:9e:bc:51:ba:df:9a:53:fd:c7:11:bf:7b:30:fb:21:3c:
         e7:a9:4b:12:46:53:4c:1b:41:b1:27:40:b9:58:14:20:26:eb:
         7a:11:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----