Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          O947KueIII+2nrI7M4HBmxzgPA85t0BDyxoim0VEIWo=
Subject key identifier:   BB:84:2A:BC:8A:CF:12:E4:6E:9A:DA:03:C0:42:C1:BC:20:10:BF:37
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       01962ECF7AC8E8BA35016BA42DFF65ADDD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          045E
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: fVX82BWafTQpMDuZppyIalDmoldjBWwuCmLpWamyUmM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:c8:e8:ba:35:01:6b:a4:2d:ff:65:ad:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=bb842abc8acf12e46e9ada03c042c1bc2010bf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:60:10:6f:f6:e1:e1:78:b4:fa:51:98:be:
                    7c:28:20:ae:31:11:6f:36:ce:cf:17:c4:b2:e8:06:
                    d0:87:88:d4:33:b5:6e:75:8b:40:00:bf:d6:a2:d1:
                    05:8a:ff:dc:c3:c3:bd:94:57:df:eb:79:0d:49:23:
                    7a:26:60:80:72:76:be:e5:76:c0:07:71:f7:39:4b:
                    eb:b2:e5:ba:44:de:66:01:67:3d:87:cc:13:e3:b6:
                    ca:6e:d2:78:4a:cf:eb:f2:7b:f6:ff:23:91:fd:05:
                    6e:23:ad:1c:88:2b:f9:5d:ff:cd:36:57:40:37:46:
                    af:18:15:09:01:37:46:b3:bd:48:b0:58:e4:79:7b:
                    51:d0:ed:eb:6f:2a:27:ef:9a:d7:e6:0b:33:7b:33:
                    4f:01:2b:ed:ac:b3:69:5a:fb:ed:f7:42:8e:24:99:
                    ea:31:85:e4:e9:e4:28:4f:56:a3:0a:23:72:79:37:
                    4c:4c:6b:bb:c6:90:8a:a0:7e:d6:74:0f:b5:65:f1:
                    28:88:5d:be:b7:1d:27:f4:03:6c:13:d5:c1:e5:db:
                    00:0c:24:cd:9d:91:95:96:0a:d8:4f:3b:2f:ba:c0:
                    cf:82:10:51:d5:d8:2c:77:89:98:48:de:c8:2f:66:
                    12:eb:41:90:59:a5:76:ff:c1:d1:47:02:0b:e2:b3:
                    65:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:2A:BC:8A:CF:12:E4:6E:9A:DA:03:C0:42:C1:BC:20:10:BF:37
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:51:ea:40:56:3a:22:1f:0b:80:fe:0d:80:65:5f:a3:43:3e:
         f9:08:a8:74:b7:d0:65:5e:9e:ea:1e:d2:8b:c1:ee:61:c6:1e:
         14:83:9b:f8:82:f5:99:5d:83:d3:c6:ab:c9:51:57:43:94:90:
         9c:58:b1:61:68:50:63:0c:cd:d0:6c:aa:7a:c0:85:99:f4:9b:
         bd:85:79:af:ef:71:18:ff:c3:ac:28:4a:31:01:68:a1:44:01:
         61:05:98:36:9c:c8:47:b7:dd:c9:0e:8d:93:c0:93:b0:b2:3e:
         ad:04:41:24:dd:4c:b0:7c:0b:8e:39:57:c1:df:84:52:9b:c2:
         ad:5b:6e:89:49:a7:12:c0:e9:bd:e9:00:ff:21:6b:cd:b8:4e:
         2b:bd:85:d0:ae:a7:40:d2:73:00:26:19:b8:a2:f2:02:ed:36:
         bf:7f:b9:cf:aa:98:b3:0d:64:77:72:fa:73:bc:ed:98:2d:6d:
         bc:89:10:d8:5f:e8:e8:46:24:4c:7c:2f:22:df:dc:29:4e:fa:
         04:bd:f3:4a:10:6d:1b:f1:a4:12:91:54:9c:f7:2c:f4:e4:2f:
         95:af:dc:e8:6c:3a:fa:f7:19:09:4a:80:9c:ac:c9:09:54:3a:
         3c:3a:ee:16:18:79:91:12:ed:41:92:3e:9c:05:57:80:bd:77:
         54:fa:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----