Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File:                     UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier:          ferpq9qCPTJUpRnNZYiSiKdKreTwoo27DqmeUUJyhcw=
Subject key identifier:   D1:7C:90:8B:7A:75:A0:85:66:C1:EC:19:3D:51:74:BF:71:B1:22:65
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer:       /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial:       01962ECF6BCA7686BD6083A742CD3309E020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number:          13B4
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
                          2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: PJTL3LaSMvDvzQyiACVXXoTlKUrUstm4GVP2AFIx78o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6b:ca:76:86:bd:60:83:a7:42:cd:33:09:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=d17c908b7a75a08566c1ec193d5174bf71b12265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:fe:a9:6a:98:3a:82:a1:3c:14:7d:a5:c5:
                    62:2d:e9:76:a6:94:2b:00:85:04:81:a6:77:94:54:
                    6b:42:98:9d:45:e5:06:fc:de:55:ac:84:d2:bf:30:
                    41:fa:15:a1:ca:35:c9:7b:d9:21:75:18:b1:43:34:
                    6e:cb:e1:3a:63:61:3b:0d:0e:cf:e3:20:c4:be:be:
                    3f:1e:f1:04:0e:5a:b9:f6:0b:d0:7b:f4:a7:23:04:
                    13:07:d7:25:aa:35:ab:6a:3b:05:28:eb:e4:f7:6b:
                    1e:8f:58:f4:47:93:d7:e9:0a:9f:5a:ea:c4:e6:f1:
                    9c:22:81:45:db:71:c1:2b:7f:96:0b:59:db:03:94:
                    b6:28:84:fe:bb:71:28:84:28:33:f8:74:58:d6:e1:
                    9a:cf:7e:a0:04:8a:56:c4:b1:8c:b8:77:bd:8a:88:
                    0c:f2:bf:bc:cc:26:81:61:09:e7:ec:1a:24:7d:de:
                    74:ef:7c:e2:48:d7:fd:de:30:33:e6:2e:2a:1c:82:
                    d1:6d:cf:ba:1a:20:43:cf:6a:7e:91:5a:95:06:37:
                    9a:bb:14:d1:e5:14:65:47:79:8c:7a:cc:31:43:69:
                    2e:6d:b5:23:bb:5a:41:c8:79:70:67:05:b1:d0:9b:
                    8d:c5:bb:5d:f9:c1:f5:89:c6:fa:d6:e0:9b:4a:8a:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:90:8B:7A:75:A0:85:66:C1:EC:19:3D:51:74:BF:71:B1:22:65
            X509v3 Authority Key Identifier:
                keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1f:8e:0f:6d:0d:82:59:38:4b:16:03:9b:b6:66:9b:97:77:
         39:09:0e:f1:72:65:1e:77:60:a7:c7:03:00:3e:8c:8d:76:79:
         62:3f:18:ad:e2:25:d8:2a:c0:18:8a:76:f2:1d:4e:ba:f1:3d:
         c8:78:27:75:63:68:21:8d:d7:85:99:ea:d7:ae:1d:90:9e:7d:
         02:6a:12:05:67:9c:4c:87:7e:4e:f0:42:e6:93:0b:e8:97:c9:
         e3:82:27:9c:d7:46:7c:5f:15:12:98:dd:a6:f3:ba:0f:9c:0b:
         e0:c2:c8:01:2e:6c:b8:d0:c8:f7:8f:44:92:fd:32:ad:3b:f6:
         54:68:0b:cb:76:ae:1f:b8:97:ee:8e:8c:c8:0c:54:0c:8d:11:
         c8:ef:42:c2:71:4a:9d:dd:46:6f:88:dd:d5:89:a7:d1:1a:8d:
         68:ea:fd:9b:d5:c0:d8:61:20:aa:d5:62:ba:44:8b:82:54:d3:
         1d:8b:49:e0:61:f0:b7:72:94:b8:16:8e:14:a1:c5:ba:4c:fb:
         32:48:c3:75:dc:05:d5:05:1f:92:ee:0c:24:48:a4:b5:71:d7:
         db:6b:1e:d0:73:05:6c:b5:eb:07:1b:ef:07:45:34:92:b3:c4:
         43:76:30:31:04:36:c0:13:80:10:45:f2:a5:86:06:d0:e6:17:
         53:dc:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----