Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File:                     UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier:          uAA7njTOFAoMbZLfnvoB+49ZoLdMUOBSpHaYGxeNHRY=
Subject key identifier:   F6:EA:46:1E:7A:C1:FF:1B:00:C0:74:B8:2B:6B:F5:4D:66:6C:B7:8F
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer:       /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial:       01962F7499708082922476007C7D72B866C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number:          0126
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: R9Jrqnm3pe+1gPB5rqth8wlHUeM2RVXv1YobmVl1gkY=)
                          2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:99:70:80:82:92:24:76:00:7c:7d:72:b8:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=f6ea461e7ac1ff1b00c074b82b6bf54d666cb78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:79:3a:b0:65:32:e9:c3:37:19:72:bf:b9:
                    4d:89:29:22:d1:08:a7:47:5b:74:54:5d:35:04:b4:
                    95:20:38:9b:df:89:8d:e8:59:a3:ea:8d:bc:cb:89:
                    27:23:60:1d:64:35:cd:1e:55:cf:3c:61:c5:58:47:
                    c0:ab:4f:0c:05:f7:09:ac:1e:8d:a8:8f:ee:4a:01:
                    e2:04:0c:28:dd:fc:2d:cd:12:a0:54:12:7f:01:90:
                    98:80:90:55:09:de:8b:b1:b2:ef:9f:50:e3:a2:71:
                    8d:8b:dc:4f:2a:7c:3a:0d:a5:33:2a:75:c4:7f:1f:
                    bf:6a:fa:58:15:f1:12:cb:4e:2f:27:04:d3:ad:94:
                    53:fe:ad:6c:ed:20:55:7c:a3:f7:16:0d:0c:32:41:
                    82:bf:09:a4:5b:99:50:1c:6a:87:0a:8d:69:a6:93:
                    b9:45:2c:63:58:9d:9a:9a:1f:92:4b:ab:d2:e8:a1:
                    63:58:55:da:4b:98:bd:d1:78:9f:d2:5a:7f:1f:f6:
                    f6:38:df:44:ef:1a:f2:08:6d:4e:62:79:ae:21:ef:
                    57:91:2e:58:80:76:c4:15:c6:64:9f:51:37:3a:ac:
                    6e:8f:0f:4f:05:3d:b8:50:e0:22:4b:f9:b9:d2:6e:
                    d7:6d:d5:43:50:1e:a0:0e:49:34:a2:ed:69:22:d4:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:46:1E:7A:C1:FF:1B:00:C0:74:B8:2B:6B:F5:4D:66:6C:B7:8F
            X509v3 Authority Key Identifier:
                keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:ee:6f:bd:c1:92:cf:22:4d:73:f6:00:eb:06:ac:01:99:
         0d:52:3f:65:ef:35:13:6f:91:b1:eb:f2:80:10:06:58:63:e8:
         82:b6:50:35:5b:84:a2:55:cb:5e:f5:5c:4f:26:76:6d:4f:bb:
         ca:6a:e0:21:88:e3:3b:12:6e:b8:a3:bf:6d:69:fd:03:40:67:
         67:ce:74:bb:9f:4d:a1:67:40:c1:93:40:2e:76:8b:b0:c8:7d:
         2a:65:c6:45:64:70:50:f6:fd:fa:1c:ac:b8:c9:48:28:53:7b:
         8e:56:ce:0a:4d:0b:58:be:0c:ae:9d:0d:15:60:2e:de:12:3e:
         48:3e:60:04:f3:cf:8e:d6:9f:68:22:b7:f2:eb:be:5f:fe:bd:
         56:e7:17:54:dd:76:2a:be:5e:e5:5a:35:e1:1d:07:86:54:0c:
         8e:6d:95:28:09:29:1f:fa:98:37:b8:1d:05:5e:fc:ed:4c:b5:
         06:3b:3c:c7:8d:d1:69:3e:5e:33:8c:14:bc:eb:24:7b:5e:e4:
         00:71:2d:ad:a9:81:c1:39:42:25:d1:f2:20:09:aa:ad:f3:5c:
         37:9b:c3:14:5a:31:7b:e6:97:8f:05:80:04:b5:f2:db:81:b2:
         97:49:21:6c:55:a8:46:18:9f:79:17:72:e3:fd:7a:b9:c7:33:
         3a:b1:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----