Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
File:                     UmJQW0iFgcLs11gqNOzlJjLj75Y.mft (raw, json)
Hash identifier:          9F6Bik+RMGRkpFWkZQAEJw/dmQbof1lBsjedhL8RutY=
Subject key identifier:   2A:D4:07:0B:15:66:30:E0:DE:A1:E3:4D:02:59:6D:DE:16:22:D0:30
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Certificate issuer:       /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial:       01962F0644B9843D265DBF1E1D68CADA1623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
Manifest number:          0DAB
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: UmJQW0iFgcLs11gqNOzlJjLj75Y.crl (hash: FJydRFpGf8JoiOZlqhruJoyrFG69Gk9V2synvRtPXho=)
                          2: YoqdurND-upgcXWxAcpQuefPm64.roa (hash: /491Mi9Fi+bDxakeWh2wlNUupkb90wEk7U//uUYJllE=)
                          3: og6MrC5yBqZd-w_jdnPWOr9coG8.roa (hash: H6FCr41wgfYRZuN4iXgiEuTmqTBZgur449ahw2ZWyrE=)
                          4: zO99S-j_1FZSZc-d3wPOk_r9aws.roa (hash: fbkA7GRWdBwzPVsGQcjMlHBtp/6gNaDm1Z08rE3xQtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:b9:84:3d:26:5d:bf:1e:1d:68:ca:da:16:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=2ad4070b156630e0dea1e34d02596dde1622d030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:bc:dc:2c:25:e7:17:9b:fb:27:bc:cb:af:
                    f9:84:ac:62:6e:1a:77:50:5b:83:3a:38:98:80:af:
                    72:80:34:44:d7:62:7a:83:3a:e0:3b:db:21:f0:bd:
                    66:41:81:1d:e1:1d:e7:38:83:7e:b2:df:dd:81:4f:
                    dd:ad:c2:70:7a:7f:27:bd:d0:94:04:f6:73:25:a2:
                    36:bb:29:0b:69:34:21:ac:a2:75:56:78:9d:ed:39:
                    22:f6:c4:49:04:8d:78:83:a2:19:5b:ed:2d:0c:15:
                    f2:e8:06:8d:82:11:eb:73:92:b4:d1:ad:96:98:63:
                    0f:12:6c:99:91:07:55:98:af:b9:b1:78:53:c0:1b:
                    65:6f:54:41:98:0c:05:83:42:ce:59:e7:1c:0e:50:
                    5c:06:55:52:41:da:6c:f5:96:74:e3:12:0d:77:2c:
                    9a:63:c3:3e:e7:5f:5a:bc:ea:c5:2e:2a:4b:56:24:
                    67:39:10:77:5d:54:bd:ec:80:19:ac:04:f0:aa:f7:
                    da:44:8b:98:12:79:94:80:cc:11:65:77:d5:e4:61:
                    26:0b:92:71:3b:d6:dd:6f:2a:95:69:c1:99:b8:a0:
                    e8:31:fd:0c:18:be:08:fb:9e:d4:c7:4a:34:2b:fd:
                    d5:28:d3:f7:09:8b:fd:d9:5d:ef:d6:9c:e7:0a:5a:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D4:07:0B:15:66:30:E0:DE:A1:E3:4D:02:59:6D:DE:16:22:D0:30
            X509v3 Authority Key Identifier:
                keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8a:a3:8a:ac:c4:82:31:d3:a5:91:ec:2e:3c:eb:cb:25:ed:
         1c:19:bd:10:59:b3:87:fe:65:c0:3e:45:4c:25:13:77:a1:68:
         51:d1:7a:21:a9:bf:ee:e6:fd:08:35:54:10:fe:6b:d4:8d:19:
         91:f4:10:dd:a8:7a:40:45:bf:b7:c7:80:ef:81:14:02:09:72:
         ea:66:bc:33:35:6b:2f:9a:d6:dc:1f:75:de:cc:dd:f2:14:55:
         35:ad:7d:28:9e:8d:84:43:a4:60:f5:0b:fa:49:08:78:63:d3:
         66:0e:e4:ed:53:4e:66:87:38:b2:c0:f9:6f:9d:d7:32:bb:49:
         6b:e3:99:28:a6:9d:eb:d4:3c:68:17:24:bc:f3:8e:79:1a:f7:
         d6:fa:32:97:cd:ee:c0:99:ff:22:d4:21:c3:9b:58:c0:24:3f:
         70:6d:f7:22:ec:80:ed:20:35:bf:6f:5d:79:4b:9c:c8:9e:70:
         2d:e3:b3:fc:a7:94:ff:91:7a:e1:6c:56:55:87:04:bf:32:ca:
         60:12:ad:7f:f0:19:91:cd:d7:8a:1a:cb:c9:80:d5:b5:2b:e4:
         0c:af:b1:a3:90:14:12:4e:6f:17:52:e7:ad:a5:d7:d5:82:6e:
         56:a8:d0:c8:a4:60:ba:95:05:60:bf:c8:1e:13:c6:26:c2:87:
         3c:45:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----