Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File:                     UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier:          65WypTq4GKs+pAgppdnik/dX23MpVZgcmLDyEJZEqFc=
Subject key identifier:   1C:EC:D8:CE:BD:C7:99:EE:E2:08:F0:03:2D:A0:4D:72:C1:9E:76:77
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer:       /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial:       01962ECFA06D817F18F10CF2CD1F5A50B0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number:          0C50
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
                          2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: jHLY+6Xk86ZZLzSUdBkEFasCrny89QNuAqxaOsDl4Fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a0:6d:81:7f:18:f1:0c:f2:cd:1f:5a:50:b0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=1cecd8cebdc799eee208f0032da04d72c19e7677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:6c:37:07:fd:38:06:02:ff:4a:3f:0d:32:
                    bd:3f:52:ba:b0:03:f6:aa:db:64:32:c7:40:56:7a:
                    ee:19:23:3b:6c:4e:18:92:6f:ae:fe:d7:d0:33:61:
                    e0:0a:8d:85:e5:d5:57:b1:17:65:27:08:86:c0:07:
                    2e:7e:18:fa:f7:77:e4:a9:83:3a:e5:4b:b5:80:ed:
                    1b:68:ad:90:e3:e7:95:da:61:57:32:b9:68:49:73:
                    a5:fa:74:e1:13:1c:7c:c8:97:0b:3c:ce:78:62:0b:
                    f5:0d:a2:ba:41:00:c1:d4:a4:18:90:65:3c:77:7e:
                    3c:e0:22:31:41:ba:20:db:68:5b:ce:df:8e:0f:65:
                    48:63:41:43:e6:67:5f:f6:60:54:dd:d3:15:6f:cf:
                    36:db:e7:03:66:24:fb:64:7a:86:27:11:00:34:23:
                    86:77:de:47:31:10:21:a7:b2:df:57:08:7d:9a:32:
                    04:05:0f:3b:5a:9c:da:bd:34:42:08:f3:6b:9f:e5:
                    0e:ca:43:c2:a6:74:9c:24:cb:2f:29:00:01:e1:70:
                    db:ed:4c:ae:e4:d0:50:e9:45:f4:e6:15:62:77:78:
                    5d:5a:df:ac:1e:50:f7:ee:80:38:bf:a8:5d:c9:db:
                    41:cf:e8:9d:ab:94:60:03:aa:b5:c8:79:e2:3a:8c:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:D8:CE:BD:C7:99:EE:E2:08:F0:03:2D:A0:4D:72:C1:9E:76:77
            X509v3 Authority Key Identifier:
                keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c5:b2:dc:2a:ff:9c:82:b0:fe:b8:95:2f:72:9f:d8:1a:6c:
         de:cc:b5:3d:70:39:1d:72:b3:14:73:2a:70:7a:59:fe:8a:45:
         a5:57:1e:06:64:70:6b:47:82:13:2c:5a:45:c9:13:ae:4f:ae:
         73:f3:58:ed:28:5b:2f:e6:37:d5:53:e0:60:5e:01:fc:76:2d:
         f4:b6:b1:f8:98:0b:c0:de:f3:02:94:89:45:bd:2c:4e:b0:b3:
         3b:16:7f:07:5f:84:16:81:05:82:7f:7e:1b:dd:de:9d:62:9b:
         7e:9c:6e:13:22:3f:3e:4c:6e:66:5e:f3:af:99:4d:8b:97:5c:
         69:91:22:76:c6:6b:f6:aa:7c:1b:68:f6:de:39:e7:53:d1:be:
         db:52:a6:dc:10:86:91:53:9a:19:cd:dc:51:97:c7:a7:c1:51:
         a9:fa:a6:13:5e:73:60:76:17:c6:72:73:57:0d:91:71:ec:9c:
         1e:d1:4f:da:d5:ef:b3:c5:f8:ba:13:a4:d2:b6:ce:09:ba:ab:
         5a:cb:c0:2e:6e:40:82:76:61:2f:fe:2a:1a:e3:f2:7b:47:7c:
         4e:f1:f5:2d:0d:75:1b:b1:46:6d:73:04:50:45:63:01:56:e7:
         c6:1d:78:72:7b:79:db:bd:f3:0d:8b:0c:bc:4c:e2:fd:0b:c7:
         53:4b:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----