Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File:                     UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier:          zRG1rTgfCFwqxdaddWXDfkRQhDCfgxKX1/avS7JvW8g=
Subject key identifier:   E2:FE:53:EA:8B:4F:2D:45:3E:37:76:B5:C4:3E:05:CA:92:34:84:CD
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer:       /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial:       01962E99683FA0E80610BA12049F0F5B6A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number:          13EF
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: d9fmdcUmraVXzrjRyPANWBUaXct/xz45Ob/v4O/4FzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:68:3f:a0:e8:06:10:ba:12:04:9f:0f:5b:6a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=e2fe53ea8b4f2d453e3776b5c43e05ca923484cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:1c:ae:89:5b:e0:fb:6e:5e:09:1a:1a:48:
                    46:6f:22:0e:7d:c2:1c:77:9e:22:7d:0d:17:21:b8:
                    a8:42:2c:d4:61:20:50:05:17:bc:2f:56:c4:5a:e5:
                    6d:58:87:36:18:5b:b7:a5:57:c3:1e:3d:3c:a1:f8:
                    fa:19:e3:db:6e:c0:f3:87:d0:af:01:78:c4:90:7c:
                    ce:b1:63:ab:81:64:a1:eb:b7:0e:65:1a:28:d4:97:
                    36:03:f7:ba:f9:4e:57:2e:21:ef:ad:e8:67:66:b5:
                    51:96:44:30:2f:d6:92:31:f3:47:fd:a8:64:d2:fd:
                    bd:5a:6d:c3:6b:1f:db:90:03:3d:12:03:17:1a:94:
                    5a:1b:8b:2f:53:dc:c7:1c:c1:df:16:24:71:1f:fb:
                    7b:10:63:d5:bc:98:15:18:40:36:2c:7e:68:a6:d2:
                    d1:51:1c:f1:b0:a3:14:ad:f6:b4:e7:0a:49:be:7e:
                    ba:c5:d8:f3:a8:74:3a:d0:2e:e8:a4:40:2c:97:9c:
                    55:d7:66:66:81:f5:9f:5d:ce:67:7e:82:ed:c1:26:
                    c1:db:7b:03:71:4d:d5:ac:d7:28:ad:8f:4f:06:dc:
                    c4:42:0c:b9:6f:d9:8b:3a:df:8b:8b:d4:22:32:a0:
                    a6:ef:27:07:37:8d:74:8a:c9:ca:9e:11:83:1f:44:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FE:53:EA:8B:4F:2D:45:3E:37:76:B5:C4:3E:05:CA:92:34:84:CD
            X509v3 Authority Key Identifier:
                keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:31:f9:2b:f4:2e:1a:4c:a4:ff:45:66:ef:06:22:2d:d0:
         ba:54:7a:2d:48:c3:e9:b1:43:69:d4:09:2b:3e:ff:d5:53:d1:
         e7:b3:0e:0d:d6:01:31:1b:e8:39:42:89:4d:70:e7:17:5e:49:
         fa:4a:1a:24:ec:01:28:22:c6:a7:a0:f4:e5:be:7b:ef:e1:7d:
         95:a6:8e:be:be:3a:cd:1a:bf:5f:25:22:44:ff:3e:db:29:12:
         2e:9e:06:1b:0f:bb:52:12:a2:1d:ad:e3:15:ba:63:66:ea:7d:
         a3:49:2e:2a:07:21:f6:19:ee:24:0b:5a:44:f4:c7:76:c5:dc:
         47:d0:04:de:03:fd:bc:01:47:88:56:3e:de:9b:78:9f:eb:39:
         60:96:93:db:c9:31:8c:3b:ee:a4:4b:15:6c:59:f7:ae:3a:63:
         ea:34:ac:96:f3:7a:e2:fa:c0:eb:39:12:ef:65:e9:d6:92:cb:
         3f:2d:2a:29:f1:34:1e:1f:34:85:81:ff:e2:55:0d:4f:69:dc:
         c1:82:cb:1c:11:b1:8d:23:29:8f:a6:e4:87:be:8a:bb:ba:a7:
         f7:9a:15:98:12:e9:52:86:7f:a0:29:70:d0:b6:c4:2a:b2:b4:
         e4:03:45:b8:bd:d2:f0:6d:10:7f:1f:70:04:ec:92:83:66:32:
         5c:e5:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----