Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File:                     UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier:          mIIYJqcfCNUTDI6iB7jijZQfL3ZXkt4GxEF5+HD7riI=
Subject key identifier:   F5:65:8E:95:BA:76:78:77:02:95:BC:46:12:2D:CB:5A:0B:D9:2E:21
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer:       /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial:       01962ECFDD43AEA95C6C14C981A9791EDE4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number:          11DB
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: HFMVurqJ4KVQHlY7/ODwIUmDszqWchEsxdSHDUV3qU4=)
                          2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dd:43:ae:a9:5c:6c:14:c9:81:a9:79:1e:de:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=f5658e95ba7678770295bc46122dcb5a0bd92e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:55:f0:69:a5:c8:37:71:b0:cf:29:23:79:
                    67:12:d6:1d:18:af:b0:dd:97:ae:d9:f2:dd:45:44:
                    d7:fd:f2:46:ff:3a:60:98:5d:18:dd:50:3c:2a:a8:
                    9c:e0:e9:b7:d9:4b:40:1a:b8:65:ce:70:f8:7f:78:
                    31:39:30:1f:7d:39:ef:a6:e9:80:72:6c:77:f5:b6:
                    28:2d:15:19:8c:92:5b:f9:2d:ea:5e:b3:67:e7:73:
                    d4:5a:76:7d:03:eb:77:7a:eb:83:e4:3d:d4:30:d4:
                    1a:88:90:27:ca:ff:cb:ee:89:d1:46:9c:c7:2f:13:
                    45:71:c4:9c:74:a2:ac:b1:56:72:fc:01:d8:a0:31:
                    4c:9f:a1:32:c0:fe:6e:aa:99:fe:59:57:71:c4:14:
                    03:c8:5f:ce:2b:31:f5:17:f6:ff:c3:c1:a0:a1:ad:
                    27:fb:64:04:a9:b7:a9:12:e7:8e:0a:a2:20:55:2b:
                    0f:68:d6:f9:93:dc:20:c4:97:8a:4a:03:aa:13:bf:
                    de:a7:d8:c1:c9:c8:5c:c5:77:9e:f2:2c:fa:17:76:
                    92:b7:dd:9d:15:e3:75:58:8b:71:b8:d3:cc:31:36:
                    aa:28:48:76:ff:b7:4d:fd:7b:5d:77:ef:bd:2c:fb:
                    31:64:95:c8:e1:b4:d4:50:3e:15:39:85:81:19:e3:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:8E:95:BA:76:78:77:02:95:BC:46:12:2D:CB:5A:0B:D9:2E:21
            X509v3 Authority Key Identifier:
                keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:91:ac:38:10:01:51:b8:d6:c9:6a:d1:49:16:79:96:64:37:
         d4:88:1a:0c:f7:de:58:4c:af:88:dd:9f:7b:51:e1:4c:a8:e9:
         4c:88:2f:cc:69:76:0f:ac:6a:e7:6b:a2:aa:4c:af:35:0f:03:
         50:b1:37:f4:37:d8:94:76:fb:9c:2b:61:1b:cc:90:f8:c3:25:
         72:12:31:54:30:ad:ea:1a:78:77:b9:75:5a:f1:3b:37:35:2a:
         e4:3e:db:13:17:a2:5c:bb:75:68:f0:70:19:fd:6e:65:9c:e4:
         6f:6f:ae:4e:fc:e1:ae:78:2e:a3:0b:95:ac:03:dd:9e:49:14:
         76:7e:1c:77:8f:cd:41:e7:27:b0:bd:bd:26:ad:a3:75:d5:b5:
         b5:9e:ce:f9:fe:93:24:c6:33:a5:be:77:ea:8d:b4:78:ce:72:
         b6:06:24:d5:4b:55:1b:32:80:dd:62:12:94:39:d3:13:97:d5:
         1e:a8:cc:9c:2d:7e:e8:cf:d1:cc:a3:fc:89:99:af:f6:44:25:
         f1:6d:6c:dd:50:f7:15:0d:e2:ca:1a:22:d1:5a:a2:b4:e9:be:
         4c:08:ee:1b:bb:31:ba:8b:db:b0:32:87:e2:5d:8a:b0:d1:e8:
         62:ab:dd:43:87:7f:32:57:8c:58:df:e6:07:23:44:13:93:b0:
         ff:bc:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----