Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File:                     ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier:          1E4UYCFLL5b4OX9i5dAONOYT/0JbzvwiSNncVYX6kOQ=
Subject key identifier:   B5:3D:88:02:43:C4:2E:BD:5D:CF:26:59:73:D9:6E:63:83:3E:95:4D
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer:       /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial:       01962E62002242E8C8555364A02BAACEC399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number:          0EA7
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: rCCmjIp1qXj28l9n+56QLgYkBZjzsw2ds3ywh7nr1hY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:00:22:42:e8:c8:55:53:64:a0:2b:aa:ce:c3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=b53d880243c42ebd5dcf265973d96e63833e954d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:3c:29:01:93:1a:24:d5:85:8b:1b:12:b6:
                    fc:d7:ee:43:2f:8e:f8:a8:e2:6d:64:39:21:4f:36:
                    08:aa:1b:0b:22:c3:40:8c:f2:12:84:02:31:72:ef:
                    c2:e8:04:a3:73:46:f8:7e:49:7a:12:bd:3d:fb:e9:
                    ca:48:e5:f1:3e:61:88:9f:66:45:81:1a:b5:41:0f:
                    09:0e:0b:ed:bc:19:d1:46:a9:54:fc:df:ff:92:3c:
                    36:78:1d:74:53:ab:af:86:b5:fa:07:37:9e:63:6f:
                    6b:3b:26:11:62:a7:90:81:ad:40:3d:50:fb:3c:7d:
                    48:b5:b3:8f:b0:ce:ac:b3:18:aa:20:3d:43:cf:f3:
                    d5:16:24:bd:36:05:18:4b:a1:c9:d1:43:85:f7:55:
                    15:15:b9:51:fe:16:d0:f6:fc:04:96:ed:46:4d:8d:
                    48:d2:6a:d4:b6:91:d9:2c:28:53:22:63:22:4c:a5:
                    87:b5:ed:7c:1e:d7:30:05:fd:fc:e4:24:63:de:d1:
                    d6:47:92:df:90:dd:54:56:cf:6a:07:aa:72:bf:4d:
                    19:2e:de:23:87:7e:0f:4a:cb:32:77:31:e0:9e:48:
                    31:33:23:21:35:cf:43:d6:87:23:2f:6a:4e:e5:58:
                    46:7a:97:c4:9d:0f:51:3c:33:b4:a1:e9:10:64:d0:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3D:88:02:43:C4:2E:BD:5D:CF:26:59:73:D9:6E:63:83:3E:95:4D
            X509v3 Authority Key Identifier:
                keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:af:5d:fb:d0:15:86:9c:cf:c3:09:64:04:bd:36:27:ed:9b:
         ca:f8:9f:2b:ba:f7:da:a2:cb:d8:ab:cf:b2:55:21:0c:1c:ac:
         c8:4f:1e:48:1d:8b:f0:7b:91:16:a1:19:1f:b3:22:10:e2:65:
         11:d9:35:b9:e6:56:06:80:e6:07:ad:3c:d4:20:7e:a9:1c:02:
         af:95:e1:a8:6e:25:78:74:a7:af:8b:19:fd:b5:a6:dc:61:d8:
         04:15:32:7a:31:dd:a7:eb:4f:b1:5a:31:35:60:07:e0:7f:21:
         b2:d9:4e:b6:d8:23:2a:53:7c:33:a6:75:5a:db:5c:e6:11:a0:
         37:0f:48:d6:4a:04:e5:c6:90:e5:6b:05:1d:64:c1:e7:7b:e7:
         e9:56:cc:ac:c5:86:60:e8:d0:0d:4b:1b:63:0a:2a:c2:7c:85:
         73:39:45:f4:ed:21:0c:4d:82:bc:4f:a7:37:59:28:e2:c1:30:
         8d:9f:4e:81:d1:7f:d6:3e:54:54:a0:93:fb:4b:08:7b:ed:16:
         6d:de:3c:33:67:39:26:55:a1:88:d4:d0:1a:0e:43:a0:6c:74:
         d3:8a:32:ae:27:8c:e8:b1:94:1e:d2:59:e1:e2:df:af:54:52:
         c2:1a:4c:62:fc:66:2a:3c:57:dd:1f:90:17:22:8a:18:f0:61:
         e0:bb:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----