Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File:                     UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier:          UvaPBsgdoWUoOyGo6scIDOS3lArIXVi82knqTmfyL2k=
Subject key identifier:   B6:DE:D4:0F:B4:CC:E8:BC:1F:0C:15:04:09:C0:FB:2C:D1:70:C8:9B
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer:       /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial:       01962E995A6AF28C308AC58404797997BE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number:          1234
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: buXQ0DV3Ik9cjZC8pvnEdzVpjpKFCMPJEyisDJ3i3rI=)
                          2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5a:6a:f2:8c:30:8a:c5:84:04:79:79:97:be:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50480549481968d43406127653f780abbf9a117b
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=b6ded40fb4cce8bc1f0c150409c0fb2cd170c89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:71:c1:85:63:29:06:9a:ee:09:e0:2f:94:
                    10:83:f6:4e:76:3b:ac:0e:c8:68:56:dd:c1:33:15:
                    a8:ed:d5:33:21:2a:80:03:6b:4b:fa:07:54:2e:ac:
                    6e:7f:88:dc:65:e3:e6:26:d7:fd:96:43:9c:b6:09:
                    a6:13:b9:54:00:1b:78:58:e8:90:9d:7d:a7:32:b6:
                    95:94:b0:39:bb:30:51:36:d4:79:67:c0:3d:fa:ea:
                    57:d7:97:59:5d:f4:c3:24:7c:e4:31:45:4e:0a:77:
                    43:0a:c7:05:7f:21:d4:96:6b:31:82:63:8c:d2:75:
                    8a:d3:eb:ae:7d:9d:b0:d0:32:8b:df:ea:a5:39:02:
                    5a:d3:a4:6d:4e:ef:b3:85:60:c0:9c:53:fe:7e:39:
                    8b:b3:7d:e2:b4:3c:bc:78:b0:9a:de:ed:b0:6e:f9:
                    35:cd:b3:9d:ef:cd:8a:8c:d6:a6:54:f0:71:0c:42:
                    96:70:34:8a:0a:1c:14:da:66:f7:b2:f4:75:44:0f:
                    57:7d:f1:b9:ed:c8:2b:f6:79:e6:c0:86:67:67:05:
                    7a:db:ca:66:29:86:34:8a:ee:9e:06:88:20:f4:eb:
                    b1:0e:7e:37:60:92:21:e7:7c:be:ff:a5:f0:ac:f9:
                    92:de:ad:4e:5a:c6:14:1c:9a:b6:bb:56:24:af:38:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DE:D4:0F:B4:CC:E8:BC:1F:0C:15:04:09:C0:FB:2C:D1:70:C8:9B
            X509v3 Authority Key Identifier:
                keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:36:cf:48:0d:47:e9:68:82:b0:df:03:d4:51:93:e6:bb:c2:
         42:be:da:61:cb:70:02:e3:fe:e7:76:53:22:1e:84:24:06:80:
         28:3b:b8:1e:63:d7:81:98:1a:e1:5d:f9:1e:f1:fc:b9:68:14:
         b6:a8:1e:50:16:35:15:af:6c:6d:89:4e:fe:63:02:39:ad:1d:
         b2:6c:08:81:43:06:ff:16:f6:1a:08:e5:92:bd:56:0a:8f:9d:
         2c:9a:3c:15:dd:cc:7f:31:0c:5b:c6:cf:4a:d2:a4:1b:9f:93:
         9e:38:e6:24:f3:38:bf:ae:50:d6:d8:50:b8:0d:63:ff:2a:c9:
         c0:21:b0:e4:91:0c:12:a5:82:43:4e:23:f6:ed:0c:63:5f:89:
         56:89:ba:65:4c:b3:9f:10:38:22:2c:23:85:a4:a7:2a:18:bf:
         b3:64:2e:74:e6:de:39:2f:4e:d7:12:4f:ba:83:29:64:7a:1a:
         f0:4a:34:85:2a:46:38:29:28:f0:25:15:b2:67:53:05:5c:ac:
         c5:0a:a6:ae:8c:0b:f4:27:c1:01:b1:8b:7b:72:27:c0:76:bd:
         3c:e9:df:90:6a:33:79:38:a3:53:64:c8:7a:76:9c:2c:79:f8:
         b7:9d:83:0c:42:99:87:f8:0c:b9:71:c6:c5:b2:61:26:f2:59:
         c1:3a:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----