Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File:                     ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier:          BYP0VzyULnvYHU91YEuI+Jp+JG6UC0FoCHUWrAJvp/w=
Subject key identifier:   39:80:77:AF:20:86:D7:3E:73:FC:B7:0F:8B:66:22:86:9E:BB:1E:13
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer:       /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial:       01962E2AEC0E210F3B387957F2F71892F1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number:          025B
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: O7Oz0cm99LaWpKN5LiwPq8dDlgNZSoWA8Kk+ZlFBFxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ec:0e:21:0f:3b:38:79:57:f2:f7:18:92:f1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=398077af2086d73e73fcb70f8b6622869ebb1e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:3b:e7:93:ac:0b:cb:93:48:f9:a1:15:dc:
                    c4:66:23:4c:91:fa:f0:4e:de:ed:b8:91:3d:0c:05:
                    08:78:05:22:b0:d0:77:ec:67:3c:2b:74:aa:65:b6:
                    c7:bb:ab:66:c2:75:13:6b:82:d0:c9:be:8b:23:31:
                    80:c8:48:32:60:68:7d:36:7a:e3:47:c5:91:80:a6:
                    b9:b2:d7:8b:56:f2:69:6a:3f:f0:89:86:04:b5:ff:
                    71:11:2e:f8:ea:c7:ee:05:c6:e6:2d:ae:a0:37:7d:
                    05:6c:23:29:9c:e7:3b:39:0d:7b:a4:c5:c5:6b:07:
                    cf:20:24:13:3c:a2:90:4d:1f:dd:54:5b:84:91:63:
                    79:b1:97:f5:e2:a8:ee:a2:8c:70:f6:d0:52:00:bc:
                    ba:6d:93:57:4c:b0:f0:ac:d6:b9:81:83:6b:4c:c2:
                    64:0e:0a:72:15:21:b2:01:83:77:33:ee:6f:40:75:
                    c6:21:d5:14:63:d5:39:b8:1d:ae:d1:29:91:fd:f5:
                    6f:99:7d:f3:dd:66:15:79:4d:a7:53:09:c1:06:34:
                    4e:f5:86:63:95:8d:49:01:ab:3f:a0:93:68:29:ad:
                    6f:62:c5:bc:06:6b:50:c5:82:60:bf:a7:8e:3b:b0:
                    ef:a9:73:91:0e:8e:44:26:75:01:8c:1c:8b:3f:d4:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:80:77:AF:20:86:D7:3E:73:FC:B7:0F:8B:66:22:86:9E:BB:1E:13
            X509v3 Authority Key Identifier:
                keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:63:e2:5d:1d:9d:4c:fc:ee:86:1c:94:11:ff:05:a3:ab:
         e5:e4:c0:fe:25:dc:0a:ee:f5:86:59:3e:96:6b:cf:c0:10:9a:
         1a:d5:d4:ef:bd:88:5a:70:5c:80:3f:25:b4:87:81:b6:39:ff:
         84:86:de:3a:11:01:f0:e5:10:d2:ac:69:f5:3b:9c:0d:5c:e0:
         8e:26:e2:03:33:bd:0f:b2:1b:88:22:c4:f3:0a:cb:a8:82:61:
         51:7e:0b:94:ee:05:e0:f8:21:f0:1e:30:16:fd:ee:e7:5f:12:
         fc:36:21:e4:0f:9e:17:92:42:ec:6f:a3:12:63:87:ad:3a:ab:
         74:40:2b:e2:7a:f8:06:a6:64:8c:37:d6:98:81:9d:b3:ee:97:
         f1:64:ef:d7:0d:f3:33:41:6d:b8:c7:50:7f:26:6f:aa:e0:98:
         49:4c:8e:84:eb:0e:9b:f8:a0:22:07:c5:0c:d4:04:12:4d:31:
         2e:b9:c5:e8:3f:e3:b9:56:a2:25:91:27:b4:6a:ef:4f:61:43:
         6d:94:48:3e:59:97:93:a1:d5:52:b7:b5:3e:ae:4a:f0:91:45:
         a1:b8:75:65:5c:c4:76:96:38:d8:e7:b0:48:7f:8a:a4:9d:e4:
         4e:b4:99:61:68:4e:a8:c1:73:d7:be:f0:92:ff:66:ab:ef:ec:
         a7:19:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----