Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
File:                     UNorr8N6OYjdKUyROuUiDgONuWQ.mft (raw, json)
Hash identifier:          UUd5ElRaLue2pTEqNPgY67cdZUqUrj01sV2uXfjs9fg=
Subject key identifier:   E0:BC:38:6B:FB:70:38:D6:65:F0:C6:35:37:54:B6:89:36:08:BA:C6
Authority key identifier: 50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
Certificate issuer:       /CN=50da2bafc37a3988dd294c913ae5220e038db964
Certificate serial:       01962DF3D6BCD47AE67A9765F9C3B2BE7358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
Manifest number:          1436
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: UNorr8N6OYjdKUyROuUiDgONuWQ.crl (hash: caFRGuo/9WFletl+kRxt1i6IXO+cBrrn5J+ovmhLhaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:bc:d4:7a:e6:7a:97:65:f9:c3:b2:be:73:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da2bafc37a3988dd294c913ae5220e038db964
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=e0bc386bfb7038d665f0c6353754b6893608bac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:86:6e:31:fb:73:30:cf:aa:3f:51:7b:05:a9:
                    79:e0:12:49:35:cd:9c:f1:bd:59:34:0b:6e:12:5f:
                    db:f5:c9:f6:e7:24:d3:9f:c7:56:3b:3d:c4:40:a0:
                    7a:fd:6c:b1:4c:89:a0:31:d7:db:a1:75:c7:bb:84:
                    d4:2c:d4:11:c7:c9:8b:00:44:6c:93:29:85:06:b8:
                    bd:26:12:af:4b:9f:d4:c6:5f:2a:2d:ad:da:4d:a4:
                    55:23:9e:03:22:83:69:3f:d8:23:f5:70:8b:3f:7c:
                    b0:33:e0:07:84:c9:b2:da:78:b7:61:85:ee:d8:02:
                    98:27:78:0a:65:0a:81:df:c4:a6:79:16:00:0b:3b:
                    b2:48:2b:58:b8:ad:dc:11:08:64:02:61:bb:10:a1:
                    11:a4:a6:12:3d:e5:68:a0:d5:36:ce:ec:c9:c6:3a:
                    43:7d:79:37:d9:e4:ce:26:81:d7:51:51:94:34:c9:
                    af:a5:0f:e8:1d:23:73:38:75:1e:a7:ae:4f:68:a6:
                    98:71:15:e0:bb:3e:2e:61:05:50:bc:4f:59:84:6a:
                    2e:51:4b:e3:d5:94:a1:8c:b4:91:9b:7e:20:fd:96:
                    09:c2:8f:8c:73:c7:9f:1d:9a:0a:04:3d:8e:3b:a3:
                    5b:26:0f:e8:2b:91:05:74:af:60:26:62:a0:df:23:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:38:6B:FB:70:38:D6:65:F0:C6:35:37:54:B6:89:36:08:BA:C6
            X509v3 Authority Key Identifier:
                keyid:50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f5:bc:be:4d:c0:a5:3c:0a:b8:2c:f9:1d:c7:ad:cb:ff:da:
         6b:40:a6:19:b5:c0:6d:28:09:c5:0c:b5:83:69:a9:65:87:a8:
         41:e9:11:84:3c:70:6e:68:ee:e6:23:cb:95:8d:d2:2c:0d:8f:
         ed:48:8e:4f:37:6a:15:cd:2c:77:c4:d5:34:bc:46:e5:ab:a8:
         6d:83:00:fc:b3:ca:aa:50:04:7d:9b:0c:9c:cf:d6:6a:5e:cf:
         d9:5b:d8:f1:31:a1:e8:1f:64:9c:2b:cf:2b:3a:e8:b0:32:d9:
         31:b1:b6:b9:0b:db:20:83:5c:78:29:7c:1f:da:db:f8:80:04:
         46:1f:78:b5:05:4c:19:dd:62:dc:1d:42:a4:68:be:a2:0a:3d:
         3a:08:2e:b1:ef:0f:f5:72:d8:3a:f2:43:d2:ad:a3:be:3f:ab:
         41:7a:fb:0f:e8:01:63:54:a2:97:fa:d7:f1:96:b6:10:69:e8:
         40:20:64:15:bd:1d:06:b3:fc:ce:fe:dc:78:bb:98:39:c5:a8:
         77:fa:4f:e2:6a:a6:a1:05:7a:9f:96:1d:ab:18:25:35:29:9c:
         03:34:92:ff:fd:a1:65:6e:0d:67:7e:4c:48:cb:f0:ac:a8:47:
         96:87:bf:32:2c:3f:7e:ea:10:08:1f:e0:a3:40:77:25:42:9d:
         81:37:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----