Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File:                     UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier:          LzpSWWYHmLoQ/7tqkQL6PxoTSczQ2YKKWaY9rNqEoos=
Subject key identifier:   07:56:E1:13:1A:19:72:25:9F:70:6C:0F:4A:DE:0D:49:E7:E7:D0:86
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer:       /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial:       01962E991D82EF8C7222CBA24749F36693B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
                          2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: tiLxmCTf+elVLMi5V5I/0QpZFoou07TF0g/7kg+ixCM=)
                          3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:82:ef:8c:72:22:cb:a2:47:49:f3:66:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=0756e1131a1972259f706c0f4ade0d49e7e7d086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:34:80:29:fa:fa:31:62:db:17:00:9a:fb:
                    cb:34:58:27:49:ff:e4:4e:55:8e:ac:3f:db:7d:63:
                    90:bc:b2:fc:db:47:be:3d:96:60:cb:33:50:5e:49:
                    f2:53:d0:8a:b1:82:ae:fc:27:42:41:62:00:31:94:
                    cb:ce:d6:6a:8d:68:77:73:6f:b9:2e:3e:a6:02:6c:
                    49:19:0c:c1:1c:26:b5:ae:8d:70:6b:5c:d7:a8:5c:
                    fd:6a:32:97:d1:bd:d7:a6:be:a8:e4:b8:1a:2c:8f:
                    8f:79:f5:51:c4:1d:e2:9f:a2:a4:3c:83:fe:03:03:
                    f3:41:82:5f:08:32:b6:4f:77:26:86:ff:c3:b8:95:
                    b7:96:a8:29:f0:c5:ad:c5:9c:45:be:38:d8:d0:e4:
                    e5:d8:2f:9a:63:9d:04:d0:bb:dc:cd:3a:82:6d:65:
                    66:c8:e9:84:20:a3:de:4a:83:c8:1c:97:c5:ac:89:
                    fb:e1:2e:3e:1e:08:ba:45:52:53:3b:69:18:0e:0e:
                    71:30:96:46:ff:68:58:7c:92:f3:41:2f:f2:1e:95:
                    bf:48:72:2e:3d:5d:dc:8c:fe:3e:d2:28:a3:61:3b:
                    db:b8:60:bd:70:b4:bc:6f:26:c1:60:0a:2e:12:f7:
                    ec:e6:41:62:4b:94:5f:a0:0c:6b:d2:2c:c6:81:12:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:E1:13:1A:19:72:25:9F:70:6C:0F:4A:DE:0D:49:E7:E7:D0:86
            X509v3 Authority Key Identifier:
                keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:1b:59:ad:0e:d3:bd:62:d5:92:5b:e3:2a:55:13:ae:d0:
         f8:cd:93:58:74:89:67:14:a2:7c:7a:9d:5f:c9:ad:39:ac:f5:
         49:34:4f:31:78:9c:2b:94:e4:d6:0e:4f:bc:8d:91:fe:61:b6:
         a5:f3:b9:08:e4:0e:8a:f6:db:b1:55:09:34:58:c2:70:85:09:
         eb:b4:dd:82:e6:a5:9b:41:ed:d0:50:c8:a3:9d:2b:cb:02:75:
         2a:24:9f:c2:1e:fd:ab:6d:6c:64:5d:84:cf:26:c5:fa:82:3d:
         d5:d1:33:8b:4f:88:17:c8:47:15:af:cb:0b:2a:e7:22:7c:f9:
         0f:97:c8:83:fb:8c:42:64:44:59:50:80:0d:bf:58:4e:eb:37:
         3d:3c:5b:b0:49:c6:f1:36:e2:66:65:bc:3e:40:c3:14:3b:21:
         d4:70:80:d3:72:7e:aa:c9:ef:a3:bc:0c:b9:d3:42:eb:c7:9c:
         3b:b9:78:d8:9f:df:45:9d:04:fa:bf:e5:c3:aa:bb:d2:28:85:
         d8:00:0b:1b:b3:44:81:6a:79:92:3f:5c:b2:2c:a6:0d:4f:c2:
         e9:a4:82:f3:c4:7f:04:0c:cd:e6:c2:d9:dc:a2:93:f0:89:94:
         de:27:25:8a:16:f5:ae:27:4c:a9:ec:3c:2d:0b:2b:96:bd:46:
         d8:b1:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----