Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
File:                     dUI-b2St_Fh6CPgawqySYOsu1hU.mft (raw, json)
Hash identifier:          S7jOaU4kc5BFBBezvd2EACH/p4Yj/xzuFxBEZLX6NrM=
Subject key identifier:   85:18:77:3F:80:A0:5A:21:D6:14:FB:F6:21:ED:56:5F:4B:C7:3B:97
Authority key identifier: 75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
Certificate issuer:       /CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Certificate serial:       01962E99B7DCBC14E4B1A805D89A851AD7D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
Manifest number:          0B5B
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: dUI-b2St_Fh6CPgawqySYOsu1hU.crl (hash: sX624sYFcY0ApmBs0Oqty+nywC08xzB604Eprrlr2Qs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:dc:bc:14:e4:b1:a8:05:d8:9a:85:1a:d7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=8518773f80a05a21d614fbf621ed565f4bc73b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:77:dd:c2:6c:a5:f3:54:ad:34:77:43:58:
                    16:f3:0e:ec:f2:5f:ce:25:b6:9b:82:5f:02:8b:e7:
                    82:04:81:9c:51:02:83:ed:50:16:5d:d0:e7:f1:bc:
                    58:1e:0a:10:40:60:c0:1f:4e:6c:fe:60:03:0e:59:
                    85:89:f4:61:39:a3:b8:3d:60:5a:d1:9e:60:0e:61:
                    37:f5:79:8b:94:c9:48:ca:39:3e:aa:34:ef:5b:e2:
                    2c:fd:50:10:d8:b7:af:99:1c:11:42:fc:ed:53:ea:
                    a3:ac:cd:89:d5:e6:45:cc:81:23:e1:f7:85:8a:de:
                    59:e3:67:95:be:12:3f:d9:a9:49:1c:41:82:9d:68:
                    b0:6d:56:65:c8:38:9f:da:b7:6b:05:29:da:d8:fb:
                    48:8f:4e:f6:14:a7:97:2c:c7:a4:2c:60:50:58:8c:
                    8f:7b:b9:01:0a:7d:a7:32:09:ca:b0:53:05:ea:da:
                    b0:48:bb:d5:e8:18:75:68:ce:1d:0c:fc:fe:66:43:
                    c5:ff:2f:9d:05:84:0f:77:85:00:44:47:64:8e:27:
                    7f:88:60:f1:81:4e:a6:1c:e7:1c:d8:20:c4:34:bd:
                    87:d2:3c:3b:25:49:44:a9:52:bd:ef:bf:08:40:a7:
                    ab:e9:ff:e8:c5:d6:77:bf:97:58:7f:b4:2d:53:b1:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:18:77:3F:80:A0:5A:21:D6:14:FB:F6:21:ED:56:5F:4B:C7:3B:97
            X509v3 Authority Key Identifier:
                keyid:75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:83:a4:88:2a:52:9e:8f:af:48:2c:99:2c:d7:d7:dc:af:
         86:c5:4f:bc:e3:8f:90:b3:82:fa:c2:24:b7:00:43:ac:83:3f:
         39:af:43:fc:bc:59:c7:c7:89:66:f8:0d:ed:6c:fd:f3:d5:62:
         5d:33:c1:68:5b:ae:f3:42:b7:63:07:a1:51:47:24:2d:6b:33:
         b4:e1:01:af:47:4d:71:ab:2e:5d:0f:63:cc:9d:de:b8:ee:b3:
         b8:7a:0a:88:31:c5:c1:5b:13:9a:8a:3d:36:3a:c8:7b:de:a7:
         86:0f:fd:e3:ee:bd:4c:84:93:d7:81:bd:83:61:c4:fb:fa:11:
         8d:d8:2a:27:64:27:9f:f2:78:c5:3d:04:0a:d6:b4:63:55:e7:
         ba:f1:4f:73:51:b8:86:85:47:e9:99:24:dd:a0:df:8a:58:f4:
         7a:80:69:c8:33:de:c2:26:13:e6:2e:ba:0f:92:28:05:87:2a:
         8b:c7:e2:e0:b2:1a:62:10:53:c6:f6:70:84:c9:99:40:b4:df:
         08:e3:8b:9c:c7:60:01:a9:4d:b6:2c:38:f4:87:e4:b0:09:dc:
         cb:04:65:22:f6:fb:b3:7e:7e:bb:ae:56:7a:fd:9a:70:88:17:
         5e:ee:58:b0:e7:1f:b0:04:34:ac:93:43:4b:6b:45:35:b3:12:
         7b:74:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----