Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File:                     uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier:          CziQqH496EW4Z+FfqiXGCjn3UKuPlAbDC9Th7PQyAHs=
Subject key identifier:   50:20:8F:00:C9:20:FA:A0:3F:FF:AB:4B:60:B9:17:87:5E:82:A2:38
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer:       /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial:       01962E2AC69CB99C80C7FA072100A8511B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number:          0B39
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
                          2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
                          3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: BPR2kHvM4P43Zc8oSQj6lWo8pPEPD1N6q5JxJilnc3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c6:9c:b9:9c:80:c7:fa:07:21:00:a8:51:1b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=50208f00c920faa03fffab4b60b917875e82a238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7b:71:21:b8:02:96:05:9e:c1:33:4c:75:bf:
                    99:d8:1e:33:8e:4f:70:31:e8:ba:54:75:ed:8c:87:
                    83:a1:16:01:a5:f6:c8:37:bb:ca:b9:5b:38:03:57:
                    36:6b:72:46:e3:97:e1:4c:4c:1f:38:50:a5:c8:2a:
                    27:47:0b:2d:09:f7:82:6e:f0:3e:a5:80:6d:0b:ec:
                    ee:65:a5:f7:02:30:db:d8:9b:1d:59:4a:9a:09:6a:
                    d8:4f:b0:86:83:fc:55:fb:fc:e1:ae:2c:54:45:54:
                    8d:33:5e:83:97:26:51:61:9e:c7:f6:af:bd:9e:15:
                    c5:eb:75:3f:97:35:1e:90:2a:75:82:a1:fb:b1:a9:
                    a0:e7:52:1d:00:d8:b6:b6:26:b6:6e:1e:ce:af:e3:
                    f8:3d:69:95:45:e6:ce:33:a5:85:d4:c8:32:d9:fc:
                    62:8d:3c:3c:6f:d5:93:c5:f3:43:3d:c9:b4:34:1e:
                    1d:bc:04:b1:ed:91:0a:70:ca:8d:46:8b:c9:c7:24:
                    e7:10:e0:8a:2b:9c:29:3c:46:95:26:b2:12:46:e4:
                    c8:d9:8b:34:c0:a1:ad:1e:be:c5:93:ca:6f:f5:bb:
                    cd:d6:de:42:95:dd:8e:22:53:66:27:64:af:25:5b:
                    4b:a4:28:d5:14:ff:de:88:c3:f3:00:25:35:aa:22:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:8F:00:C9:20:FA:A0:3F:FF:AB:4B:60:B9:17:87:5E:82:A2:38
            X509v3 Authority Key Identifier:
                keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:55:3d:31:79:89:2d:34:9a:53:5a:00:b9:1d:a3:8c:f0:79:
         1c:1e:95:21:6a:ed:91:37:7e:30:2c:38:94:ba:f0:53:99:40:
         92:8b:ac:f2:ef:b2:79:25:3c:50:b8:fe:d9:5b:6c:3a:bc:7c:
         9b:79:1a:92:88:f9:7c:af:b8:2e:3d:2d:b1:8d:6d:d1:8e:f4:
         9e:ca:35:a9:eb:37:75:28:d0:1d:b8:9b:09:12:f8:52:a6:d8:
         f7:64:f8:2b:35:9f:f2:d8:fd:3c:4d:b9:4b:14:a9:c6:6b:55:
         ba:84:31:92:fa:a2:22:3b:63:94:d9:ce:20:34:14:95:ae:9e:
         a8:f2:6a:9e:c9:93:0d:3e:58:2b:54:36:c0:c7:60:f2:1a:0e:
         7c:21:da:a4:7f:f9:89:23:3b:06:2a:1b:01:37:6a:6e:f4:b2:
         86:50:b5:f0:75:bf:df:8f:b7:65:63:f3:37:e5:3e:c3:62:b7:
         35:21:88:fd:9d:d9:c7:5b:80:94:2c:50:3d:da:8f:1a:cf:b7:
         d5:36:bb:6c:26:08:41:2d:8d:36:d9:d6:72:55:e2:3b:0b:68:
         dc:fc:6f:76:15:a9:fe:c7:b5:da:22:67:91:11:b7:e2:be:de:
         51:a9:2c:1d:a7:5b:59:45:4c:b6:c6:24:27:25:46:9d:a6:57:
         63:9a:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----