Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          Ld+MZrUhleOSN82C+lFFkjsb7g4fQs6ZsxSRAxlAIh4=
Subject key identifier:   37:4F:25:C2:8D:A2:AC:87:93:1B:82:28:FE:5F:49:03:B2:6F:A9:85
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       01962DF3C70297C8571D0FE06DB5F568EA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          08B6
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: KdXGUsS6YFFnPjVjyeI04m93TdQ.roa (hash: F1EV3pD+ahdpl3VAKymIXnj+Wbddg7Ey2m0ZW8zB4L0=)
                          2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
                          3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: /NNk7uc6l4u0Zf0Cdw9ZdekAphJmWm1H/YYOT2xkwL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c7:02:97:c8:57:1d:0f:e0:6d:b5:f5:68:ea:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=374f25c28da2ac87931b8228fe5f4903b26fa985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:00:3c:40:aa:53:c7:c6:cd:c1:a6:8d:66:
                    00:0c:8e:06:ef:fb:71:4d:85:51:10:55:15:0c:92:
                    86:78:f4:1d:cd:42:f2:93:7b:12:e3:b0:df:c6:88:
                    a8:15:7b:5a:22:a7:af:37:b7:31:da:3f:71:78:b4:
                    16:80:4c:1c:3d:3a:b6:bd:af:4f:53:55:5d:8b:c6:
                    32:eb:15:af:4d:ad:76:d0:11:38:8d:d7:2d:c9:40:
                    b3:03:3d:f0:6b:99:5e:f0:43:93:26:73:29:d0:82:
                    c4:c4:7c:cd:0b:ac:bf:41:7c:b9:7b:bf:f4:8c:65:
                    f4:8f:88:95:40:8a:cf:87:6b:5c:d0:f8:35:b4:9b:
                    b7:cb:98:0c:66:9a:92:27:37:8d:36:7e:79:06:53:
                    e6:ac:ee:3a:7f:6f:c5:5f:8f:57:7e:42:ac:f7:dc:
                    a5:e9:87:c6:e4:b4:a8:75:84:db:ec:c0:57:46:b9:
                    a7:c3:5a:98:bb:bb:cf:df:8c:57:14:c5:17:99:9c:
                    1a:a7:ec:c8:92:c9:3d:fb:b2:fa:de:f5:5b:a8:00:
                    3f:fe:f9:2c:55:17:88:b8:d6:52:43:93:0a:2a:dc:
                    d8:4e:a1:12:cb:e8:ce:42:e2:5d:3e:d1:25:c3:6e:
                    65:9a:00:e0:54:3a:cb:8f:c3:61:42:3b:96:90:87:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4F:25:C2:8D:A2:AC:87:93:1B:82:28:FE:5F:49:03:B2:6F:A9:85
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ce:b8:4b:a2:43:5f:1e:80:6e:dd:33:62:87:b9:eb:05:45:
         e9:c9:b1:85:99:b7:02:f4:28:36:c4:05:8b:41:5f:a6:50:62:
         ee:7b:74:99:50:c8:71:64:5f:57:30:8f:b7:d5:c7:55:f1:21:
         6d:1c:2c:b9:01:60:26:49:ae:e6:1d:ea:45:7c:00:b6:92:4d:
         13:a8:b6:d7:15:b3:5d:bf:2a:9d:fe:fa:20:19:45:f4:5c:10:
         58:91:95:07:56:4b:36:7e:b3:7b:cc:1f:de:65:e8:5d:9c:f8:
         38:a2:b6:66:05:e5:2b:9e:27:31:7b:ae:50:7c:2a:b2:8a:e1:
         f1:1b:f6:f7:84:91:60:7d:d1:31:de:97:41:6a:19:89:39:09:
         d3:6d:9e:8a:24:78:c5:6b:70:3e:37:14:e1:b5:49:8d:03:57:
         12:38:16:78:64:63:f4:79:1d:d8:27:85:44:24:5c:2b:bc:36:
         0a:43:87:9b:11:1c:7d:68:8c:e7:c7:59:83:fe:ab:47:c2:ec:
         2e:39:47:fb:82:c2:6c:5e:70:91:27:12:5e:93:64:3c:45:e1:
         28:f3:2b:7c:b6:65:e8:ce:85:fb:2b:95:5c:f2:fd:d2:d8:91:
         49:54:64:01:e7:ff:49:17:d4:26:ee:6b:95:04:c1:92:c7:81:
         41:f1:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----