Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          nT7y0JbA3YAfmPaLczZTid50lBjPDqPA0b3NVhDQoFU=
Subject key identifier:   59:54:34:2D:D3:58:73:39:E0:CD:B4:E2:8D:31:93:8F:C7:68:F5:B5
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       01962E98EF9BD386DB9C34AE32B0F03809F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          11C9
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: usyy/7X+Q0Jv63FW4Z/ecS0MzNXiJ1UwBha11yTRBTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ef:9b:d3:86:db:9c:34:ae:32:b0:f0:38:09:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=5954342dd3587339e0cdb4e28d31938fc768f5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:43:b6:fe:38:53:c0:bc:31:25:1b:7c:21:
                    17:e6:94:fb:b2:c5:de:9e:ca:74:a6:34:9b:0d:1f:
                    16:c5:16:eb:74:b1:10:a5:4a:c9:23:5f:53:1b:20:
                    31:bc:74:81:ce:b9:27:0f:62:3a:7d:1e:af:74:b4:
                    66:e5:75:4d:2f:a1:04:b1:14:a0:77:ad:06:33:6c:
                    06:fb:15:33:08:5d:4f:56:a8:78:64:3d:14:c6:f2:
                    f6:b7:cd:20:27:e5:fe:e1:59:d1:08:3d:93:d0:f8:
                    87:5f:b8:88:ea:ba:8e:fe:92:64:91:ad:e5:55:19:
                    9a:91:ca:e7:66:ad:26:39:ca:57:43:63:32:6b:4a:
                    12:d0:a1:73:7d:b0:9c:f8:42:72:9d:7d:23:4e:13:
                    e9:fc:b2:66:7e:22:b5:50:72:28:8e:72:55:76:40:
                    0b:3d:fc:b6:96:39:ce:0e:37:db:a5:d9:67:a0:5c:
                    93:b1:52:18:f3:13:72:10:5f:f9:be:53:3a:fa:ea:
                    da:94:9b:b0:5b:b4:10:24:31:e0:80:5e:2b:29:03:
                    ad:28:d5:fa:7f:24:34:8e:6c:95:bf:39:10:3d:b7:
                    10:f0:1d:16:6c:98:f7:bb:d2:ba:ec:b5:99:6a:0f:
                    dc:f8:5e:0f:56:a4:a5:54:14:92:19:e0:1c:34:22:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:54:34:2D:D3:58:73:39:E0:CD:B4:E2:8D:31:93:8F:C7:68:F5:B5
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:47:fd:45:7e:dd:5e:02:f2:39:86:c6:85:8b:bd:d9:93:4d:
         ed:c3:0c:bf:1b:59:7e:65:d0:66:98:46:b9:ff:0c:2d:d3:35:
         2c:b8:0a:4b:ca:71:a3:b3:31:83:50:64:a5:18:a6:70:9b:9e:
         74:91:74:e7:c1:de:9c:fb:8f:69:53:4b:12:a8:7d:45:4d:e0:
         05:7e:8b:5d:19:94:19:98:22:77:12:50:c7:5a:f3:16:42:92:
         3d:be:e2:7c:38:01:1c:f7:9b:e0:b4:e9:d1:7f:7d:39:40:fd:
         a9:fe:d8:64:da:0b:b0:6b:cb:27:c8:90:9e:9b:28:86:cf:a4:
         5a:08:50:fb:76:2b:b7:28:ef:e0:d0:11:b1:3f:24:15:20:69:
         a2:ac:0d:a9:1a:bd:42:d5:fd:15:1a:c8:96:b8:79:db:4e:e5:
         ae:04:a0:fa:ce:d3:74:a3:30:6b:b5:17:0a:df:f9:4f:2e:85:
         b2:bb:1d:82:b1:d2:c1:96:a2:9d:8c:6f:5d:eb:76:e0:61:5e:
         be:18:0d:18:62:05:fd:80:f7:88:f9:0e:4e:d3:c2:29:31:98:
         6e:2b:9e:d9:d8:02:a9:fe:27:8a:5d:1c:32:17:33:5b:61:a1:
         d7:b8:6c:eb:6e:6a:dd:9a:9d:f6:d3:f9:a4:3c:e8:d2:22:17:
         45:2d:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----