Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File:                     ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier:          ln8IZn2Oykq5goTWpo5AtcnxRyrnqVzDk/dORLJVg7k=
Subject key identifier:   58:63:CB:0C:00:69:A2:4F:5D:85:7E:27:FF:BF:DE:3B:0A:79:43:A9
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer:       /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial:       01962E61E41734EC5419BF64AA87E24132C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
                          2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
                          3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: QykXNwXMImJ5NQNhzEi03uPWdabTDP7KOKPyxrnTHFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:17:34:ec:54:19:bf:64:aa:87:e2:41:32:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=5863cb0c0069a24f5d857e27ffbfde3b0a7943a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:99:da:6b:2b:cc:af:33:64:d6:f9:41:61:
                    0c:07:56:96:64:4b:87:99:ce:77:57:9e:91:27:d6:
                    d0:1f:ad:4f:6e:e7:5c:93:3c:1d:10:82:e2:eb:ab:
                    fe:5c:f1:7a:d4:e9:5b:aa:1b:48:05:a8:68:12:98:
                    2f:b1:e5:c0:57:a5:1d:48:5a:90:84:44:d5:ce:8a:
                    35:d9:04:3d:41:87:19:51:c4:5a:cc:ca:ff:b9:6e:
                    6b:75:d5:82:10:9e:da:79:7a:36:1d:b6:9f:dc:9f:
                    d7:7b:50:a2:8b:44:6a:3d:30:3e:94:22:75:69:fc:
                    5b:e1:2b:27:78:76:22:76:38:7f:35:e7:af:80:1d:
                    ba:a9:0b:e9:d3:79:3d:ed:57:9e:97:f0:99:e3:3d:
                    e1:9c:73:c3:4e:64:30:9c:8a:de:4d:d5:a3:3b:18:
                    c8:01:2b:da:c4:30:30:7e:f7:22:c7:a7:fb:d7:54:
                    ad:7e:bb:61:1b:ac:bd:10:34:91:22:7d:de:1c:45:
                    5b:f3:47:9f:84:6f:fe:3e:95:70:cd:be:3a:a3:d5:
                    2c:2f:53:b3:5e:7b:7c:4a:84:32:55:a5:49:aa:98:
                    7f:3a:36:7c:75:f5:2f:43:3b:2d:cc:27:30:97:4d:
                    4e:3c:55:c5:d5:d6:11:9e:f2:c9:03:49:7c:ad:64:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:CB:0C:00:69:A2:4F:5D:85:7E:27:FF:BF:DE:3B:0A:79:43:A9
            X509v3 Authority Key Identifier:
                keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:f8:53:30:e8:ee:3e:66:99:0d:c1:8b:8d:98:3a:4d:b0:
         f8:a6:e0:bf:b2:65:d5:82:a3:30:a4:74:05:18:2b:94:86:b3:
         c2:46:50:d7:01:5b:e2:05:7a:f9:7e:46:ee:28:24:b4:5c:fb:
         b8:7d:9a:aa:4e:f9:2f:3c:40:14:e3:fa:e2:a0:a8:84:eb:e9:
         60:a5:7e:1a:55:ff:d9:9b:c2:91:a7:c7:8c:23:ea:1d:89:a7:
         86:f0:d4:e5:7c:63:fb:6f:0c:6f:6a:1a:a2:cb:f3:15:3f:ff:
         4d:b8:90:30:40:1d:5b:fd:52:3f:bc:93:5b:91:bf:5a:78:49:
         01:99:e1:9b:b7:97:b8:5d:bb:22:59:b3:12:22:5c:34:49:de:
         7d:6a:38:43:b1:7b:40:67:b9:93:a1:37:5f:86:11:9f:19:68:
         46:a0:dd:fa:7d:04:00:61:1f:8b:58:a5:fc:d9:fd:e2:4c:cb:
         2f:9b:cc:4a:f1:a4:02:56:5c:61:f9:26:77:23:9f:bf:e4:c4:
         55:87:74:fc:cc:d4:84:40:e3:3b:f3:65:b9:02:8d:0f:59:e2:
         d9:3c:78:98:83:67:d6:f8:4b:69:02:f1:4c:3a:31:dc:c0:52:
         c0:ad:0d:59:47:f1:62:0e:8f:ab:bb:dc:7e:15:d0:98:4b:6a:
         57:d7:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----