Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
File:                     ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft (raw, json)
Hash identifier:          TsP/OyQo1GTmcghnAqa9lHkegthnH3ZFlASRIXoTU5k=
Subject key identifier:   AE:46:F9:AF:AA:B6:F3:A2:99:BF:15:AA:9F:36:E2:19:CB:9A:36:5B
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       01962F3D4FCD375C14132AAE7367C80FF613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (hash: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=)
                          2: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (hash: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=)
                          3: ZeRzlTDzmLL9ruSMWEiors7V-CY.roa (hash: 5h/FBtMrMZdufOCQE7QgMCpb+UDEPswHfLnEQXnKhOE=)
                          4: _H04-tv1ooHj1KmhXwO0mYV3IF8.roa (hash: apIZOTa7xK/4gGTnIysPO6fJUe7VmPIEc4W1/L0W+Ps=)
                          5: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl (hash: TnG+uez/pDdFrs6Sdl950Z6YPssYorjSSYEikuyXdLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4f:cd:37:5c:14:13:2a:ae:73:67:c8:0f:f6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=ae46f9afaab6f3a299bf15aa9f36e219cb9a365b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:20:a5:b9:8e:51:73:1b:21:46:67:62:d8:
                    ea:ac:55:ae:7f:f8:e0:61:05:d9:5b:dc:a9:50:79:
                    42:4f:75:9b:a3:12:f8:e7:28:99:61:dd:de:37:18:
                    9b:37:9f:e9:55:41:d7:b2:c0:37:9d:d4:cf:ef:f7:
                    32:4a:c6:7d:51:99:23:d1:a4:d1:5a:2a:2d:d5:d4:
                    81:89:3f:fa:d4:3d:67:5c:40:e7:85:9c:d8:42:89:
                    30:af:2b:72:a7:37:21:d9:58:6f:e8:cb:de:ef:68:
                    9b:85:07:4c:87:5e:a2:b3:a0:3e:77:61:81:46:54:
                    a5:a2:8d:cf:89:64:93:c9:66:0c:88:ea:26:bd:3b:
                    69:ba:1c:54:c5:84:f8:1f:da:b9:b5:3f:2e:8f:0a:
                    5f:12:9b:68:92:d7:f0:0b:34:fd:ab:76:12:6f:ba:
                    c7:60:2d:43:20:ca:65:27:c6:e4:9c:e0:83:9a:05:
                    5b:13:99:82:ee:80:79:21:92:fd:39:bc:8b:34:5a:
                    3b:11:18:ab:eb:1d:fd:12:1f:09:e7:67:38:03:18:
                    be:14:00:12:a1:46:f6:e9:ef:8c:78:ae:01:eb:c0:
                    13:55:72:c5:d8:62:ad:db:b3:7f:98:f7:7e:ff:65:
                    7b:7a:18:57:36:48:35:f7:46:e5:44:e2:43:09:83:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:F9:AF:AA:B6:F3:A2:99:BF:15:AA:9F:36:E2:19:CB:9A:36:5B
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:43:90:35:93:c2:b5:cd:48:d4:ae:0f:2d:4a:a6:4a:57:2f:
         90:8d:67:a8:76:8a:9e:bb:6f:27:8c:83:3e:be:6b:09:1d:22:
         57:1d:27:8d:32:1e:a0:4b:f2:70:93:b4:74:d1:ac:2a:a7:15:
         47:5d:81:18:3b:c8:bb:cf:c3:e7:a8:ec:f9:21:5e:ef:b0:db:
         66:9e:88:09:ad:57:a4:26:05:e7:b6:51:27:7b:9c:c2:4a:a4:
         f2:e5:75:5f:51:88:64:f4:62:cb:06:5d:82:59:5c:12:b3:dc:
         0a:ae:85:bb:28:8b:79:01:51:38:a7:38:00:6d:9d:ea:4a:63:
         e1:5c:c5:4e:8a:4f:c3:6a:2f:20:3b:c8:a9:07:0d:b9:82:cf:
         60:30:78:1d:fc:54:4f:d3:20:1a:76:a4:17:5e:08:f9:dd:61:
         99:ee:85:44:15:13:fc:5f:f5:f0:35:59:1b:c0:65:ab:8b:9b:
         63:57:43:ae:93:3f:41:3c:b1:e4:fb:8a:52:78:df:4e:37:7b:
         ee:56:52:bb:fb:54:e3:97:71:d3:01:14:dc:a3:0b:68:ff:77:
         2b:cd:70:7c:64:69:27:ce:29:db:71:fe:3b:8b:36:4e:19:24:
         d4:a3:48:6c:3e:23:6d:6c:bc:44:b8:fb:58:22:c2:1b:26:82:
         4d:fe:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----