Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File:                     UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier:          ZaACdf4gk+0GrV9+GqkK198jMIhH5RwtfVXN6GTvLFg=
Subject key identifier:   D5:9C:D4:1D:08:52:9E:93:44:7D:18:51:23:42:F1:FA:55:57:33:F8
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer:       /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial:       01962ECFAEFF0A2B3046D32908F2B46D064F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number:          0994
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
                          2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
                          3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
                          4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
                          5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: kwnQnaLbgFZENElTlctHOi1KkKBwTJy3bu0C9H95Yeo=)
                          6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
                          7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
                          8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:ff:0a:2b:30:46:d3:29:08:f2:b4:6d:06:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=d59cd41d08529e93447d18512342f1fa555733f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:4f:8f:4d:b2:ff:56:35:10:0c:92:6c:c3:
                    6d:e2:ec:55:c4:76:cd:ca:11:cd:a0:03:6e:ea:b4:
                    dc:dc:7d:41:6c:1a:df:58:3a:57:d0:33:a8:53:f6:
                    b5:46:96:4f:cd:a0:af:52:c5:b4:40:2d:d3:c3:88:
                    c4:f4:eb:de:19:30:c7:33:91:bd:8c:61:07:07:e6:
                    f1:60:f3:ce:d8:0d:1e:29:6c:96:ff:f8:40:31:94:
                    4b:eb:45:b5:0e:9e:9a:5f:f6:9f:37:71:3a:cf:b3:
                    0a:31:a6:c7:fb:2e:c0:59:68:50:a0:e4:95:51:d1:
                    a0:71:25:25:58:07:ec:70:a6:93:a5:9c:0d:30:ba:
                    30:f1:d1:11:b7:76:fd:d7:8f:e2:e7:98:6f:cf:7a:
                    56:a3:4c:3f:5f:ab:44:3d:7e:36:7b:cd:e2:f4:89:
                    f4:f7:e8:a0:0e:9e:07:64:96:81:d8:85:bd:58:ef:
                    0d:75:c9:b7:ec:b3:1f:b5:15:11:c6:78:cb:0c:84:
                    dc:f6:0d:e3:66:61:a7:89:f2:0f:ae:bd:0f:57:b4:
                    52:2e:d1:b1:5c:5f:b6:d5:ce:2e:da:98:18:e4:06:
                    91:6c:41:bb:c3:70:e9:66:c0:48:df:b6:95:f4:59:
                    fd:86:81:e5:8b:37:f4:20:64:8b:13:a9:80:b1:d2:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9C:D4:1D:08:52:9E:93:44:7D:18:51:23:42:F1:FA:55:57:33:F8
            X509v3 Authority Key Identifier:
                keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:94:51:83:58:48:1f:49:b4:4e:21:a2:60:bc:c6:68:53:
         44:b1:d2:11:f5:be:fe:68:c5:2d:5c:ad:5b:ff:7e:14:17:27:
         0e:10:b2:51:b7:5e:b7:1c:56:8d:21:1e:c9:2c:d6:6e:e8:ef:
         48:11:69:10:e2:2e:3f:f2:f8:a6:37:e2:54:e2:d7:b1:76:f3:
         b1:8b:c8:a7:de:73:73:da:eb:88:d8:85:5e:83:45:2b:da:48:
         6d:2e:8c:7b:ad:25:74:cc:ec:d4:05:c5:56:ff:39:5a:24:b4:
         06:e3:d9:f4:5d:5f:b1:9c:82:4d:d6:63:06:b6:30:6b:a5:a1:
         80:6f:3a:e3:70:04:44:dd:e4:28:f3:02:b6:98:67:98:bd:c0:
         5e:df:81:cb:54:3d:d4:6c:17:7c:97:c0:fd:e3:40:27:48:79:
         7f:a2:fc:56:ee:89:a9:39:01:ed:8f:98:3b:cf:3d:cb:44:fa:
         e0:1a:35:ec:d1:23:01:24:f8:d9:1a:7a:64:8a:e0:55:b7:95:
         dd:29:d3:f2:63:86:2c:82:ae:ba:e7:ea:ba:ec:ab:c5:9c:9f:
         ae:4f:1a:5b:e2:d2:28:63:bb:b6:7c:aa:1d:41:75:68:38:4f:
         49:74:f6:dd:b7:2d:58:d9:f7:74:73:07:d3:0e:6f:a3:5b:15:
         8a:58:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----