Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File:                     Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier:          ZRVV+mv9Z0vHD8hla8cpnV5wEWRHNf8V7jEZDYFFSP4=
Subject key identifier:   C8:D0:85:83:88:37:02:AB:27:B2:33:43:C9:82:EF:8E:F7:7A:F0:A4
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer:       /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial:       01962F74454C75F1EA49D12DDDBB8B1EC28E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number:          0349
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
                          2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 1zGXhNsVkEsdLbpY5Qu56JNmQGIt4S99bi92tQaq7i4=)
                          3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:45:4c:75:f1:ea:49:d1:2d:dd:bb:8b:1e:c2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=c8d08583883702ab27b23343c982ef8ef77af0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:9e:f3:c6:ca:09:13:b0:17:ec:f7:6b:2f:
                    65:68:43:d8:0d:d6:b6:43:9e:10:fe:5f:4d:0e:b8:
                    c6:28:b9:23:6c:bc:31:ff:ff:87:44:77:3a:4f:ae:
                    43:75:f2:bb:9c:81:69:95:5c:10:b9:9a:6f:4a:81:
                    58:93:33:06:0c:82:78:0d:2d:93:fe:67:41:71:b4:
                    cc:00:de:40:59:be:f9:c0:4e:02:c5:f3:40:c1:f1:
                    08:95:e1:c2:73:ec:8f:ec:31:85:2f:7b:1e:23:40:
                    51:c9:0f:d3:4e:e4:2f:69:45:66:8a:a2:ba:1a:0e:
                    22:0c:10:85:99:47:49:46:8c:0e:26:cd:78:cc:12:
                    75:24:d7:ab:aa:69:eb:28:25:d6:73:14:36:aa:fe:
                    60:45:9a:8d:19:db:25:4b:54:3b:47:d6:ac:bc:3c:
                    5d:95:0b:e9:32:31:cb:d9:42:43:80:a0:ab:e1:e2:
                    71:0f:de:32:ee:d4:24:d4:80:31:a8:4e:5e:24:ef:
                    8b:80:1a:3c:47:57:af:bc:15:12:35:04:18:4e:29:
                    47:cb:d9:c0:a9:9b:9c:59:1d:d7:90:d6:b1:25:66:
                    06:c5:75:9a:38:2a:26:cf:ba:5a:54:b8:d6:0a:ac:
                    87:08:72:7f:47:94:e3:80:f9:78:e5:a1:04:e6:6e:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:85:83:88:37:02:AB:27:B2:33:43:C9:82:EF:8E:F7:7A:F0:A4
            X509v3 Authority Key Identifier:
                keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:27:8b:e1:9b:3c:ba:52:ef:70:9b:c0:2f:89:78:77:df:ab:
         6c:96:de:f2:e6:76:40:72:71:b8:54:9e:1c:17:1d:3d:b3:8d:
         fa:54:ac:44:a0:f0:bf:c3:fa:a8:bc:c7:74:9d:5c:55:7c:a7:
         5b:e1:4a:af:a7:dd:fc:7d:ec:67:f0:1f:f6:45:08:a2:74:3c:
         01:d4:08:68:09:02:3b:f3:e9:4a:25:81:76:f8:61:98:82:21:
         28:3b:d4:67:09:32:1e:30:ea:ae:57:69:cf:08:af:57:84:af:
         73:fa:af:b7:82:cc:d7:4e:f7:3f:e4:c6:0d:b8:73:53:f9:af:
         e0:01:51:70:b0:22:f4:ae:55:1f:2a:df:a2:6c:06:4f:04:90:
         17:e5:4c:d8:0a:af:f1:45:98:f9:17:2c:1a:75:8d:66:43:9f:
         9c:b4:7b:9a:6e:ba:a1:58:a7:e4:17:83:4f:85:be:2e:fb:42:
         72:ce:50:7f:6a:3e:84:3b:29:bd:e2:fb:16:48:8a:95:93:44:
         6b:48:aa:0a:92:b2:4e:f9:02:8f:49:db:21:94:ea:8f:2a:d9:
         38:8c:14:f8:06:3b:75:42:bb:fc:29:db:30:ed:0b:23:72:c1:
         74:7c:39:6b:13:1e:74:4a:a6:78:4c:47:2b:52:7b:ac:4e:bd:
         ef:19:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----