Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          c38xOLp5qgL5m3PX84q/3uE221ZfVm0cYNmFZBSsAFY=
Subject key identifier:   18:63:09:E0:4B:21:A0:91:E1:90:FC:A8:4D:D8:C8:98:62:06:08:C6
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       01962F7459E8F29843B66B349793CFBD9A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          05F2
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: NtaMTU7V9qZP9S9gseyzxQXDCLod/G+Li7H/aGJ1ZD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:59:e8:f2:98:43:b6:6b:34:97:93:cf:bd:9a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=186309e04b21a091e190fca84dd8c898620608c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:fb:aa:fd:ef:f7:62:bc:a0:03:64:0b:4d:
                    b5:07:68:d5:02:9f:f7:0a:2f:34:d5:2b:5b:3c:1d:
                    af:b7:0e:78:f3:36:a7:a4:8d:8b:74:c9:db:df:6c:
                    6e:bd:bb:f8:54:e6:a2:f3:e9:cc:28:03:a6:19:cb:
                    a6:14:79:0d:3c:45:65:c9:8e:a2:5f:5b:79:36:5f:
                    aa:89:d3:b9:d8:6c:2c:dd:92:78:d2:ce:09:e4:4f:
                    de:ca:da:f8:7d:93:41:1e:32:cb:eb:27:5a:cc:87:
                    2f:41:7b:c2:a2:cc:99:80:5b:37:12:cb:95:3e:61:
                    ff:54:4d:e3:2d:af:a3:6e:65:a7:fd:95:e7:ef:6a:
                    50:58:e6:42:7c:c2:8d:ef:cc:89:10:d2:10:14:77:
                    4c:8e:71:56:73:93:da:2b:c3:82:2d:ad:e4:9d:b4:
                    0f:3f:12:93:9c:2f:ef:c1:6b:64:ab:0e:02:b6:a4:
                    1a:50:38:e4:a3:35:ef:21:f0:ac:89:cf:db:ee:06:
                    16:03:c9:1d:6f:92:55:d3:7c:75:b9:69:d7:a4:8f:
                    e0:98:da:84:c0:62:a8:6a:c5:16:1a:dc:88:da:1a:
                    3c:b9:df:2e:58:7a:b0:d3:63:6e:7c:ef:33:f0:c2:
                    62:35:22:f2:d9:f1:3b:86:db:05:35:a7:f2:fc:82:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:09:E0:4B:21:A0:91:E1:90:FC:A8:4D:D8:C8:98:62:06:08:C6
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:43:16:8f:64:54:00:e4:70:4e:1c:cc:63:17:ce:d9:c8:26:
         ba:04:48:d5:17:e7:69:5d:58:53:4d:d9:d1:7d:1c:66:bc:fc:
         4a:9a:15:ae:4b:da:5f:94:e4:95:f6:07:aa:2a:00:54:09:61:
         bf:dd:76:eb:07:04:e0:f3:a8:93:19:ca:e8:35:4b:41:d8:de:
         4a:4e:52:ee:82:ea:a5:65:44:8c:cd:84:fc:e7:7c:ab:e6:f9:
         2f:86:05:43:55:73:f0:d3:09:c2:2e:74:4d:b8:ef:02:06:57:
         55:ae:91:c3:f6:84:4e:70:a7:d5:17:1f:21:f7:d1:0a:0d:c9:
         c8:80:b8:69:4e:61:88:64:3d:ed:71:2a:68:38:7d:68:39:35:
         95:06:95:01:3a:d7:32:c8:75:ca:9e:50:01:f3:39:80:a3:a5:
         89:b2:64:66:4a:e7:26:28:4e:a4:2e:85:45:f2:f4:56:ce:f3:
         95:43:0b:34:4b:e1:4a:ff:d3:1a:1f:3f:d7:0a:49:f0:ef:e0:
         4f:91:6b:6e:e2:21:08:1f:00:b1:1d:5e:c7:33:b6:87:8c:da:
         f1:51:d0:12:1e:8f:32:cf:59:2f:10:e1:15:ad:f1:db:07:38:
         a3:1d:8b:5d:f2:e4:a4:41:40:3a:10:7b:4c:8f:14:a8:45:c8:
         4e:11:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----