Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File:                     UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier:          TEALDyiIuO18kgH8zZDZpaLGpZO4+ZKI/R3kgH+/E4Q=
Subject key identifier:   BC:F5:55:33:FB:B9:47:E5:51:C9:22:0B:3F:62:BC:DB:09:03:8A:B8
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer:       /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial:       01962DF3F5979CAD9DA50FDAF99DA10279DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: z1ZfOx9+eKtuV0eeasRpeEuUseA11BUMONDys7cZxZs=)
                          2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:97:9c:ad:9d:a5:0f:da:f9:9d:a1:02:79:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=bcf55533fbb947e551c9220b3f62bcdb09038ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:84:38:bc:50:5f:62:5e:c4:e3:7b:d2:32:
                    f3:5a:20:d0:b1:75:ad:b7:5f:cc:ac:3c:20:bb:50:
                    b0:5e:01:23:dc:6f:0e:9b:aa:c5:9f:da:82:5f:f6:
                    16:67:d9:b2:10:36:c8:63:6f:5e:4e:74:f3:4d:70:
                    e8:1a:76:44:e6:dd:89:63:a5:b8:37:8d:ce:ec:97:
                    d3:c9:80:48:8f:7d:43:5c:55:8b:64:bf:26:40:44:
                    c8:d9:dd:f1:a5:c0:ca:2f:be:c2:03:af:61:fc:bd:
                    b7:28:db:c9:32:1a:dd:8f:f9:53:0d:1f:54:29:2c:
                    4e:c3:ee:c8:36:38:a8:b4:50:c7:af:94:9a:4e:3b:
                    39:ae:60:4d:14:be:98:7c:0c:5f:26:1e:d5:ec:64:
                    77:b0:aa:6f:91:cc:7e:3b:e4:e8:5e:1a:bb:e1:95:
                    f1:a4:60:e9:9e:03:65:56:1e:29:8e:b9:d6:2c:0b:
                    87:72:94:89:02:1b:e9:c2:7a:87:cd:61:84:62:54:
                    09:8e:1a:48:0d:a6:37:fb:18:3a:c9:d0:83:b7:05:
                    f2:d4:6c:50:eb:f8:1b:3b:93:71:f7:d1:83:c1:5c:
                    74:04:37:06:5e:32:d2:05:4e:c3:0f:b2:97:fb:69:
                    9b:22:d5:ac:50:99:b6:30:60:67:8a:df:bc:3d:5f:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:55:33:FB:B9:47:E5:51:C9:22:0B:3F:62:BC:DB:09:03:8A:B8
            X509v3 Authority Key Identifier:
                keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:97:38:1a:96:e0:31:9e:4a:2c:66:9a:80:25:50:7e:f2:62:
         9d:b4:4a:30:24:01:ca:8f:6a:46:54:f2:be:e9:cf:cf:78:bd:
         4f:01:31:be:53:60:8f:1a:2f:23:70:90:b8:7a:ca:4a:ea:89:
         ed:98:f8:58:60:51:67:43:08:89:67:4f:04:8f:69:5b:6a:0c:
         1f:5b:b0:9d:7c:a5:49:84:24:23:a1:4c:52:c6:b6:c3:e9:b0:
         75:a7:9d:65:be:d5:de:85:65:4e:a6:c2:72:f7:a9:ea:00:b6:
         b3:98:05:ec:eb:c2:1e:92:63:ac:aa:a6:9f:d3:df:9e:d5:5c:
         e4:f5:cd:17:51:16:ad:12:c4:fa:19:92:bf:fa:ec:0c:91:9b:
         b2:de:e3:a7:13:ad:06:9d:aa:14:0e:56:fa:21:e3:cc:89:25:
         10:bd:85:64:92:2f:f1:07:b3:10:07:56:75:0d:1b:a7:bf:84:
         65:b8:9d:34:2e:53:8e:0e:aa:76:0a:5d:9a:7d:33:62:b8:6c:
         55:69:b3:08:1b:c0:cc:bc:58:de:2e:0d:9b:6d:c4:f8:33:66:
         96:f0:f9:4d:b4:3e:e4:23:d9:81:28:77:3a:09:69:14:1a:c0:
         09:2f:95:b0:52:1a:c1:e3:f6:7e:74:86:f6:aa:64:19:44:f9:
         c9:0c:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----