Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File:                     UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier:          +UrTlbXcJG6OSBpN2jAjmQJqLZ9YfQiglg5k5HLyHZ8=
Subject key identifier:   F1:63:61:DB:44:73:44:16:C6:A9:D2:3C:2D:3C:C0:F5:1A:30:1B:57
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer:       /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial:       01962FAB36F2131E2D2DFF787FE506D07F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number:          142B
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
                          2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
                          3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: ymXwe/SqqMt32UZzqSlbs1E/ydJAZICjw59fcKpDvNw=)
                          4: zGd05-NZw-sJTwuBu02tPsH24pE.roa (hash: ofSwbMcGSKnZ4x4xLzhpGhAWtlZ8SB33VsUVqo3M7tU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:f2:13:1e:2d:2d:ff:78:7f:e5:06:d0:7f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=f16361db44734416c6a9d23c2d3cc0f51a301b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:03:dc:2f:53:2b:63:ef:43:02:e2:76:e9:
                    41:e0:0a:1b:4e:95:43:cd:48:d6:25:12:c5:18:ce:
                    e9:75:64:39:b0:d0:91:ac:a7:c2:69:e7:bc:90:65:
                    c4:b5:59:51:8e:7d:5b:a5:c9:4a:d5:42:5a:a4:98:
                    1d:51:e6:a5:fd:df:68:b7:ac:b4:5c:b6:34:60:bc:
                    ec:63:58:d3:18:a3:3b:e1:e7:c7:80:b8:fa:e9:7b:
                    25:6a:98:d2:a2:72:47:43:f8:3f:e5:ff:5f:3e:6f:
                    2d:a3:7c:d3:7b:cd:c3:17:5f:39:1d:8d:40:82:c7:
                    3c:09:f8:93:16:d0:53:6c:df:9e:51:16:a0:92:c2:
                    b3:36:61:1d:33:3a:fe:94:ae:6d:1d:01:b8:50:c8:
                    f1:92:d5:30:bf:45:19:61:7d:02:ba:4b:fc:08:f2:
                    f0:dc:29:e4:7d:cb:0a:2f:63:71:8d:5c:21:03:31:
                    4d:c7:ee:b6:1c:0c:66:e9:ba:1d:2f:95:de:55:98:
                    5a:f4:75:6a:18:88:a6:44:d5:95:a4:1c:d5:c9:a7:
                    30:eb:89:a8:dc:c3:70:0a:01:2b:e2:97:9b:f4:e5:
                    f3:41:1f:98:b9:b3:71:9a:e7:86:88:02:d0:21:29:
                    17:92:c1:e9:21:69:87:f8:41:e5:54:4e:c5:f7:2a:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:61:DB:44:73:44:16:C6:A9:D2:3C:2D:3C:C0:F5:1A:30:1B:57
            X509v3 Authority Key Identifier:
                keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:f4:5b:27:b9:ea:48:1b:41:ed:5a:6d:de:aa:66:76:24:
         58:88:0a:14:ff:bd:75:6b:8d:21:1e:e2:71:9b:07:38:c9:3e:
         04:f6:6d:75:5d:42:3c:e1:38:d4:f9:a9:09:05:28:5c:20:fd:
         63:25:db:c8:fc:43:92:77:b7:75:94:85:5f:71:4d:1c:25:74:
         21:26:5f:8c:a7:ae:13:08:a2:f4:72:62:0b:f0:1a:ac:be:14:
         fd:fe:45:14:76:6f:f7:ac:3d:cf:6d:b8:b6:36:0e:23:be:98:
         6a:93:8c:3c:e3:f8:a1:b0:ab:fa:fa:7c:75:f7:2e:18:6c:7e:
         77:ab:29:85:ae:18:1b:05:02:f8:1d:66:15:dc:d5:ef:58:bd:
         7f:df:1c:f5:b4:ea:7a:a5:ae:79:dd:ad:37:ce:3b:2c:07:24:
         56:71:84:88:60:3f:e6:7b:13:b8:3d:a5:ed:29:06:bb:03:f4:
         a0:61:f7:06:a3:56:93:43:f5:ec:78:cb:9f:11:ce:5c:c4:26:
         d2:0a:ed:59:d0:8a:85:1a:13:fa:f1:5a:13:a4:69:ca:00:9c:
         07:86:d1:f8:34:e1:a0:66:11:44:76:d6:e7:9e:8c:7c:be:a1:
         9c:eb:80:43:d3:cc:11:f5:4b:88:cf:4c:55:b0:a4:93:fc:c6:
         ac:79:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----