Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File:                     Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier:          uvZ4Kc7nWSLxHogrxm/kpSFg/L64s8x6y/ElgSX+6+E=
Subject key identifier:   69:06:50:1D:49:74:FA:AA:CF:C2:C6:54:0F:53:D5:B8:1A:86:BC:A0
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer:       /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial:       01962ECF4DD8A1CE0C8AE3DC1C3975C66A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number:          0F5F
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
                          2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: D8KEyeDj7RDDaaUh2tkMPQFolIxfXHRodkKTfz6pFh8=)
                          3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:d8:a1:ce:0c:8a:e3:dc:1c:39:75:c6:6a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=6906501d4974faaacfc2c6540f53d5b81a86bca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:d2:cf:c6:db:5f:02:b5:7f:0d:b6:bf:7e:
                    b5:85:89:79:c5:20:26:12:9c:bf:0d:63:ae:6a:06:
                    ec:ee:4a:86:8a:80:08:ce:53:75:b2:76:48:bb:8d:
                    c7:c8:5d:48:c2:69:3e:1d:c4:a2:12:5d:8d:bd:02:
                    56:e7:e4:bd:3b:f1:ea:d9:fb:c3:b9:3b:dd:8e:eb:
                    84:79:ea:61:6e:a3:d9:b8:98:21:4f:a5:51:c7:e7:
                    2f:b6:3c:55:66:3b:22:9c:b8:ba:97:f5:0c:22:7f:
                    f1:a5:8c:a4:d0:42:38:21:98:e1:bf:42:0f:70:0b:
                    3e:31:c9:8d:30:78:fb:3d:13:a1:ae:ca:02:f0:89:
                    d8:73:5f:4a:64:69:df:77:92:c7:55:0b:aa:35:47:
                    40:cf:87:c1:5b:02:15:d5:0c:9a:d6:f0:92:dc:8a:
                    8f:ce:f3:13:e6:df:a1:ba:e3:a7:92:58:3c:d1:36:
                    4b:46:be:a0:96:a9:d9:16:d4:39:2b:d6:1e:37:4c:
                    c5:0e:ed:1d:a2:38:10:bc:43:e5:91:30:1a:d2:78:
                    bb:ed:f1:95:d1:78:da:86:80:ba:84:d9:e6:62:b7:
                    36:40:9d:1b:e2:8c:6a:86:b2:a8:23:e3:93:73:39:
                    28:8e:d0:75:5e:f4:64:2e:83:96:65:c3:4f:49:b8:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:50:1D:49:74:FA:AA:CF:C2:C6:54:0F:53:D5:B8:1A:86:BC:A0
            X509v3 Authority Key Identifier:
                keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:08:c5:4b:8b:b4:5f:cd:4e:73:e9:d1:17:f6:95:75:fa:14:
         ba:69:fe:0d:f1:0d:ce:05:4c:bd:e7:fd:c2:90:4d:55:d0:e3:
         bf:03:35:c5:31:94:1f:b1:cc:21:f5:7b:c3:99:ac:24:79:8f:
         04:53:c0:33:8a:8d:b5:df:dc:0c:e6:16:4c:51:26:25:89:9b:
         1e:0c:d9:bc:31:23:4c:ba:1d:ca:41:34:b0:f3:22:2c:6a:c2:
         15:bc:ab:08:02:57:06:1b:fe:ca:0e:22:ae:93:9e:8d:91:2b:
         cb:00:ab:2c:91:fb:9d:09:31:6c:6a:7c:b7:82:65:42:ad:12:
         86:ef:a7:ec:76:5f:32:7f:86:71:5d:16:61:fd:22:9d:3f:5f:
         f7:f0:bd:a5:d4:76:5a:e3:bc:26:c5:e9:09:8b:55:e5:cc:57:
         37:a4:45:78:fa:d2:0a:41:f1:85:a3:0b:5b:9d:46:e8:e3:78:
         73:54:8f:38:fb:a9:fe:8e:f1:95:ec:85:b5:7a:99:47:19:8d:
         38:2a:7d:d5:e3:19:21:3e:20:f1:ea:6b:30:f6:e5:c9:61:34:
         fc:d0:d1:a6:56:b3:ea:bf:b6:76:90:02:5f:6b:61:1d:a7:fb:
         06:36:20:ba:d1:e2:7a:30:06:b9:41:40:7f:6e:8a:17:26:5c:
         f5:a6:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----