Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
File:                     UCEgVRzt4dQIwdliiazjv-K9QKE.mft (raw, json)
Hash identifier:          xn+BzY6Qg8VKS1PiPFztMDqxiIxwKBRDjG4YGmFlHuI=
Subject key identifier:   99:BF:FC:D4:A5:FA:3A:BD:B0:99:98:E7:A9:8A:2E:59:66:D0:CF:9F
Authority key identifier: 50:21:20:55:1C:ED:E1:D4:08:C1:D9:62:89:AC:E3:BF:E2:BD:40:A1
Certificate issuer:       /CN=502120551cede1d408c1d96289ace3bfe2bd40a1
Certificate serial:       01962E98CF060F5469564BDAEAC2F13FCE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft
Manifest number:          0566
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: UCEgVRzt4dQIwdliiazjv-K9QKE.crl (hash: Iml0PJZYI/gmbRuDY74Jw1xt28WOZ1YrffoOSf9Ww7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cf:06:0f:54:69:56:4b:da:ea:c2:f1:3f:ce:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502120551cede1d408c1d96289ace3bfe2bd40a1
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=99bffcd4a5fa3abdb09998e7a98a2e5966d0cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:64:e9:34:bb:47:3b:be:7d:88:e8:2e:ba:
                    d0:46:b9:3f:2e:62:c2:f0:e4:cd:47:96:77:21:ed:
                    ee:a5:d1:a1:04:7d:6e:01:2a:2b:de:35:d9:48:1e:
                    77:2d:b1:49:5a:7e:05:82:c4:2c:b8:80:14:da:f0:
                    18:3b:38:55:f1:9f:f9:04:e3:2b:00:75:13:0b:da:
                    8e:84:4d:c2:62:8b:eb:c4:75:3a:6e:04:51:a5:90:
                    47:c8:9e:e7:3a:3b:68:29:4c:40:c5:a0:d2:63:e4:
                    71:b4:85:da:2e:0c:d8:76:fc:ad:cb:83:09:49:1f:
                    4e:db:c1:ee:95:f9:89:52:bf:10:8f:31:7d:7a:6a:
                    d3:b0:5b:78:31:4a:0f:a4:05:86:09:e2:af:12:17:
                    37:75:9a:79:b2:51:c4:84:21:b4:2d:5f:c3:3c:9a:
                    51:37:5a:bd:e3:d3:ee:b4:8c:74:e5:3c:5f:1a:c0:
                    13:3e:c0:44:e5:f1:4b:b5:74:f0:bf:05:11:54:a1:
                    64:18:47:3a:b7:ea:20:bd:28:a1:a3:20:fb:e0:cf:
                    f6:ac:0d:a9:45:c2:ff:e3:2a:13:af:67:a6:1b:d3:
                    a2:86:82:c6:1b:c1:b1:9a:76:1b:28:34:ed:b7:b4:
                    87:97:07:10:d5:c2:cc:6c:a0:79:1e:5d:5e:de:57:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:FC:D4:A5:FA:3A:BD:B0:99:98:E7:A9:8A:2E:59:66:D0:CF:9F
            X509v3 Authority Key Identifier:
                keyid:50:21:20:55:1C:ED:E1:D4:08:C1:D9:62:89:AC:E3:BF:E2:BD:40:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCEgVRzt4dQIwdliiazjv-K9QKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/33b56d-1943-4bf5-a3b9-c96b8762181d/1/UCEgVRzt4dQIwdliiazjv-K9QKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:90:23:67:4c:5e:cd:c8:8c:c4:fd:d2:6d:fe:11:90:51:1b:
         be:f1:a8:0e:49:cb:77:32:28:b2:17:29:f4:d6:2a:0a:54:c1:
         6c:1f:8a:68:83:08:dd:99:fa:e2:cc:88:4f:bd:cb:8a:a4:35:
         36:24:d9:ff:35:b7:37:99:c4:98:cc:64:09:cb:d4:96:ea:88:
         8d:11:1f:e3:61:d9:bd:04:16:b0:c4:47:5c:b3:24:ad:e5:3a:
         e7:c8:3e:14:7b:b2:5c:7a:de:c8:5e:bd:c4:2a:f7:8f:80:bb:
         1c:eb:0b:75:72:8f:7f:3b:e0:91:79:5f:60:f8:3c:f9:f1:82:
         9e:1a:3e:56:cd:44:78:f9:6c:68:a7:77:79:27:bc:f9:43:7b:
         9c:b0:54:8f:73:f0:ad:49:25:2b:0d:68:6d:d4:c4:91:ff:6d:
         2f:5c:75:a2:a6:df:9e:b5:d5:13:7f:d1:fc:bd:4d:07:76:da:
         20:67:06:0c:87:4d:58:42:fb:96:26:3b:69:a7:ae:73:59:5e:
         1d:ca:95:c5:d9:56:53:69:ff:41:79:12:28:ed:4f:6c:a1:ab:
         ac:29:22:da:8a:aa:c8:e5:f9:10:5a:b5:f2:38:e3:d6:2d:9f:
         ca:30:76:be:a3:5b:f5:a5:11:25:84:31:0c:f8:b7:df:f2:4c:
         da:5d:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----