Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File:                     UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier:          PexvdMxKb3xiGCd4JR+KkpAkSJuR4k7qrUzVVfE7cM0=
Subject key identifier:   B8:8B:91:30:1A:88:2B:C8:59:1E:B3:38:9A:AC:18:44:A9:DB:6E:1E
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer:       /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial:       01962F3DB0AE2FBFA016EFB26B68C3D07D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number:          143C
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
                          2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: OIxM82Xr3HKEg3PLkLdQnezrfWbM7k3hUYyhAJ9nMQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:ae:2f:bf:a0:16:ef:b2:6b:68:c3:d0:7d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=b88b91301a882bc8591eb3389aac1844a9db6e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:fc:b2:41:47:ce:f4:ff:56:c5:be:b6:db:
                    7c:c8:1c:83:68:12:93:ce:d8:64:31:5e:1f:69:e7:
                    61:11:b9:bb:d8:d8:f9:49:47:ca:03:3c:a0:52:e1:
                    a8:a9:f1:67:f2:f7:31:02:4c:4a:5e:b8:34:1b:23:
                    02:59:e3:6b:44:4f:7e:ae:d1:ef:7e:dc:e8:53:1d:
                    90:fa:20:e9:e8:c4:12:0a:f0:cb:30:2b:4a:dd:bf:
                    bc:41:cf:9e:02:a2:d1:25:ed:18:cb:56:80:c7:4c:
                    bc:28:ea:93:7d:7c:a7:1e:3a:29:84:64:0f:5d:88:
                    e8:57:dc:ec:dd:35:94:af:93:e5:5b:e5:17:50:33:
                    fc:20:02:4a:e2:e0:e4:69:0d:8c:2f:ca:71:ea:c2:
                    b5:d6:9c:bb:55:9b:1e:59:a8:c7:b4:ea:e9:1f:07:
                    53:b7:91:59:ae:bc:f9:2c:ac:ed:55:37:10:b3:67:
                    be:94:2c:b2:24:db:70:49:38:32:ba:da:6a:b2:ab:
                    b8:92:27:ec:0c:a5:27:03:82:71:b0:ed:00:61:55:
                    b1:4d:7c:67:2c:9a:12:5f:5b:97:a9:08:ad:cc:26:
                    7d:01:31:6c:bc:4e:7b:e2:90:7d:fd:b7:8e:50:1d:
                    55:4a:eb:c9:b7:d6:6d:26:a6:da:09:f3:b9:e1:a1:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:91:30:1A:88:2B:C8:59:1E:B3:38:9A:AC:18:44:A9:DB:6E:1E
            X509v3 Authority Key Identifier:
                keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f0:3f:07:b8:64:56:ca:09:fa:22:3b:11:30:f3:5f:79:60:
         1b:db:62:8e:77:59:7d:d0:0b:35:53:f9:56:ee:7f:79:2f:2c:
         09:6b:6d:0b:8a:5c:96:c9:f3:5a:40:2a:7e:19:ef:4e:bf:46:
         07:8e:ad:59:ee:f7:ea:81:cb:e0:3a:0a:b2:01:9b:09:88:b2:
         77:f9:c1:52:e2:b7:bf:a6:a5:62:1e:06:95:60:81:b7:49:73:
         e5:82:9b:3e:cb:64:1b:6c:b0:6d:c8:9a:d1:94:27:e6:38:bc:
         40:0f:89:03:eb:a7:7c:4b:70:9d:b1:35:e8:95:f1:c3:d6:29:
         fa:11:45:2e:42:55:54:53:ee:1e:92:c4:40:c7:55:9c:18:04:
         6c:b5:58:77:94:6c:d6:76:37:81:72:af:3b:17:e9:bb:60:61:
         f8:9c:33:45:88:7e:0b:b3:39:ff:8a:18:b5:92:64:50:e1:7d:
         88:29:74:be:d8:f3:61:8a:70:8b:df:03:c8:93:f1:85:2e:f4:
         d9:e9:ad:50:43:f4:d5:d3:ca:23:60:3c:65:f9:05:ed:cd:f3:
         bd:7b:27:c6:0c:62:a0:72:20:d3:9a:1b:08:e3:93:e1:96:9d:
         01:3b:c1:de:9f:24:50:cf:ec:ae:eb:1e:59:f7:c2:4a:3f:62:
         56:99:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----