Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
File:                     UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft (raw, json)
Hash identifier:          FBKntdSFVSVrA5UbzHpc29UC/kI04JRH1C5N2Xkxod4=
Subject key identifier:   45:0A:CB:A4:2D:F3:B9:86:AC:36:A4:0A:D5:A2:13:D1:02:32:3D:E2
Authority key identifier: 50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8
Certificate issuer:       /CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
Certificate serial:       01962E992CD76403D5251D31751A6A0746F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft
Manifest number:          0872
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl (hash: ls8sAQRuJip5efpHfdks6Ypbo/dQ8lKb3s0aQ7RM918=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:d7:64:03:d5:25:1d:31:75:1a:6a:07:46:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50affc288430a03c0f60ba6a0e27602370f2e9e8
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=450acba42df3b986ac36a40ad5a213d102323de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:c4:83:a2:24:f5:73:bc:68:dc:69:77:9b:
                    c8:7b:72:1f:c9:24:d4:37:c9:52:b3:10:87:07:5b:
                    b6:79:36:8c:28:1e:85:e5:76:ef:24:e1:ed:13:f7:
                    4e:ce:ef:ab:e2:2e:3f:d7:4d:c8:e0:e1:2d:08:86:
                    d6:47:7b:04:3b:42:ab:d1:68:84:7a:ac:f9:20:c7:
                    9d:3f:f5:aa:be:dd:52:35:76:8f:e8:d5:88:3e:a9:
                    7d:b1:65:fd:7c:72:2a:be:a7:24:1a:16:93:76:5d:
                    7d:ad:af:97:20:14:fe:61:6e:46:ca:ab:10:29:2f:
                    fd:96:32:ce:da:a4:6a:76:4a:99:13:ac:43:76:ab:
                    7f:e4:60:1e:2e:09:26:ff:29:4f:e4:df:9c:34:cd:
                    62:06:a8:25:9a:d8:16:43:f6:6b:9d:44:49:3a:f1:
                    98:2e:84:a7:1f:3f:b9:c1:93:17:c4:79:41:66:c1:
                    67:06:97:f2:1d:a6:33:63:de:06:f6:51:20:eb:e3:
                    fe:ea:01:ab:61:6c:81:5f:f2:e3:5c:df:52:3c:0e:
                    47:92:0e:8f:60:6c:a0:fe:27:7e:c5:fe:15:f8:4c:
                    d3:df:2f:dc:78:77:28:50:07:c3:03:61:b3:cf:a3:
                    2c:2b:47:90:bb:71:50:e2:85:08:05:ab:28:6b:a9:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0A:CB:A4:2D:F3:B9:86:AC:36:A4:0A:D5:A2:13:D1:02:32:3D:E2
            X509v3 Authority Key Identifier:
                keyid:50:AF:FC:28:84:30:A0:3C:0F:60:BA:6A:0E:27:60:23:70:F2:E9:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UK_8KIQwoDwPYLpqDidgI3Dy6eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e20a7a-88e2-46e6-ad9d-33b8035ca324/1/UK_8KIQwoDwPYLpqDidgI3Dy6eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:62:c8:a2:0d:2c:70:dd:6e:86:fd:3f:5b:76:4e:66:51:
         ed:7b:f6:94:7a:2a:53:e2:6d:cb:f9:fb:51:c3:23:cc:da:59:
         26:6b:79:4f:c2:0b:66:d1:be:55:4f:cc:db:11:32:19:19:0e:
         3a:8e:83:0d:6e:6b:f9:97:b4:e5:47:73:b7:23:ad:04:6e:da:
         cd:6a:be:71:3b:6a:57:bb:bd:ab:31:14:68:24:aa:00:c2:10:
         a9:8a:55:91:18:e1:37:75:74:85:28:d8:41:5e:14:c9:37:ff:
         06:9d:22:46:f1:03:ef:0c:cf:6a:2c:9a:33:bc:59:b4:6d:2b:
         ac:54:3a:a4:8c:48:ec:5e:c1:5d:f3:29:da:a2:9a:34:5c:32:
         27:c5:d1:41:5e:7a:86:c0:5e:69:14:f9:5a:c0:c7:b4:3e:77:
         ad:64:c4:75:ee:08:8e:0a:b0:00:68:4c:0d:e2:2a:58:bc:84:
         5f:e1:21:db:16:dd:d6:af:ff:bc:18:92:7d:7a:b3:30:ba:8c:
         57:25:2b:18:7b:2a:6a:33:dd:bc:9e:77:dc:65:91:66:1d:d5:
         d2:97:95:2a:9d:84:31:f5:24:12:bf:c9:07:e8:6d:01:af:c1:
         52:b2:ec:86:3e:1f:6d:d4:d0:bc:5a:1b:aa:90:e8:8a:8a:bd:
         4b:16:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----