Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File:                     ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier:          cpNf7i49CZApvQqTXiBPHAA92SB2kFIiuzTAyS2PJ64=
Subject key identifier:   DB:73:07:ED:1F:9C:E4:F9:78:0A:55:A3:C7:D7:82:90:37:8F:1E:55
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer:       /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial:       01962F7452A9F500C05B07D88696FF3EB08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number:          022C
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: INWimlXugV5FIcD+rjeLyMocFraiBjzRQmwidoFGCxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:a9:f5:00:c0:5b:07:d8:86:96:ff:3e:b0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=db7307ed1f9ce4f9780a55a3c7d78290378f1e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:e1:49:47:a9:51:06:5f:eb:be:b0:8d:43:
                    ac:28:fd:f1:5a:f3:e9:0c:fd:bc:2e:02:e2:47:f8:
                    c6:75:78:50:7c:85:73:d0:8d:0c:8e:a3:c6:5c:3e:
                    ec:eb:86:25:05:11:b6:b0:29:9c:50:76:ec:a1:6f:
                    d0:41:88:9a:63:2a:31:3d:88:e7:6a:f1:06:9a:61:
                    fd:2d:9f:32:13:2a:49:eb:8b:f8:29:de:bd:1b:89:
                    34:f0:6f:df:a0:a5:87:b8:e8:89:80:ef:f3:63:18:
                    89:20:27:a3:dd:44:4c:c4:f8:72:b2:3f:27:72:29:
                    ac:f2:f1:d7:56:bc:c4:f7:8a:64:83:f2:37:32:53:
                    69:7f:97:1b:75:fb:ec:62:a8:b7:80:4c:36:59:b5:
                    b6:24:e3:64:25:46:56:8d:79:64:e9:86:b1:63:2a:
                    eb:7a:07:51:e9:f1:8d:cd:6a:eb:f8:f6:21:bd:45:
                    ab:25:a0:d4:8b:76:ba:9f:dd:f3:e1:5b:f0:3e:7d:
                    d3:be:3c:24:cf:a0:47:1c:df:08:05:06:15:1a:af:
                    d1:12:55:f4:99:ba:98:4b:65:d1:3a:ea:c2:7a:74:
                    d5:c9:12:93:0c:4e:94:b1:a1:d5:2f:7f:21:40:b4:
                    6e:b8:27:da:85:f8:ee:d5:15:97:a0:3c:d2:d3:97:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:73:07:ED:1F:9C:E4:F9:78:0A:55:A3:C7:D7:82:90:37:8F:1E:55
            X509v3 Authority Key Identifier:
                keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6a:46:7f:bf:4f:fe:7c:b1:e9:cb:9a:17:00:92:20:55:65:
         21:72:10:0b:30:ab:14:7e:ed:ae:31:1f:b7:46:db:2f:9d:23:
         36:5c:35:75:b3:24:31:4e:eb:66:d7:a7:fc:36:cf:49:e1:d6:
         a1:58:78:7e:95:b4:cb:79:85:d9:d7:58:92:8e:7f:c4:0e:46:
         c2:2e:53:40:f5:03:b0:49:28:a2:cb:5f:65:a0:f7:d1:04:81:
         4c:38:72:ea:d0:75:5f:36:6c:6e:4f:d5:e5:b4:2b:c2:9a:0a:
         e8:f2:5d:a0:30:60:49:3f:5e:25:18:e9:8b:2b:b3:a3:a6:70:
         34:90:97:37:ff:32:d9:21:93:a3:f8:cb:b0:76:cc:2f:5a:05:
         bd:d8:8a:83:3d:e9:f8:a9:5c:d8:12:50:1d:8b:fb:35:3c:3d:
         18:35:5e:6c:48:7b:f6:6b:98:c9:de:33:a1:18:e1:97:8b:91:
         2b:db:dc:1c:6e:23:15:23:c8:97:ec:9b:02:5b:f6:8b:01:f8:
         e3:37:dd:02:27:91:b3:d8:05:6b:a6:3b:fc:4d:22:ef:f8:5a:
         fe:9e:7f:1f:de:56:fe:bc:a0:99:10:83:3e:98:e4:42:0b:2a:
         1b:84:c2:f1:96:60:5d:29:23:1d:61:62:61:db:1d:4e:cd:7f:
         9e:09:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----