Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File:                     ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier:          IMzIu1+it6j40XxqiNyXhZeMs7lvkmXD3CA+dXlDVtI=
Subject key identifier:   61:4F:B8:CB:CD:FA:26:6C:77:C4:BF:26:58:76:FC:E1:03:22:A7:F9
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer:       /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial:       01962E98BD19108583BA2B0C577975C2F593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: uVkhVbbBezSA6d/na0qs2lSn0Sw/NiWPc3AhPe/afRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bd:19:10:85:83:ba:2b:0c:57:79:75:c2:f5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=614fb8cbcdfa266c77c4bf265876fce10322a7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:bc:7b:7a:e0:56:d7:71:08:e6:ef:8f:5d:
                    a8:73:be:1c:e7:b1:4e:4a:7a:f3:93:41:58:15:d9:
                    fb:39:a8:dc:97:99:0c:3d:5c:65:97:8b:98:1b:99:
                    6a:d5:aa:25:16:97:29:bb:ff:a5:dc:8f:45:7f:b0:
                    70:eb:30:ae:8b:21:f2:f2:b8:3a:57:56:e7:2d:b0:
                    38:9e:85:bc:e1:28:47:bb:00:f3:38:42:d9:a2:e4:
                    ee:41:4e:ac:18:ad:c0:fe:ce:70:dd:d9:c2:74:ae:
                    37:b2:5a:d8:60:b2:d8:8a:86:f7:a2:73:a3:0a:21:
                    6e:84:d0:58:24:7f:93:cf:52:93:88:94:f3:3a:31:
                    81:c1:52:16:2b:42:8f:dd:50:bd:ef:85:36:1d:61:
                    87:36:37:3f:68:44:8b:5f:5f:a4:3a:40:4c:d9:c4:
                    0a:84:a7:ea:a3:ed:3b:fa:24:50:9d:ed:5d:d7:68:
                    62:68:40:a3:e9:65:ca:88:a4:bc:99:ae:90:c2:68:
                    99:03:86:4c:eb:38:19:1c:11:64:73:e1:b0:cc:87:
                    a2:9a:3f:94:df:db:b4:2a:5d:09:9a:1e:51:f7:73:
                    bb:af:28:ec:8a:b7:f1:89:f6:5f:c2:eb:b1:b4:65:
                    31:81:3c:f4:41:47:c8:7d:25:86:50:3b:72:ab:f4:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4F:B8:CB:CD:FA:26:6C:77:C4:BF:26:58:76:FC:E1:03:22:A7:F9
            X509v3 Authority Key Identifier:
                keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:30:2e:ab:50:06:d8:a1:b6:fb:0b:98:7f:74:6b:b2:82:
         ba:56:3f:76:05:75:b7:1d:56:d5:76:9c:d8:a4:33:7c:fb:53:
         12:81:16:ea:0a:d1:df:02:5f:6a:2d:c3:53:bd:68:b7:5e:6b:
         bd:1b:f3:fd:cd:15:98:ed:be:a3:56:d9:d3:57:1a:68:71:60:
         63:ed:f0:19:88:2e:4b:90:6a:4a:ef:a7:22:d1:91:53:b0:e4:
         85:b8:e0:4b:a7:06:e0:f1:0c:36:af:9b:df:32:fa:65:ce:b3:
         32:47:26:e3:de:e0:f4:88:60:a8:09:4e:40:81:6c:f9:a0:fd:
         fe:bd:8e:bd:fc:ea:b9:98:ce:87:d3:1a:0c:5b:10:52:65:8f:
         de:0d:c1:e5:ca:d9:7a:02:ad:63:2a:2b:5e:7f:14:7e:61:15:
         9b:ea:48:f7:a6:53:34:48:dd:db:a6:2e:c5:54:0d:7d:88:a7:
         f9:f8:a2:e2:08:fd:b4:45:b4:b9:ef:cd:0a:4f:41:aa:2b:64:
         29:16:3c:b7:b4:3d:bf:98:3e:73:e0:22:18:f5:3a:14:08:ba:
         e1:45:3e:ce:92:60:b3:1c:41:ff:bb:14:f3:47:22:4f:65:59:
         9e:3e:f5:c8:c8:4b:e1:1a:14:1c:7e:e2:de:ac:d1:33:69:92:
         5f:d2:a6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----