Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File:                     ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier:          NyT8njsywIwC1euekLZTjlYXtXYAMWa62yBAF5ur6bQ=
Subject key identifier:   8D:71:9F:F9:0E:92:FC:85:5A:5A:BB:3C:C2:EC:18:F3:5D:83:55:A4
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer:       /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial:       01962E2AC6D0E382E3410B589C75076AD27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number:          03DA
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: FsCfl3c4Ltiv9Zcfet8sFDK261w.roa (hash: 0KkSs+dGUlPIvwsEqtO4YX2lHrkRDey49/pmSeBkBNg=)
                          2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: Dlj/d6tS1D/xGYsFBa0DxOgu00GHUL6SbIMmz9Dy9N4=)
                          3: dMpsd9wlXgD-cspja3jDD1k9bOA.roa (hash: NYHzPamuN1malposZb2BM/eWGsMUpeT5gZWd7cy50qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c6:d0:e3:82:e3:41:0b:58:9c:75:07:6a:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=8d719ff90e92fc855a5abb3cc2ec18f35d8355a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:82:cb:0c:dc:00:1a:1c:b4:6b:54:c6:3a:
                    09:94:84:13:3d:73:0b:ee:f7:98:4b:d4:7a:11:cf:
                    1b:0d:37:5c:d5:80:92:98:43:7d:ed:13:a6:fd:ab:
                    78:a8:24:f8:da:f8:ad:62:b3:a1:bb:6a:9e:17:e4:
                    83:dd:c0:cf:75:64:0c:72:7f:f8:d0:39:60:0f:39:
                    e4:ec:15:20:be:c5:69:5c:91:0d:60:aa:2f:0e:4a:
                    76:1c:23:c2:12:03:25:60:e0:f6:b9:b3:5d:51:b7:
                    85:49:d2:0e:07:7a:e5:e8:fd:ef:6d:46:f4:b5:21:
                    62:75:29:a7:a5:bb:dc:4e:ea:0b:1b:2c:ec:6b:16:
                    9c:e2:62:2f:5f:c2:09:67:00:d0:63:ef:41:19:36:
                    55:35:38:94:8c:5f:5e:f4:11:7e:a2:39:60:41:be:
                    bf:28:8d:ee:31:66:e1:35:1e:07:e6:4a:b6:0f:5e:
                    52:26:67:70:b1:56:df:73:dd:70:4f:38:b9:3c:06:
                    6c:5c:b3:ae:25:bd:08:78:9a:73:72:b9:b4:1f:fc:
                    2c:a0:cb:f8:27:f9:37:b2:46:a3:4d:ec:13:c7:6f:
                    a7:7b:cc:37:52:d6:3a:e9:da:2f:d0:ad:6a:79:ac:
                    b3:64:f2:1e:7b:22:57:86:18:73:ff:5b:ee:1f:9c:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:9F:F9:0E:92:FC:85:5A:5A:BB:3C:C2:EC:18:F3:5D:83:55:A4
            X509v3 Authority Key Identifier:
                keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:8e:2d:8d:6b:30:20:43:b4:22:c6:84:87:60:6f:52:48:
         8d:39:17:ce:fc:62:df:1e:fa:b1:ef:72:39:27:df:c6:88:42:
         3d:26:60:77:e3:e3:d1:be:ae:2c:f8:08:7a:8b:23:8e:49:2c:
         6b:65:ab:d6:de:95:e8:7c:78:8a:37:58:82:e2:44:c1:95:8f:
         5c:01:41:b1:63:a4:e6:90:1a:8b:c8:4f:59:03:b3:f1:29:9b:
         ae:63:8d:f6:fb:31:18:28:50:af:7b:f6:97:f6:51:56:7f:0e:
         68:4f:f9:b1:fa:3b:7c:31:f5:02:b6:55:de:8b:c9:14:2d:01:
         86:2c:61:3b:24:66:1b:49:18:fd:eb:13:14:ac:4a:01:05:58:
         c1:49:e1:bb:b7:8f:d2:a4:0f:dc:fd:c9:3c:94:56:7d:f9:86:
         91:da:d7:53:1d:94:5b:16:fb:f1:f4:af:20:c9:46:0d:bc:45:
         72:43:ec:a4:eb:8a:3c:3e:06:86:0a:95:d8:b0:6a:2e:7e:b7:
         d8:cc:d5:32:de:a7:a6:ba:ff:2b:d8:f2:96:41:77:50:d5:42:
         80:be:d5:a8:7a:33:d0:81:8e:8e:00:5b:15:16:e2:67:71:fd:
         59:5c:ca:62:b6:cc:70:b6:9a:16:07:33:ce:bb:51:5f:f4:01:
         65:db:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----