Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File:                     UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier:          bTo2XKuNAXmJ3LzRrLSicWQwol7nV4fXAv0fXbeJfP0=
Subject key identifier:   BC:6B:FB:46:2D:2A:5F:9C:A4:9B:90:4E:A1:E1:EB:2E:66:A3:7E:49
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer:       /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial:       01962ECFB042BD9F90DCAF3A03F52E7C2F5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number:          0573
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: uJZbgyBemeEQPNP4gcDpQ79o3omLse4DpeF8OB3oqZc=)
                          2: iF93w_kO_x0TrENOc4gmI6-EtJ0.roa (hash: 5zJM9jO9AIiHF5QxYe/wtht+xZaOBv518vzoLVEf1p4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:42:bd:9f:90:dc:af:3a:03:f5:2e:7c:2f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=bc6bfb462d2a5f9ca49b904ea1e1eb2e66a37e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:6d:62:8e:1d:04:27:bc:07:76:d2:0d:28:
                    56:74:50:0e:7b:4d:49:f8:f1:85:b7:3c:81:e9:31:
                    65:a5:48:36:7d:ae:02:44:b0:77:ba:5a:89:a4:d2:
                    51:de:da:33:a0:08:6f:b7:ce:ab:13:bf:67:30:7c:
                    eb:04:d7:c3:9e:e4:8f:23:1c:7d:74:9a:8c:0a:0f:
                    ae:77:5c:bc:1b:d1:ed:51:09:7a:67:27:87:f1:1e:
                    c9:06:5b:3a:77:57:2a:6c:2f:ec:ff:1b:76:0a:72:
                    7e:59:9e:81:fa:12:c2:b0:4d:56:f0:24:17:51:ab:
                    6f:6f:31:87:c3:1f:73:2a:3d:a7:c2:ef:b9:e8:c8:
                    c6:6f:1e:21:c8:47:c6:ca:38:2c:3e:b8:63:6a:c0:
                    4e:11:67:85:29:2f:43:0e:92:3c:15:ea:4a:ea:31:
                    60:c3:a9:38:92:f8:ec:4f:d4:2d:f8:e2:26:bc:15:
                    85:ad:d7:6d:c9:3d:10:6c:e7:49:05:53:39:50:35:
                    3a:f6:10:09:f5:c1:48:66:18:a1:01:1b:9c:1a:66:
                    95:1b:b4:17:c0:aa:d7:d4:2c:56:c5:e5:57:89:cd:
                    c5:c6:db:bc:72:73:10:0a:a7:29:2a:f2:92:03:12:
                    97:ed:2e:f9:03:d1:cb:2c:f1:b8:56:8d:f9:0c:1d:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6B:FB:46:2D:2A:5F:9C:A4:9B:90:4E:A1:E1:EB:2E:66:A3:7E:49
            X509v3 Authority Key Identifier:
                keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:c2:49:79:4f:2f:92:ef:da:1b:11:3d:97:69:14:6f:d0:
         c7:6a:7c:60:2e:a5:7a:7b:4c:75:89:10:1d:45:7b:90:c0:1c:
         8b:ab:b3:95:1d:3b:20:0a:1a:72:a0:69:1a:e1:98:32:20:99:
         70:cd:c2:30:98:ff:c7:c0:d6:9f:64:a0:a8:10:6f:fa:7a:a3:
         64:1e:88:8b:74:8c:0b:72:bd:79:c9:23:ad:f8:46:58:5f:e4:
         63:7e:7f:0a:3d:98:c2:af:32:a0:1a:c1:41:76:d4:d6:e3:37:
         b7:e9:1e:dc:36:22:11:98:7d:fa:56:b5:c2:dc:0a:71:dc:49:
         ae:3a:ad:1f:17:89:3e:38:78:88:8e:19:d1:cf:ba:32:dc:a2:
         af:22:0d:ff:c8:19:f6:a0:c4:78:2f:2b:14:0f:d0:b8:1d:3f:
         83:10:7e:22:1b:58:90:77:f3:db:62:08:49:60:04:c8:95:a7:
         e7:1f:c9:39:ab:bc:8d:04:ad:5e:2e:3e:b8:27:02:b3:bc:a5:
         04:63:1b:3b:9f:15:3e:3b:2d:a0:f0:6b:b4:29:36:32:4c:2b:
         50:6f:4f:37:a6:47:2d:c8:10:7b:10:b0:23:5b:d8:5e:8c:14:
         26:43:76:bb:6c:65:7a:ba:91:7c:5c:ab:20:5d:96:86:e5:39:
         ca:2d:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----