Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File:                     UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier:          zR9MhAchy9tL9P+3VYcmxHau25A6EtGRmh75zmxZ8Ho=
Subject key identifier:   76:6D:E8:27:38:D9:F6:42:D3:79:EC:E2:5A:00:5A:E1:55:9E:8C:07
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       01962E61C722E47CCC9210E81216E1A28060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number:          1111
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
                          2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: mfWTlBKHyH5GrtraosUckXgzttTz69pCUkHhVs9g3hc=)
                          3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c7:22:e4:7c:cc:92:10:e8:12:16:e1:a2:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=766de82738d9f642d379ece25a005ae1559e8c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:dc:05:78:92:b5:a3:a2:01:8a:e9:65:fc:
                    3e:a3:81:78:9a:5c:55:da:e4:00:79:d8:b8:91:ee:
                    c6:15:e9:36:25:77:13:f3:1f:6d:db:11:4c:7e:79:
                    42:7b:df:f6:db:32:3d:6c:2e:3a:ec:08:09:d0:b9:
                    1c:fb:e1:92:08:3d:24:8f:d5:be:1c:ce:3d:6f:06:
                    d8:ed:05:4d:12:7d:c6:4a:a5:00:0a:55:cb:87:1d:
                    41:26:f3:b2:f7:89:d3:45:30:f9:91:63:59:22:17:
                    12:6a:2f:9c:aa:00:b8:57:83:06:7f:0b:47:77:7e:
                    59:60:d3:a2:cf:70:c4:97:d9:1d:2a:6c:6e:af:9b:
                    42:bf:ec:58:05:9d:63:0c:a7:27:92:ac:3e:ed:69:
                    36:46:bf:96:d2:63:9c:84:4e:d4:01:01:73:64:5f:
                    5c:58:15:fc:a3:36:17:fd:96:4e:22:e8:b8:9c:10:
                    21:06:d9:ea:0d:e9:5c:22:02:76:38:c1:51:ee:8a:
                    88:3a:4e:7f:81:68:6d:ae:a3:c1:0f:6b:f8:c8:ed:
                    6f:45:4c:58:a7:1a:c2:66:8b:82:da:7e:1e:de:e5:
                    24:73:2b:eb:a2:7c:35:b3:b8:57:14:a8:78:71:08:
                    14:b7:6d:8f:15:a0:c7:20:b3:48:fa:b9:5f:cf:52:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6D:E8:27:38:D9:F6:42:D3:79:EC:E2:5A:00:5A:E1:55:9E:8C:07
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:9c:95:53:31:82:63:1c:72:81:50:77:9e:64:45:68:9a:
         12:b2:98:48:ea:4b:c7:5b:67:50:50:e1:7e:f6:6e:d5:7f:54:
         f2:71:c8:b2:7c:73:95:3e:5f:46:fd:8c:37:a0:53:0c:f1:46:
         b2:d7:ee:e7:2f:85:d3:86:be:77:0a:ab:25:7d:44:24:5d:f6:
         d9:e0:c7:a1:a9:c0:fe:d0:19:fd:92:6d:84:b2:14:10:47:9d:
         d4:6d:5f:9d:7f:98:6d:a9:98:0b:48:e7:59:e6:ce:d2:e4:c6:
         c3:b8:aa:8b:6f:f8:f0:7c:4f:ea:c7:14:4f:d2:55:84:8f:76:
         b0:bd:3a:98:4e:b6:4e:1d:76:e1:13:c0:37:e4:99:87:33:8a:
         57:5f:84:4c:44:cf:9e:f7:e7:cf:d6:ae:ee:8c:da:b0:92:4a:
         d0:1f:ad:7d:59:af:dd:c6:17:29:0f:c7:f2:f2:f0:c9:fe:cf:
         28:d3:09:d3:6f:af:1c:64:bc:01:17:df:c3:6e:18:b7:2d:55:
         65:c3:c1:99:db:0b:aa:60:37:b6:ee:3d:fb:17:a8:b4:22:95:
         63:be:30:d0:d1:d0:b1:8c:ed:f0:6c:d7:04:c2:77:8b:14:c2:
         8f:c7:12:0d:fe:32:62:a1:71:2c:ca:c9:ea:d4:7f:39:0e:43:
         fa:58:de:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcci5HzMkhDoEhbhooBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
Eyg3NjZkZTgyNzM4ZDlmNjQyZDM3OWVjZTI1YTAwNWFlMTU1OWU4YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZrcBXiStaOiAYrpZfw+o4F4mlxV
2uQAedi4ke7GFek2JXcT8x9t2xFMfnlCe9/22zI9bC467AgJ0Lkc++GSCD0kj9W+
HM49bwbY7QVNEn3GSqUAClXLhx1BJvOy94nTRTD5kWNZIhcSai+cqgC4V4MGfwtH
d35ZYNOiz3DEl9kdKmxur5tCv+xYBZ1jDKcnkqw+7Wk2Rr+W0mOchE7UAQFzZF9c
WBX8ozYX/ZZOIui4nBAhBtnqDelcIgJ2OMFR7oqIOk5/gWhtrqPBD2v4yO1vRUxY
pxrCZouC2n4e3uUkcyvronw1s7hXFKh4cQgUt22PFaDHILNI+rlfz1IfjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZt6Cc42fZC03ns4loAWuFVnowHMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsOclVMx
gmMccoFQd55kRWiaErKYSOpLx1tnUFDhfvZu1X9U8nHIsnxzlT5fRv2MN6BTDPFG
stfu5y+F04a+dwqrJX1EJF322eDHoanA/tAZ/ZJthLIUEEed1G1fnX+YbamYC0jn
WebO0uTGw7iqi2/48HxP6scUT9JVhI92sL06mE62Th124RPAN+SZhzOKV1+ETETP
nvfnz9au7ozasJJK0B+tfVmv3cYXKQ/H8vLwyf7PKNMJ02+vHGS8ARffw24Yty1V
ZcPBmdsLqmA3tu49+xeotCKVY74w0NHQsYzt8GzXBMJ3ixTCj8cSDf4yYqFxLMrJ
6tR/OQ5D+ljeeQ==
-----END CERTIFICATE-----