Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File:                     UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier:          Flu68CVX1eJZCXP1EuS7rZ7sFOvRMHDP825JJPuDZSM=
Subject key identifier:   8C:58:CB:2B:62:B6:9A:6B:3F:AB:FF:69:51:03:E5:A8:8C:31:6E:76
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer:       /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial:       01962E61DC2392F359BFDE9F3F27189D3F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: CYNP6vN-qElEU6kqxQQrlgtjw0E.roa (hash: 50zm/kAB1hENUbgpvzJQwq1lkvUVeWylyOULFWpoN/I=)
                          2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: Ms5xDYeKUejnqNsQYhb2YB1FzOapbSf2JRCXO4UcjmQ=)
                          3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:23:92:f3:59:bf:de:9f:3f:27:18:9d:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=8c58cb2b62b69a6b3fabff695103e5a88c316e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:dc:98:dd:7d:06:75:54:31:c0:42:18:d8:
                    b0:aa:21:06:82:51:63:20:8d:2f:2c:7b:f5:1f:a0:
                    d1:0f:97:1c:41:c0:71:1e:bb:ec:5f:06:5c:ab:af:
                    5f:41:6f:a0:c4:f9:44:30:03:17:43:93:00:5b:41:
                    50:ee:a8:36:7e:0b:67:79:13:61:27:ff:8d:49:97:
                    01:89:55:a2:73:c0:11:16:17:49:3b:51:98:1c:21:
                    91:1a:f7:cd:5c:9a:c5:ee:76:0a:df:7f:35:e3:24:
                    52:62:2b:e6:fe:bb:5c:61:7d:68:a9:c9:46:90:22:
                    54:22:9d:11:f7:ef:d5:e2:f7:81:76:a0:cf:ac:11:
                    0c:1a:09:97:74:c5:7e:2f:06:f5:9e:d2:96:ce:5e:
                    3c:59:06:10:5b:58:9f:b9:c2:ff:cd:4b:2f:b2:da:
                    35:10:fc:78:f4:0b:d9:d4:bf:d2:94:8d:a9:be:f1:
                    3c:3c:8f:2d:a1:e3:d7:6d:f8:e1:22:11:51:09:da:
                    97:34:13:73:31:cc:3b:0a:71:97:e1:4e:64:11:42:
                    49:11:26:63:a2:7b:16:3f:20:44:e0:65:91:9c:b5:
                    48:fe:5a:a6:2d:d1:0f:d5:7d:30:7d:40:58:a6:ef:
                    0b:37:7b:4e:ed:9a:37:d6:27:16:62:4c:82:c9:b8:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:CB:2B:62:B6:9A:6B:3F:AB:FF:69:51:03:E5:A8:8C:31:6E:76
            X509v3 Authority Key Identifier:
                keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:bb:04:3b:cc:45:30:7f:3d:14:ba:fa:d4:8f:84:6b:ec:
         3e:09:68:ed:14:6f:19:61:63:94:bd:30:4c:90:2d:19:25:de:
         db:22:68:8f:a1:45:c6:90:45:ca:78:2d:2b:39:80:33:2f:db:
         c1:fd:32:5e:98:af:a6:1d:b9:96:86:00:f3:f8:bf:2c:4e:64:
         b0:0b:f5:6f:8f:2e:21:de:26:de:1f:53:a6:d9:e3:ef:ae:80:
         b3:1c:74:18:2c:95:1e:97:ac:5b:f4:6d:86:21:c3:95:6b:ab:
         dd:3e:ea:cb:31:b1:11:84:7d:e5:40:7e:6e:07:f0:5f:80:52:
         40:08:3a:e5:70:d3:84:53:70:ee:b4:c7:0e:34:6e:b1:75:8a:
         ad:ab:de:4d:58:72:25:e6:1e:86:45:20:aa:d0:04:e4:b5:34:
         0a:9a:c8:f4:11:8f:d8:60:a0:7a:16:21:8a:52:e3:f0:2f:32:
         ee:bc:a6:1f:9c:c0:ba:35:fc:f7:87:91:13:ce:90:c2:54:57:
         de:a4:fc:77:3d:83:6e:c4:6a:3f:40:b1:4c:a9:81:b2:14:87:
         08:cf:17:3f:1d:1e:18:fa:95:bf:62:21:a2:64:02:dd:62:a9:
         46:d0:0d:c2:74:eb:8a:ea:cb:48:9c:87:b1:d0:da:22:1c:a8:
         71:c6:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----