Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File:                     UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier:          3l+nzxEjdhhyoi2fEoSeU/jeYifkMbNIP5SS3QchxFE=
Subject key identifier:   A8:38:A7:06:D7:2F:FA:00:97:E4:DB:48:00:AC:32:AE:64:01:3E:9D
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer:       /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial:       01962E98FAD441B120758F37F6FFB8596F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number:          08B1
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: cmuiSJDQg2evspKcoSNIPss3jAMSFNQj0VmxUQ1isWs=)
                          2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
                          3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:d4:41:b1:20:75:8f:37:f6:ff:b8:59:6f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=a838a706d72ffa0097e4db4800ac32ae64013e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:f0:e8:1f:7d:59:0b:ce:63:78:9a:d6:04:
                    25:fe:bd:7c:7e:5b:1c:07:93:93:db:fa:ac:81:1c:
                    37:e2:80:79:3a:86:fc:03:9f:db:30:d7:17:27:65:
                    4a:62:2c:77:08:23:4a:b1:14:b3:53:55:8f:6a:91:
                    b2:c8:20:04:57:10:b1:bc:3e:88:bf:f7:c0:50:b0:
                    70:32:f3:a9:43:a8:ce:96:4d:52:05:3f:d6:24:c0:
                    0e:49:4c:4e:97:da:d0:b8:17:15:d1:83:dd:16:9c:
                    dd:af:97:a7:4a:1e:3f:63:85:cd:3e:43:d3:1b:73:
                    fa:7d:41:a0:d0:23:46:32:08:f7:7d:e0:25:d4:8f:
                    4b:ae:55:59:e6:97:f2:5a:15:e0:2d:10:22:49:97:
                    1d:0f:5c:7d:49:08:54:7f:99:ff:2c:d4:c3:9e:ba:
                    af:97:80:c4:3b:df:3d:e1:c2:81:00:7f:d9:6d:2c:
                    37:b7:45:2f:68:ba:0f:7b:42:68:31:09:82:c4:cf:
                    17:dd:df:3c:01:dd:da:1c:e2:ae:cd:d2:6e:95:d4:
                    13:3f:9b:1f:7c:e7:2c:bc:4a:78:8f:9f:a2:aa:9b:
                    85:f5:35:a7:d0:85:bf:6f:fc:ac:d7:03:99:b9:c0:
                    ba:3e:4e:ba:bc:50:3a:86:f6:87:ef:9a:80:ca:0b:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:A7:06:D7:2F:FA:00:97:E4:DB:48:00:AC:32:AE:64:01:3E:9D
            X509v3 Authority Key Identifier:
                keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:54:cd:58:d4:ca:dd:87:aa:63:81:85:dd:64:c1:95:c0:80:
         51:24:fa:ee:d4:5d:8b:48:f0:bd:01:c3:88:7a:d3:05:f7:1a:
         68:26:20:5e:f9:a2:db:a2:70:9a:37:ca:87:e9:4b:90:1f:8d:
         e6:d8:27:ec:89:f2:9c:1b:ef:b9:44:0a:10:8e:ba:0a:40:5e:
         0e:67:62:1b:bf:26:50:4d:51:2d:aa:6e:97:7a:da:f3:05:4a:
         59:bb:bc:1c:a6:92:5d:44:32:b0:f4:9e:cf:e8:c4:1d:6b:0c:
         61:e4:72:02:e0:92:4a:98:a7:84:03:aa:a0:07:e4:78:4c:25:
         4c:10:f4:e8:3a:74:30:de:c9:8e:b8:c6:04:3b:94:d6:71:0b:
         fc:71:f5:16:8f:27:37:e0:d5:f0:35:94:a9:da:eb:8f:b3:74:
         48:82:c4:11:99:2d:4f:b2:1d:58:1c:07:49:d2:a1:5a:1b:d6:
         a7:70:30:b8:31:31:b6:93:3d:21:c7:30:a4:d2:f6:97:0b:a5:
         5b:99:36:c9:c2:ac:85:9c:bb:89:82:de:d7:c7:8d:1c:d1:98:
         e7:4d:b9:6c:12:29:a4:58:63:61:d1:cf:38:18:1c:0d:a4:83:
         12:72:e1:2c:16:e8:b2:4b:f1:45:b3:94:aa:0b:dd:74:27:a1:
         9d:bd:85:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----