Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File:                     UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier:          FgKmHgaihheJNPLn5v0xHm9obpMkVsmZ26iT/R9Whrk=
Subject key identifier:   62:A2:6D:9C:90:88:76:28:AC:39:4B:E6:7C:5B:DF:1A:FF:4F:F0:3C
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer:       /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial:       01962E61CCC424F23CD8D7139F7C95FCAD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: PHPX06J2CMUsK/GCqJ+PjX6pY6l0LXvIA77O7rBk+fw=)
                          2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
                          3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:c4:24:f2:3c:d8:d7:13:9f:7c:95:fc:ad:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=62a26d9c90887628ac394be67c5bdf1aff4ff03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:f6:2a:6b:ba:d1:f8:bc:6a:af:a8:c6:bd:
                    d9:3b:7e:a6:06:d4:2b:93:c0:f9:ad:d1:19:42:b7:
                    db:5d:aa:5f:01:cc:3f:08:b3:94:7c:4f:0e:5e:51:
                    1e:c2:4b:25:72:6b:5d:86:73:b1:00:4e:84:f2:8b:
                    0e:1f:79:70:3f:dd:72:27:08:c7:e3:76:2f:39:cc:
                    0a:c4:da:00:28:bd:3e:71:92:6b:78:a2:48:e1:2a:
                    cb:53:70:e6:a8:88:cc:9c:91:14:19:b3:20:0b:40:
                    4c:46:02:75:d9:ed:03:9e:7d:32:db:0e:16:72:3a:
                    ba:35:72:43:cc:61:a9:bd:c9:8e:95:06:ae:00:fe:
                    c0:e4:fd:25:7e:ee:d9:4c:bc:57:e7:9f:31:c9:70:
                    92:26:a6:d5:ea:91:09:c8:e3:05:93:1b:87:59:0a:
                    13:a4:cb:f6:f7:7c:09:19:bd:cb:d3:7b:84:1a:3b:
                    8e:a9:79:7c:a5:26:d4:7f:89:42:82:9d:77:ab:05:
                    53:56:72:aa:82:90:56:17:1e:b3:97:7a:b9:49:c4:
                    3f:06:07:78:08:51:2b:2a:7c:a7:51:cd:8a:82:a6:
                    a6:f3:ba:32:f3:43:6c:5e:ac:99:76:cc:d7:4f:82:
                    1b:7a:59:e0:2c:19:68:4b:5e:67:dc:17:13:98:18:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:6D:9C:90:88:76:28:AC:39:4B:E6:7C:5B:DF:1A:FF:4F:F0:3C
            X509v3 Authority Key Identifier:
                keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:41:e0:f5:4b:1f:55:ff:01:5f:2c:d4:78:2f:dc:b7:ea:
         31:f0:e7:5e:b7:6c:1f:aa:be:1a:cb:66:86:67:fa:92:1d:cf:
         a2:2d:e3:d1:25:aa:66:8e:f5:ad:2f:87:b8:9a:8a:e2:9f:bc:
         37:fd:51:66:a4:89:2a:b8:b7:19:2b:45:4f:c4:cd:46:71:4d:
         98:bc:f9:97:4c:46:37:da:e7:d1:51:e4:fd:8b:12:e2:e9:c9:
         07:8d:c4:07:b2:78:c6:8d:5b:e4:1e:8c:8c:20:cf:6b:7d:24:
         6b:11:36:d8:83:94:54:36:1f:06:20:b7:cc:5c:c7:6e:88:35:
         26:c2:26:21:5c:86:18:81:c0:cf:bf:f1:3b:ac:65:5e:6c:d4:
         72:c7:0e:0d:08:a6:f8:bd:1b:20:bf:65:15:9b:bb:41:e0:d0:
         f6:a5:f2:e0:8f:a7:ec:40:92:5d:2d:c7:da:0f:fb:9a:3b:4d:
         a1:46:74:40:e2:6b:4f:e2:33:4c:b1:b4:9e:41:7a:56:72:03:
         58:f8:d5:2e:ae:12:55:b5:68:09:bb:ed:c1:65:57:17:0c:b7:
         e3:1f:1f:32:33:ef:79:75:57:9c:4e:5f:d2:e1:95:d8:f3:36:
         29:fb:78:00:28:a6:7b:c4:12:1c:83:53:55:57:df:9c:ac:e5:
         6a:17:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----