Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
File:                     UPX-mbwiMohxFv2sgtQIKtvGrLc.mft (raw, json)
Hash identifier:          sSdWdRGBJYvrMBdogLLioypDTT7f0lsAyt/VzRxXDr4=
Subject key identifier:   55:D0:D5:0C:04:6F:E9:D6:F6:C5:34:45:EF:68:27:02:0B:E1:73:88
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Certificate issuer:       /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial:       01962E2AF8FAA47DF08DB8EA6D39B2B138AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 4IU66ltB5spMCU1NkhmnAMSEiws.roa (hash: jkXsgCZ9AOwz4i9eeBiFtGjyKyqIabmttJku6EP5dW8=)
                          2: UPX-mbwiMohxFv2sgtQIKtvGrLc.crl (hash: NhKs5JDuixZu+9NQhyZ5n3vM6vbhk68njg6EA10splw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:fa:a4:7d:f0:8d:b8:ea:6d:39:b2:b1:38:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=55d0d50c046fe9d6f6c53445ef6827020be17388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:d0:97:6c:12:26:f6:fa:b1:d0:12:79:f4:
                    96:94:55:8b:61:64:7c:e8:c1:ea:43:a8:34:3b:62:
                    bb:4d:55:fa:eb:b5:fe:f0:6e:3d:02:9f:2a:e6:30:
                    60:af:c5:e2:c3:08:8f:f3:f6:e5:08:c8:fb:a5:3d:
                    49:1d:a9:4b:76:01:f3:21:50:4b:1d:0e:a1:ee:f0:
                    7c:1e:e7:13:48:2f:d7:08:f5:2c:9f:f8:99:8c:a5:
                    11:98:5f:4a:95:80:54:5a:b1:5e:87:99:9a:0d:b2:
                    da:e8:44:df:63:48:d0:f5:5a:15:3c:d9:3b:11:35:
                    20:f3:a7:74:33:41:92:0a:0a:0a:6c:a6:17:83:ef:
                    ea:6d:b6:a1:69:10:63:4c:70:42:62:07:9d:96:60:
                    d7:14:59:cf:30:37:8d:9b:7a:f3:9d:c0:f9:ca:a0:
                    04:07:67:7b:5e:d5:e9:ac:e8:7d:37:a2:dd:d4:aa:
                    53:e1:64:8f:89:99:c6:22:1b:99:67:6b:7c:9c:61:
                    d3:f7:92:68:b1:8a:58:3d:02:d3:79:d1:e3:92:b9:
                    00:22:4a:37:b4:b3:c5:5f:ee:50:8f:62:bc:df:39:
                    a4:d9:9a:6b:aa:8d:70:9f:72:e7:49:a6:0a:b2:fa:
                    cd:70:18:cb:87:8c:34:8b:1f:b8:ea:70:4f:c7:4c:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D0:D5:0C:04:6F:E9:D6:F6:C5:34:45:EF:68:27:02:0B:E1:73:88
            X509v3 Authority Key Identifier:
                keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b7:cc:a9:38:b7:76:c4:cc:9d:e2:cd:9c:b7:bc:0f:c6:1c:
         e1:e5:ff:66:3e:56:cc:06:20:74:ae:5f:32:57:9a:c1:82:bb:
         a4:db:01:b3:48:93:5e:77:7c:15:3b:a5:56:d4:87:eb:9c:18:
         ea:69:38:27:d3:7a:2b:7f:f2:45:70:10:99:be:31:69:38:28:
         5b:93:3c:87:15:c9:49:23:a4:0f:d6:6b:35:ad:53:bd:72:36:
         13:d4:fe:bf:2c:cf:1d:2f:ed:27:cf:cd:42:49:69:90:c7:6e:
         31:58:2f:d7:12:42:39:36:53:65:f8:3b:37:8f:d4:2c:86:0c:
         35:3e:43:cf:bb:07:15:bc:8d:4f:bd:a7:1b:22:ad:c7:d5:ee:
         d0:eb:b9:59:c2:3e:35:65:68:b3:18:a2:9d:0a:7c:02:04:a0:
         bc:11:c4:10:99:b7:5a:7b:b6:32:91:e3:62:85:5f:7e:a7:0e:
         73:f6:e6:96:e5:83:17:f9:32:b9:48:ec:d1:b7:59:69:03:f9:
         01:b4:32:de:c1:64:26:a1:6d:09:58:4b:ce:7b:6a:3d:6b:01:
         7d:2a:35:26:a7:51:6a:ba:c2:44:f8:05:cc:7a:a2:aa:71:db:
         49:47:60:b8:4b:49:9c:8d:e7:41:e4:b1:ea:93:d0:8f:02:c6:
         3c:fe:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----