Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File:                     UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier:          RZkzsu0nxBVZacww61hNt1o4Qych5uu3Wo7ur0culMM=
Subject key identifier:   60:20:43:50:1E:E1:A6:66:78:0E:76:2C:85:5A:05:F9:F1:B0:C4:7B
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer:       /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial:       01962E61C292EB6CF39E99BFAF79C712BAE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number:          0F89
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: UU2FSw1Y8sx0Lrh9CilaIHMoGD33bPk5BNDQn3xHVgg=)
                          2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
                          3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:92:eb:6c:f3:9e:99:bf:af:79:c7:12:ba:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=602043501ee1a666780e762c855a05f9f1b0c47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:86:7b:8e:6d:87:f0:ee:23:75:91:74:c9:
                    df:26:86:a2:bc:85:3e:88:c9:b6:59:46:78:e6:a2:
                    02:06:1a:6b:a8:4e:bc:c5:da:8d:bd:bc:49:7a:38:
                    bb:4f:f6:73:2e:cd:6e:b9:32:7f:6d:90:bd:1c:80:
                    fb:60:0b:30:42:8a:05:4a:1c:81:aa:1c:f7:92:46:
                    95:31:94:5e:2d:d7:46:d4:25:f4:7f:6a:81:42:27:
                    df:bf:2d:7b:5c:b5:91:19:a1:c1:a0:fd:37:d5:12:
                    49:1c:1d:27:b3:45:a8:43:dc:a6:6b:92:f0:dc:49:
                    83:05:f5:f0:db:83:6e:4e:72:f3:57:16:54:e1:fd:
                    ef:58:d5:0a:18:1d:55:cc:1c:ac:6e:ce:ca:3a:bc:
                    8e:54:27:34:e4:46:1c:df:26:07:7d:92:2f:ef:46:
                    a5:76:5b:1e:3b:ac:2d:8a:a7:20:fa:5c:fb:6c:7a:
                    a0:4b:50:4d:ac:56:8c:80:78:70:a5:cd:b6:35:39:
                    6c:48:f7:dd:52:1f:fb:41:a3:15:39:32:4a:3b:11:
                    96:01:5f:46:a7:07:33:fc:f5:c9:ff:4c:8a:6c:cd:
                    17:f3:a5:33:9b:ac:95:a5:56:fe:da:cb:39:e3:8e:
                    a8:79:47:d1:ac:3b:c0:17:5a:0b:ab:27:0e:16:91:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:43:50:1E:E1:A6:66:78:0E:76:2C:85:5A:05:F9:F1:B0:C4:7B
            X509v3 Authority Key Identifier:
                keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:c9:c5:e6:04:89:30:2c:50:d0:ec:14:e9:cf:ed:51:32:
         c2:b1:f6:f6:4a:55:a0:91:44:9c:8a:55:14:c5:1d:02:23:b7:
         60:5f:b9:d1:da:4b:ee:ef:97:24:e6:a2:93:e8:f1:43:47:f8:
         fc:fd:f7:94:fd:8d:c7:35:4a:75:d2:fa:41:cf:e9:10:52:25:
         20:ab:8d:c0:4c:a7:11:1a:8f:f9:72:4d:ba:df:15:97:e2:6d:
         c1:d8:e0:f1:9c:b8:91:9a:44:21:ec:c6:32:19:16:0a:9f:77:
         3d:9e:49:7d:fa:50:0d:54:06:bc:d8:a8:b1:98:ae:73:54:1b:
         47:1d:6b:c7:c3:c6:fa:9d:99:3b:68:3e:88:e7:37:43:68:c0:
         ff:64:28:2b:7e:99:bb:27:82:2c:15:56:21:94:2f:c5:1f:ff:
         e2:23:d6:70:fb:c4:36:a8:f1:38:fd:32:18:72:6e:da:06:f5:
         35:97:0c:36:ee:ea:1f:c5:9f:78:1b:71:f5:56:b0:1a:73:5e:
         ea:14:88:55:50:37:02:2e:c7:70:92:f1:45:b4:8a:c8:5c:06:
         c9:a1:8c:1e:ec:44:cb:6d:d5:0f:90:e8:53:53:2f:aa:98:28:
         35:72:16:e7:32:cc:6f:7f:5f:55:c1:bf:bb:3b:b3:70:17:2b:
         7e:c6:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----