Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File:                     UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier:          1X27yc3EoV16Xc/IF3dH7VdClDFjfZ2uCJSquwghtSM=
Subject key identifier:   F5:3D:52:B5:EF:F0:C4:F2:1E:9C:F5:30:CD:23:60:40:3D:E0:F7:7E
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer:       /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial:       01962ECFC2EDCF24B6C2D651163FE03CE78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: 5sbCZBSM1p/W+dEwk0MGIBE6aCoKHgIcxyOx+0E8Ij8=)
                          2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
                          3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c2:ed:cf:24:b6:c2:d6:51:16:3f:e0:3c:e7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=f53d52b5eff0c4f21e9cf530cd2360403de0f77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:25:dc:24:0a:c3:68:a1:42:78:27:65:9f:
                    7d:21:ba:28:c8:74:a0:bf:7c:fa:ff:00:ff:b8:8e:
                    10:a1:c2:a7:cc:04:4e:a1:1e:2a:42:a5:2c:29:bc:
                    63:ed:57:2d:75:88:fa:48:61:af:71:df:43:4c:4b:
                    54:60:75:4c:dc:a3:54:f9:19:ba:01:08:3f:12:df:
                    38:84:86:e4:e3:ac:79:37:9d:40:1b:5e:87:61:86:
                    61:cb:6f:fb:0f:86:34:5b:74:30:fb:23:cb:17:96:
                    ad:16:c9:c7:bb:6d:22:ca:49:ca:28:41:0d:5f:0d:
                    55:cb:7f:af:cb:b0:0d:f1:b2:9c:74:6c:b5:68:a0:
                    65:a6:38:0a:21:eb:63:a9:bd:cd:34:f9:31:82:c9:
                    9f:c7:05:55:7b:cd:ba:b3:ab:39:8f:b7:62:1e:e3:
                    11:d6:40:65:b1:31:a9:fc:e4:0c:cc:a8:35:53:d4:
                    13:96:85:ac:7b:1c:0a:0d:2d:3f:bb:aa:07:00:f7:
                    56:0c:6f:2e:60:29:b0:d5:bf:b8:d6:5c:01:08:c7:
                    2d:37:e6:7b:ad:68:48:07:02:2e:d7:e6:c1:13:5a:
                    23:8d:ca:17:37:05:6a:bf:ce:c5:8b:41:da:b6:ee:
                    77:c8:c2:95:0b:92:4e:20:3a:94:ea:4f:b9:28:b8:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3D:52:B5:EF:F0:C4:F2:1E:9C:F5:30:CD:23:60:40:3D:E0:F7:7E
            X509v3 Authority Key Identifier:
                keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:55:b5:35:46:9d:e4:dd:a8:39:42:6e:9d:7b:91:d1:41:31:
         36:53:81:2f:e9:ff:c8:75:28:72:da:13:d6:13:53:17:6f:d0:
         c8:22:88:2c:27:20:d8:a3:55:cd:ae:c8:8a:4c:26:c3:e0:ec:
         95:4a:73:43:cb:bd:a4:37:98:a2:9b:e9:78:06:96:fa:75:27:
         0e:ac:69:9b:0e:a2:f8:66:7b:06:ff:4f:8f:67:10:a8:77:76:
         38:7b:e6:13:00:2d:24:3c:28:15:eb:f9:d0:b5:f1:96:9c:16:
         02:ee:0e:a2:85:46:ba:c4:0c:18:dc:45:fc:b2:69:a9:40:46:
         26:45:17:05:79:66:02:a6:b3:8c:47:32:d1:8f:3b:1b:06:2c:
         9e:9d:92:7e:e6:00:14:79:06:84:7b:61:aa:52:40:58:46:e2:
         c0:2f:04:6d:01:30:67:17:ef:78:5d:11:25:23:14:6e:54:bc:
         ac:c3:31:11:18:cd:56:cf:03:34:bc:86:d5:ff:92:cd:0f:62:
         bb:d4:47:5d:b2:04:a0:a9:6e:7d:fd:3a:14:05:77:80:e2:e0:
         2a:35:fe:f3:20:4b:79:68:c9:d8:6e:e4:c6:39:de:be:fd:5d:
         18:30:92:fa:a6:36:4a:6e:5c:8b:40:06:37:84:ad:a3:80:a4:
         3a:42:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----