Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File:                     uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier:          p25tVoeResRZ4ywbrhJRt3VuLt8uMOWRYYQXPMMEfig=
Subject key identifier:   2C:3A:45:03:63:A2:47:39:B7:0F:6D:23:31:71:BF:50:FA:C7:F9:D6
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer:       /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial:       01962E98F856269F994E84592A5D6733D564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number:          086F
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: ndO9iw0lpWLLTJ2T3l7dSY1sZbGPBqWRFNwdA3IlljI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:56:26:9f:99:4e:84:59:2a:5d:67:33:d5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=2c3a450363a24739b70f6d233171bf50fac7f9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:87:b8:15:4f:3e:2e:55:85:c1:36:ca:7b:
                    f6:c4:ab:39:ff:40:0b:9f:0b:7b:04:46:fc:7e:ba:
                    f2:38:f8:ed:5e:c9:03:a3:53:48:6f:15:38:a9:86:
                    52:8b:80:4d:50:f8:b5:78:38:b1:c0:73:24:fa:9c:
                    c5:ce:18:f9:3b:fe:51:e0:db:50:d9:f1:33:aa:e5:
                    dc:db:4f:24:56:03:45:39:17:97:cd:5c:42:17:3b:
                    c0:39:db:5a:1e:d0:58:d9:fc:87:aa:9b:96:39:9b:
                    89:cd:47:90:b6:bd:a3:fb:6f:cc:96:f0:f5:9c:67:
                    00:3f:e8:73:b2:d7:ed:60:b4:27:00:69:56:de:87:
                    f3:d4:ad:1a:93:d0:b7:f3:a1:55:34:bd:09:3a:21:
                    c7:86:af:d7:44:f6:de:b7:66:08:5e:06:81:c9:dc:
                    cc:65:4f:fb:90:c8:df:b1:25:0a:24:ce:22:dd:40:
                    bc:b5:69:45:d3:f9:e0:5c:e7:c2:03:e2:98:12:af:
                    83:00:c7:24:f2:9e:ca:c0:a1:3b:04:be:59:2d:97:
                    00:19:6c:8c:97:fb:8b:96:d6:34:22:d1:c3:da:8d:
                    43:74:89:4d:99:50:64:4b:de:0f:3b:bc:2e:ad:29:
                    e0:92:0f:3e:aa:70:e5:89:90:09:ab:5f:c1:44:97:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3A:45:03:63:A2:47:39:B7:0F:6D:23:31:71:BF:50:FA:C7:F9:D6
            X509v3 Authority Key Identifier:
                keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:b8:15:85:86:b1:c4:43:e6:3f:88:18:09:65:f9:5e:ea:
         00:37:68:97:c6:a8:6e:38:40:4b:a9:bd:57:b7:dd:07:dc:6d:
         7a:85:8c:6c:bd:ff:94:86:a0:e0:1a:5e:1d:a2:ff:92:70:f3:
         a7:68:2a:7a:52:cd:f9:4c:93:9a:74:48:d4:42:a6:27:5e:86:
         f1:f5:af:cb:9b:34:86:ac:d1:50:ce:cd:6d:4c:a6:58:1c:08:
         bd:5d:62:91:47:72:30:3c:e1:e1:f3:ed:02:e7:88:a0:a0:fb:
         bf:4f:5e:51:fd:52:0e:28:51:fd:fd:8a:93:0b:55:fb:12:61:
         b5:de:fc:f5:ba:24:71:34:c8:72:13:99:81:3b:3b:50:cb:3c:
         1d:49:5e:b1:ed:7e:7c:fa:1a:d2:87:b6:3e:22:bf:4e:fa:55:
         39:9b:d7:0e:7a:e7:fb:70:75:b4:e7:5c:9a:cd:aa:6a:80:74:
         ee:b8:aa:15:9d:f1:df:3b:68:7b:4a:4d:aa:56:e4:ed:09:1b:
         a9:4f:d1:7c:60:72:44:92:09:0a:82:b4:69:67:83:70:19:f4:
         58:cc:df:ca:91:fd:5e:6c:9f:17:c8:fd:c9:7a:c6:9e:70:05:
         25:16:74:1f:fc:e5:bf:8f:93:1a:e6:d1:82:a7:28:d5:11:40:
         09:8b:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----