Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
File:                     ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json)
Hash identifier:          TfiIhQvH8fuOFwVkyMYNVJRtzHPupu/oEntF+DxzOZQ=
Subject key identifier:   9A:FE:9D:DD:42:3C:01:AC:D7:8C:3B:81:2C:E2:30:1F:86:E8:20:D6
Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
Certificate issuer:       /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Certificate serial:       01962E98F4AA502239A319628AFD2BDE6E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
Manifest number:          C8
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: ZwSpp5zq0xbqmk4kpgxVRIHeeTAlsoxuDVXM2Y8bKqA=)
                          2: ZnDO_rePAntHP4QbrCH1ZMUFU88.roa (hash: 1CLa3f+zgWechWD7s3i+GnMCuHYkW66e1IkcJJq2REw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f4:aa:50:22:39:a3:19:62:8a:fd:2b:de:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=9afe9ddd423c01acd78c3b812ce2301f86e820d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:f3:a4:af:2f:65:cf:b8:f2:9f:94:b3:d6:
                    d5:40:e1:70:d1:2d:9a:d2:18:38:60:7b:88:93:87:
                    3f:17:23:d1:62:88:06:28:91:e4:c4:cd:e5:15:23:
                    78:51:09:d3:fe:aa:7e:de:8d:e2:aa:49:b0:21:cb:
                    38:5d:9f:db:9f:f3:52:0b:ed:06:ba:f1:9f:e2:a7:
                    16:aa:63:4e:c9:43:c2:d3:28:a6:2e:aa:2e:06:8b:
                    ac:1b:ef:e7:ec:0a:26:29:ec:85:f9:99:8f:80:fd:
                    65:8f:1d:3b:6b:d2:0e:e4:8d:18:fb:39:91:20:6f:
                    c9:39:40:b1:4e:45:b2:80:bb:2d:fc:c2:17:51:92:
                    50:87:7c:90:82:7b:7f:a1:fd:2a:77:37:51:4c:47:
                    26:02:e9:13:3d:87:a8:a2:fe:9a:a2:ae:83:94:75:
                    7a:e5:24:92:5f:e9:7b:28:17:e6:95:00:4c:ce:98:
                    49:53:4f:ce:e7:8c:2f:18:43:17:3b:55:c7:be:72:
                    9d:c8:52:9d:b3:07:7c:32:bd:1e:39:69:74:15:c3:
                    d9:ef:3c:30:a5:19:44:41:0d:0d:2c:cb:f3:8f:94:
                    18:34:b5:41:e7:ad:85:5e:7d:b1:7f:6a:03:0b:cb:
                    5e:06:f8:bc:05:c3:ab:2e:90:c5:c9:8a:12:66:04:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:9D:DD:42:3C:01:AC:D7:8C:3B:81:2C:E2:30:1F:86:E8:20:D6
            X509v3 Authority Key Identifier:
                keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:cf:b3:b2:7d:b6:b3:1f:64:3d:ea:6e:36:e0:71:d9:c6:1d:
         b5:24:23:f8:1d:86:6c:60:ab:b3:07:63:fd:7d:62:6e:f3:58:
         d6:00:58:b2:db:a1:d8:b1:ee:e2:55:2d:6a:50:df:c4:13:76:
         a2:f0:df:74:58:09:07:93:97:45:6d:50:73:37:3d:9e:e9:32:
         aa:99:d0:31:b1:fa:0e:dd:fd:f3:b1:3f:9d:ed:03:1e:13:20:
         a8:0d:34:d0:2c:55:ad:f3:5d:14:23:35:0e:6b:2a:52:5e:fc:
         41:29:6c:45:ca:c6:e6:30:e4:fd:69:d3:d7:71:1e:83:23:2d:
         d7:cc:92:66:18:74:aa:ab:8c:41:ca:79:4c:37:22:6b:a8:5a:
         5b:78:57:10:47:06:68:b1:81:6c:86:dc:5b:fc:e4:95:ec:d1:
         f2:8f:27:13:60:a3:28:6b:23:8d:c2:aa:b8:0e:9f:e3:b9:13:
         5d:d7:e4:83:21:1c:db:b9:95:51:95:b8:b7:ef:30:72:be:c8:
         d1:64:2c:f2:0f:2d:13:54:93:df:d6:af:22:44:c2:0d:38:bb:
         16:b2:bf:e9:36:0f:2f:d8:45:4d:bf:d8:6a:26:0f:51:10:1a:
         2d:4d:bc:e2:5c:6c:9f:f7:14:e5:35:84:fc:0c:d7:ca:15:4f:
         5c:57:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----