Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File:                     UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier:          QzU0Kcdjggj52z7KmanK3vwX8PreMlILh8DLBhHA/lk=
Subject key identifier:   52:5B:7C:80:BC:E6:39:B6:E8:28:1C:36:7B:A8:95:52:91:E7:C0:15
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer:       /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial:       01962F06F886716CFE4063E39C8F904970D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number:          07CA
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: hvPq9h0hq3VNnMW2b/KsgxnTFrktLnkpZjk5DDUe8mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f8:86:71:6c:fe:40:63:e3:9c:8f:90:49:70:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=525b7c80bce639b6e8281c367ba8955291e7c015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:4c:3d:50:ef:dd:32:17:49:c7:67:10:27:
                    5e:14:0b:fb:e1:a5:bf:58:a4:cb:64:45:4b:50:1a:
                    67:1f:c2:48:c8:2d:45:bc:ec:a7:ed:fe:c8:d5:dc:
                    9a:2e:fc:a5:67:cf:d2:90:b5:68:6c:6b:5d:3d:0a:
                    03:bf:c0:6a:5b:29:f5:4c:44:dd:0a:e6:46:e9:f5:
                    0f:05:5f:39:de:2e:5c:2a:b3:bd:ed:77:9d:96:39:
                    f5:88:19:c2:c4:08:a4:69:ec:a6:25:8f:f8:8c:14:
                    60:25:39:6b:ea:4d:73:d6:34:b9:f8:9d:80:5e:b4:
                    7f:52:8e:6e:4d:a5:76:7f:dd:2e:30:9c:0c:f8:3d:
                    94:1b:9b:96:2f:2c:80:69:fa:98:88:0d:c1:c7:d7:
                    18:48:d5:77:8a:9e:e2:fb:e1:37:51:6d:2e:50:b0:
                    03:ae:d2:2b:0f:2b:24:28:9a:52:b8:5f:24:8a:f3:
                    41:79:4b:9d:82:2f:ec:bc:7b:d9:aa:99:75:bd:4a:
                    39:f0:33:a7:0e:c4:05:8b:b0:56:76:94:f8:07:f3:
                    8e:11:76:ef:b1:87:85:04:fb:6f:0b:06:03:80:60:
                    28:6a:9b:9d:f7:6f:c2:2a:03:47:28:27:c3:cd:40:
                    76:fd:65:bc:d8:32:5a:94:9d:87:b6:01:f5:f4:33:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5B:7C:80:BC:E6:39:B6:E8:28:1C:36:7B:A8:95:52:91:E7:C0:15
            X509v3 Authority Key Identifier:
                keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:0f:70:32:0c:80:b3:bc:3b:5f:c5:55:f9:fe:19:e0:6a:
         f6:9c:27:77:3a:20:80:32:32:4b:08:f6:dd:44:a1:7c:f3:92:
         d6:aa:8d:31:89:b8:6f:4c:97:30:9f:f3:3c:11:3a:d1:4e:82:
         f8:e6:49:ac:3a:db:c4:93:09:1e:d1:30:64:f6:29:e7:31:36:
         4a:0d:2f:da:7a:f7:24:9c:63:c9:fe:37:9f:21:02:af:8d:8b:
         ac:c9:f9:c1:38:a6:44:12:0f:ee:d9:04:90:26:f6:05:05:f4:
         28:55:8f:69:26:b5:25:8d:fe:4a:32:9e:97:2d:d8:a1:7b:58:
         97:8f:82:5d:e5:bb:67:ca:35:83:8d:00:c5:a3:67:77:db:3d:
         bf:49:cd:15:e1:6a:bd:6a:6b:6b:b2:1c:1e:3b:8b:a1:91:40:
         07:62:bc:db:7e:1b:1a:0d:ce:2e:d4:8e:b5:fd:1e:c8:43:8e:
         5e:03:6c:a0:09:2b:e8:f7:af:27:36:09:d9:60:90:ae:cb:c7:
         21:05:ff:de:fd:8f:d6:a6:5f:4b:2a:4c:3b:9b:34:c6:c2:66:
         6c:48:b4:94:52:08:7e:0b:31:0d:aa:81:ed:3c:d2:72:f4:ab:
         45:06:ef:9c:0c:dd:18:78:ab:cc:50:2e:df:56:e8:80:a2:c9:
         32:03:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----