Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File:                     4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier:          qlKlZLA+ySnVZl9cvsRMSY9XudWyqR2s49q8BY+tNLA=
Subject key identifier:   3B:F1:FC:88:44:7B:CF:3B:BB:89:26:5D:E0:B8:FD:EE:2F:FB:09:33
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       0194BD17AD8178B1885EAB988DA3D8BE1351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number:          143B
Signing time:             Fri 31 Jan 2025 16:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:33 +0000
Files and hashes:         1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: ZHHEEDh2X31Mz2UNZM6yQ580eGSbgvWkfz1dbV/+Z64=)
                          2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=)
                          3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=)
                          4: qj36an1eVHYA4OOKGVQ9mSzX2PM.roa (hash: Ua2cuLMIEy7SePDUWI5iA83sPYTSLEctreA4EXkvcMs=)
                          5: rre3W4Iglfh1qM3eVieRRtusCmo.roa (hash: 5VZfan/uFY8AVZvzikC2R0YmSS6soH7r8PdgIi5FL3w=)
                          6: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=)
                          7: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ad:81:78:b1:88:5e:ab:98:8d:a3:d8:be:13:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Jan 31 16:00:33 2025 GMT
            Not After : Feb  1 16:00:33 2025 GMT
        Subject: CN=3bf1fc88447bcf3bbb89265de0b8fdee2ffb0933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:65:19:6d:83:21:b5:07:b8:a9:f9:eb:c5:
                    00:80:58:9c:63:bf:c0:b1:92:8a:58:72:3f:44:99:
                    0c:58:bb:83:7b:0a:50:94:f5:f2:79:51:dd:71:31:
                    23:6f:0b:5a:7a:7b:2b:78:ff:35:db:79:d8:53:e5:
                    d1:59:71:a3:a8:2a:18:c0:5d:4f:47:7b:29:14:ae:
                    0e:d8:74:bf:ae:d3:7a:7f:87:7c:54:fe:c9:cd:3d:
                    c1:9b:e8:99:77:15:5a:23:51:7c:8d:a4:e2:33:db:
                    2a:6a:e6:ee:09:37:98:6d:6e:04:05:c2:d7:29:8b:
                    80:88:53:26:22:d8:5e:79:ab:c8:44:22:27:70:66:
                    b1:32:a9:69:78:08:8e:ac:24:7b:c0:4b:09:d8:c4:
                    c4:b1:f1:0c:86:8e:2d:ee:db:d9:2e:c3:e6:48:21:
                    48:65:80:51:9d:8b:c2:64:e9:90:6d:29:6b:52:bc:
                    26:5f:18:b9:4d:07:cb:64:39:1e:04:98:ac:17:13:
                    a8:f7:ff:4f:32:c8:a6:41:bb:9d:7d:6f:b4:d3:b8:
                    cf:13:a6:ba:8f:85:4d:11:7e:a6:7a:a9:9b:df:ef:
                    30:50:21:1b:98:1f:99:7e:ee:9b:4f:4e:04:4f:49:
                    26:19:79:36:3a:18:8e:6b:cc:b4:65:10:f8:38:1e:
                    0c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:FC:88:44:7B:CF:3B:BB:89:26:5D:E0:B8:FD:EE:2F:FB:09:33
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:71:f2:92:70:45:65:a9:fa:5c:bb:72:be:8b:ca:25:ba:
         8c:f0:5a:94:b6:f9:cc:06:9e:64:97:0e:4c:8b:0f:02:d2:eb:
         fd:65:56:9d:97:87:ec:1f:39:c4:6b:d5:03:0e:46:07:36:c5:
         75:e9:76:f8:41:51:15:56:10:60:ef:19:da:bf:8e:05:a1:26:
         27:67:2c:25:1c:dd:4f:89:c1:5b:55:4d:b7:da:e3:a9:5c:d1:
         3f:3d:38:39:59:c6:d6:b4:0f:d0:c5:b0:76:9d:f3:d6:77:aa:
         54:7b:9b:52:2f:47:93:53:f7:ba:09:e4:78:a6:13:7e:9d:6e:
         2f:87:4c:78:4a:54:bc:f1:93:04:6d:38:9e:46:cd:a0:e3:dc:
         5b:54:3b:ea:6a:2a:c0:23:a3:eb:7b:0a:e6:f9:5f:7e:0d:bc:
         cd:76:9b:53:62:71:84:c7:5d:a3:e6:bd:5c:0f:19:d3:f3:db:
         bc:b2:52:a6:f9:7f:e2:ea:f1:30:31:c5:ad:42:1c:59:61:a9:
         10:09:66:4a:5f:63:4d:0d:52:04:2c:69:c8:c4:fa:21:05:58:
         a8:e8:0b:09:0a:a7:56:f7:df:96:09:00:47:9b:65:3d:a8:6c:
         d1:f9:54:a2:5f:5f:e4:71:db:f2:9c:66:c5:24:7d:f4:af:93:
         26:cc:d0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----