Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
File:                     UWGN8AbVSNHYftZBlVBmLbb8BgY.mft (raw, json)
Hash identifier:          8mMLOOpv9YKjZu/CxjGWK37kJPX+nVoff9ODC+gY0+c=
Subject key identifier:   D9:50:9D:DF:A9:41:B1:32:17:86:38:76:02:B2:E0:C1:E9:9B:4F:BE
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       0194BBCE44809C8530ECC78043AB1921BCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:44 +0000
Files and hashes:         1: R2sdJYM0bzL1JWcocw5xOqVf2-o.roa (hash: UVs9ACpirVYwK+GmgA9ofE7RMTKKebnzws60nJ7ZSRY=)
                          2: UWGN8AbVSNHYftZBlVBmLbb8BgY.crl (hash: 4C/X1ejIM/wAOc6+J3g+WNMGexpI8Fhhgueg7cdT4Qc=)
                          3: WHFVP-XON8sqraj6YY6ek5SnizM.roa (hash: 6Jo7LR22ifIObPqUTbdjOmZViWJvla0HyQea7nyLPEE=)
                          4: WWfXd7zBBuSHHqEqnB62hRj9unA.roa (hash: qva6YlgkdX/NVWbcRQAF7HWwhrJKmuJ5Ujw73ErEIrM=)
                          5: lj1e8WXjjfLw34AYjnOEaHnMRNs.roa (hash: loW810RRscJtK3DOKXgBzw/9lJOgZmZ1BuGbawVw1NU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:44:80:9c:85:30:ec:c7:80:43:ab:19:21:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Jan 31 10:00:44 2025 GMT
            Not After : Feb  1 10:00:44 2025 GMT
        Subject: CN=d9509ddfa941b1321786387602b2e0c1e99b4fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:60:7a:6c:88:1d:60:ca:7e:d3:97:64:d7:ef:
                    87:31:e0:ff:64:e5:94:35:8b:80:1a:e9:e4:2c:84:
                    1d:ba:02:c3:0f:0f:cf:0a:70:25:7b:03:c7:d7:5f:
                    cd:3f:b1:22:9a:87:8a:56:19:89:89:3c:f6:d6:f3:
                    3d:58:72:19:5a:50:09:d8:92:09:3b:9b:7f:9a:48:
                    3b:ec:8b:ff:5a:40:06:cb:03:09:17:19:6d:93:a8:
                    a4:88:af:49:da:f0:be:4c:32:15:f4:0b:2c:a9:46:
                    33:f5:84:17:56:98:e0:47:1e:4a:d1:d2:7d:30:1f:
                    b5:8d:8e:3a:4c:9f:bd:92:bd:a2:ba:57:74:da:ef:
                    13:4a:2c:a8:dd:58:ed:9a:f1:4b:fb:d2:b9:6e:44:
                    22:2f:ec:61:9d:4c:d8:bc:1a:ee:58:d6:46:72:c5:
                    12:28:a9:9f:74:55:2a:9c:23:39:09:89:67:64:a9:
                    68:ab:13:a2:a0:8b:34:5d:08:91:d7:25:96:8a:9a:
                    9a:5d:e6:d4:93:ae:eb:8b:2d:11:70:9e:ed:55:b7:
                    8d:1f:29:bc:bc:8f:da:9d:a1:a2:78:f2:1c:03:cf:
                    4e:e8:18:b4:a9:03:f8:7f:78:1c:11:b1:cf:f5:43:
                    cc:b6:4b:0e:dc:90:11:b3:85:3a:02:c3:d9:30:3f:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:50:9D:DF:A9:41:B1:32:17:86:38:76:02:B2:E0:C1:E9:9B:4F:BE
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:54:cc:85:e2:20:4e:43:5c:09:1d:cc:b2:84:82:a0:38:61:
         0b:61:90:9f:c9:d9:e9:0a:a9:31:c2:6a:1d:1b:48:69:17:18:
         f0:93:d4:61:ca:d0:4a:10:42:ba:2a:ee:2e:c8:5c:77:7b:d8:
         8a:c0:00:06:ea:66:f0:27:f2:c4:66:98:bd:f5:85:16:5c:3a:
         13:98:ba:03:84:f9:73:1f:fd:12:d0:db:b7:5c:05:21:27:f9:
         a1:76:7d:80:5a:09:7d:be:3a:d8:da:64:74:13:5f:0b:f7:2a:
         d3:33:fc:a0:6c:65:4f:b1:b8:15:a2:48:18:cc:67:8c:d2:76:
         f3:df:89:79:f2:9c:9c:28:fe:aa:b4:6a:3b:f3:be:63:ed:f7:
         07:82:74:c5:74:0b:ca:93:df:86:09:66:79:b9:53:22:9c:c1:
         0b:01:1b:95:56:3e:c0:16:47:41:ba:fb:14:a9:14:ee:c3:58:
         54:32:44:27:a4:71:ec:32:02:ab:a3:d2:2e:76:99:09:8b:af:
         71:2f:52:17:f0:80:9c:f9:d1:96:ee:84:c5:79:80:66:94:1d:
         f7:bc:76:bc:8a:61:5a:bd:18:18:fb:bc:df:ad:2e:7a:1d:99:
         fc:20:3e:08:0e:37:71:59:76:57:19:0f:db:b6:64:73:d5:26:
         0a:ee:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----