Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File:                     uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier:          vmp0O72hHJpmAZgOvScRhMRH528lpsDmblN9bstZeNo=
Subject key identifier:   BD:83:73:E6:1F:A9:05:EF:8C:14:18:48:8E:90:6E:B8:78:16:57:CD
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       0194BCA9F003A51315F9CB26233F8C17CAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 14:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:41 +0000
Files and hashes:         1: 8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa (hash: 9ZylXMdQ8kCZ39z9f3QrUAyi00wBGTAAGALxBdEj8Cs=)
                          2: C22xAXnO8jmzvRiHbOnNs4eV8_w.roa (hash: GuR8xYcc6+bA8BzAosnTTJQ3SA2n0vvOojU/T1fcAE8=)
                          3: f-oCqD3vYqESKoaVRc95tBZETeE.roa (hash: 5tCErpPhGGQcBClzD6wra3oafrOK+sL1B4Sr7pQ1HIM=)
                          4: mRxjUMb4A19WEoG031-D-jh94lo.roa (hash: 9BtlaBZl/GFPVYBxNJXRqsP0IZiStCfXW61EzbYDKj8=)
                          5: tv62RBBqohKxYzcycLc_xEOWUNk.roa (hash: 0SFt/njPH5N+KmKGkT8rCoj+nHuAVB0xwDfk4Lcq+Tg=)
                          6: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: XdExUCEWM2bPD1QVmdcb1AcTSr5/OiFJtB+o/x0q07w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f0:03:a5:13:15:f9:cb:26:23:3f:8c:17:ca:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Jan 31 14:00:41 2025 GMT
            Not After : Feb  1 14:00:41 2025 GMT
        Subject: CN=bd8373e61fa905ef8c1418488e906eb8781657cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:0c:7b:09:81:87:b0:c2:2f:54:86:1f:15:
                    47:6b:49:d0:c8:57:dd:58:95:7c:0c:b3:fa:49:b8:
                    5b:27:18:5d:01:d5:45:9b:d9:57:c1:5c:a9:b7:dc:
                    4c:92:fe:6a:9b:46:6e:11:42:a9:e3:23:70:e8:12:
                    4e:8c:35:b1:6f:27:8e:90:7d:c5:7f:1a:88:b5:78:
                    0e:a9:99:1d:53:6c:04:48:30:26:0c:44:29:29:6b:
                    a4:60:55:d7:22:25:45:63:c1:d1:71:99:77:1a:a4:
                    67:35:f4:6c:32:87:96:cd:40:1c:4b:c8:16:45:53:
                    48:66:b3:f2:07:0b:e2:d7:12:ab:09:ad:9e:82:d2:
                    9b:dd:0e:b6:5d:04:05:5d:ec:5d:ae:71:19:b0:dd:
                    69:ca:34:36:6f:74:fd:a2:5b:e3:f6:ce:a7:13:53:
                    8b:75:1b:03:09:a4:2a:66:8f:bf:b8:c4:94:31:1c:
                    4f:cc:9f:44:12:fa:3a:a7:83:63:2d:3a:f4:23:6b:
                    a4:b7:c8:5a:df:16:32:be:b3:ea:7b:ac:69:2a:b0:
                    88:30:4d:83:2a:f1:40:72:09:75:ec:bd:f8:7d:33:
                    f5:2e:16:da:87:d0:44:cf:e9:dc:03:9f:67:30:bc:
                    93:2d:72:d8:d8:54:6c:cb:0e:ea:bf:0a:17:06:6f:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:83:73:E6:1F:A9:05:EF:8C:14:18:48:8E:90:6E:B8:78:16:57:CD
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:09:05:c4:d9:87:91:b2:e4:00:78:ed:ac:85:a5:43:64:9d:
         99:58:52:3d:c1:67:76:aa:9c:c8:dd:58:b5:0b:91:b5:43:d4:
         52:c6:28:5c:44:c6:98:d9:75:97:12:05:89:9e:d2:f5:aa:3f:
         1f:06:cf:63:b1:fb:ea:9b:b0:fa:20:fd:67:e4:c0:d5:fc:ad:
         95:79:d5:fa:b0:b7:49:bb:0f:5d:c8:db:e3:20:16:14:de:d7:
         c1:2f:ec:3d:40:a9:a3:37:54:e0:52:1a:55:df:3c:5b:52:df:
         5b:48:77:7f:e7:e1:c2:ab:e0:23:07:42:c8:8d:89:78:9c:d0:
         a2:5f:e1:78:fe:3e:9d:9d:ec:d6:3b:4f:dc:5a:b5:55:f9:b9:
         c6:c0:f5:ba:a0:c4:0a:6a:a4:ec:09:bd:42:e5:d3:c2:45:8e:
         ef:d7:4c:c6:76:85:f9:20:7c:f2:51:2c:e8:5e:16:7e:e9:3b:
         ad:91:3a:7d:1d:7c:9d:b6:d8:37:05:ff:b6:76:c3:9f:24:7c:
         20:81:c7:fc:54:91:3c:34:ce:93:c2:df:bc:d5:4f:2e:9f:6d:
         a5:16:fe:6b:52:20:4b:38:91:b3:5e:00:b7:18:54:0e:50:1c:
         d3:bc:07:e7:31:2c:c2:0c:bf:4c:ae:18:e8:da:a9:90:cb:e7:
         87:f3:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----