Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File:                     umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier:          CzeNaaI1BfQaY7/BJ6wAB+wz4PonExTtZ7brUZ1xnjk=
Subject key identifier:   81:B5:7A:D5:AD:8E:94:4D:55:56:3A:8D:BF:94:5E:E5:A8:AB:31:20
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer:       /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial:       0194BCAA141EDB7CD11999F35A4F0EB63C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number:          143A
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: 5U4MEYVwKErq9FhOsJB89ZvBBuA.roa (hash: NDCcRzRMP/wHXoUUOEq/IXJG3IgwKCj1GS7rUpsjlXY=)
                          2: 60lbisj9EBvEk8CkvIEbp4prM3I.roa (hash: cqYnW2I6KAO2XW2NYFnEXuAIZkVjJlu5WB2aqpTSh88=)
                          3: bHZh-gl2BV9HaE6gMvNJJyeNKUs.roa (hash: sDUjjxYqPfgF3z6qcjo8Ch8x8GHsvhm9yqvWs72G0WI=)
                          4: koXm2_p4F4KWKYlIu0UQERaNMQ8.roa (hash: zXAmEZonvu8xaYLE77bD6JgXELMdseALDrYiTNuQR1E=)
                          5: qerWJ9N0klhuhzcIgvZSrAumV_Y.roa (hash: /vwvzpt6A9BdPc1JxUloTrK4LVtePi7FvbqVFdA3VF8=)
                          6: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: /zKC7cll8Gkgi6MJ0eTuedCwKaiAIKxgVUpZQDNyybM=)
                          7: zMnP4SbXXtzO5Qz_HmHXST-lJbc.roa (hash: x/mXpix8fyVF7pfT27hYA7xsa5opQzKkRx7F0dXWqMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:14:1e:db:7c:d1:19:99:f3:5a:4f:0e:b6:3c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=81b57ad5ad8e944d55563a8dbf945ee5a8ab3120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:2e:cc:05:f0:31:89:f7:58:7b:35:c2:5e:
                    3a:d5:44:f7:3a:8f:86:19:1a:fb:cf:6d:0c:d2:3b:
                    47:8c:2c:3b:c4:b6:a9:7b:de:81:ce:4c:cb:50:0e:
                    6b:ef:9e:79:72:2c:1e:01:08:0c:bb:32:82:f5:c4:
                    e2:81:0b:e3:a9:ba:ea:5e:99:0c:c6:96:b7:99:ab:
                    82:73:4b:0b:13:09:fc:1a:95:b9:03:e7:7d:4f:b6:
                    02:98:95:26:65:bb:ae:92:46:61:7e:f6:74:16:ef:
                    93:d4:55:70:1f:e8:2e:d5:ae:4e:3a:07:5d:9f:45:
                    95:c8:f4:dc:27:37:43:18:b8:c2:78:67:f0:df:e4:
                    e7:34:ab:13:82:aa:7d:83:56:78:02:e2:ab:45:dc:
                    73:7b:50:00:64:e2:8b:68:ee:6e:6e:25:2b:6d:12:
                    e4:04:3f:92:cf:5b:3b:a7:f9:25:81:ca:20:66:f1:
                    e0:5c:08:2d:44:9a:ce:36:a6:58:6b:12:e6:12:fb:
                    98:52:15:f6:60:11:9a:8f:84:21:80:59:71:92:80:
                    22:8b:13:4f:30:17:30:29:eb:59:9c:25:ba:7e:97:
                    6a:63:75:63:b6:c2:2d:55:a7:87:f1:4c:29:e2:93:
                    31:b2:00:0c:4e:94:d0:7b:21:ce:ec:7b:c6:04:63:
                    74:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:7A:D5:AD:8E:94:4D:55:56:3A:8D:BF:94:5E:E5:A8:AB:31:20
            X509v3 Authority Key Identifier:
                keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:c4:49:67:08:bf:97:0d:7d:57:a3:e3:13:ef:27:ca:72:
         fc:59:df:b4:2d:91:0a:aa:04:f7:ac:8f:1d:ac:4f:d3:80:ac:
         1d:70:37:dd:4f:92:ab:1f:23:ad:b5:fc:1c:fd:dd:b2:8e:4a:
         48:57:2f:15:db:83:c1:09:23:ec:70:cb:5b:a9:74:e9:f5:0a:
         cb:bf:6d:4d:fe:8b:e0:52:06:ab:2e:5e:87:b4:37:44:68:83:
         27:72:d9:17:8b:e3:97:f3:91:e7:63:46:e3:37:50:82:25:cf:
         5f:21:ca:a7:15:6c:26:01:82:4d:6f:ae:0d:05:8e:a0:1e:be:
         b4:67:1c:d7:80:ec:dc:51:20:dd:ab:06:9b:91:8f:c0:db:53:
         38:65:ef:9c:d7:8c:93:ae:17:95:94:b4:73:a9:9c:ca:d2:43:
         ed:96:86:a7:22:e3:63:95:7e:07:1b:04:b6:70:6d:35:26:d4:
         11:96:a7:49:9f:81:33:9c:0a:e7:9a:43:3c:e2:2c:4e:24:85:
         2b:ef:0f:16:65:68:8e:52:7d:77:c6:db:40:0b:92:51:42:df:
         54:c6:12:0f:f3:a8:0e:14:c2:87:0e:84:d1:1f:e3:6a:50:6e:
         e7:53:d5:0c:f3:06:4e:c8:80:5d:d5:cf:80:4d:ce:c7:c3:2d:
         dd:cf:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----