Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          T3T/OlVIZ8grLqhYwblBID1oi5rWhomxWp2jN7dIeKs=
Subject key identifier:   82:95:B5:C0:A3:49:49:BA:68:EF:7B:7F:17:1D:01:4B:55:E5:D7:B0
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       0194BD857451E2B587FFDAFB9A6B6172957C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          144B
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=)
                          2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=)
                          3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=)
                          4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=)
                          5: VHnEdWOU21TmJWTQH9-doQXQ0yk.roa (hash: pFCoqQmJJvFJk4sf3//959OhDhdVi2aYYgZGYzF037A=)
                          6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=)
                          7: cnLqz6Kh83iV906wpgWkxQuX_-s.roa (hash: KwRJARsixxsJl6qp3pBwEDPF/6TBUWBOFwYl9jwvdb0=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: lNmdr0o/w7nH33M5VA4E8LridBgYxxsNTiKyRcJUyPA=)
                          9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:74:51:e2:b5:87:ff:da:fb:9a:6b:61:72:95:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=8295b5c0a34949ba68ef7b7f171d014b55e5d7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:25:b7:7a:ca:bd:1d:fd:5c:d6:d0:e6:f2:
                    fb:45:92:6a:c6:58:29:5c:69:0c:a3:e9:be:b1:8a:
                    49:e7:f3:1c:21:d9:93:34:da:a5:83:42:5a:b8:70:
                    cc:cc:42:c4:fb:a2:a0:06:a9:1e:12:3b:59:f6:13:
                    96:58:ad:76:d8:d1:00:23:9a:ad:dc:e6:c6:be:c3:
                    11:b0:d5:dd:50:16:48:2d:f0:d4:93:60:5d:09:64:
                    7b:f1:ef:35:61:e4:87:06:f3:df:66:65:91:7d:a2:
                    48:df:48:00:51:36:20:5f:88:94:3d:37:49:1b:a7:
                    da:f3:2c:0d:62:f7:c5:76:5f:d2:fa:7d:b0:ed:64:
                    3a:23:23:de:48:d9:8d:61:07:42:ae:2f:59:9e:2b:
                    d2:05:bf:5b:90:76:cd:55:0c:47:1c:ec:02:3e:63:
                    5b:45:d9:78:2d:34:f3:73:55:af:5e:14:98:35:5a:
                    a0:45:1c:9a:74:5b:7e:28:ac:e4:3b:f0:9a:a6:31:
                    91:bd:90:2f:04:ce:e7:d8:30:1f:a1:f6:fb:42:14:
                    17:01:3c:50:fd:30:81:09:e9:93:5c:5d:ab:39:7b:
                    01:e8:4b:3c:66:a8:5c:bc:59:04:7c:dc:c9:be:29:
                    14:f8:c6:9a:02:00:94:32:e9:e6:9f:54:f1:dc:cf:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:B5:C0:A3:49:49:BA:68:EF:7B:7F:17:1D:01:4B:55:E5:D7:B0
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:16:97:86:c9:8d:59:4a:93:17:45:4e:59:18:db:0c:cf:ac:
         07:40:7d:15:82:29:c0:61:e4:51:84:eb:66:19:41:7d:77:4c:
         d4:f3:e0:26:d2:1f:ea:3c:fc:cd:38:46:80:5d:5a:fa:d2:68:
         c8:9f:f1:d2:0d:0a:67:2e:de:38:44:b8:07:0a:a2:c8:4f:41:
         f1:f0:02:fd:25:0b:cd:d7:87:c3:a4:73:b4:51:c8:e2:6a:17:
         7f:5f:01:d8:00:87:39:ad:23:47:66:22:e4:82:8d:54:61:dc:
         e2:ca:3f:14:c7:97:de:4b:4d:fb:a2:ed:56:f0:99:69:0d:19:
         62:cb:1f:2f:50:b6:a8:8d:fd:58:09:47:16:7c:d3:5a:0a:57:
         f0:60:ac:60:20:b7:a9:0e:b0:1e:81:ea:5e:db:51:84:ea:1a:
         be:5f:35:75:53:24:fc:d7:e3:ef:bd:cc:17:a1:9d:77:a1:5e:
         48:1d:9b:aa:27:a5:92:2a:32:33:4f:73:09:b1:86:39:37:4e:
         1d:25:63:2a:e0:76:73:1b:13:02:fb:c3:7c:08:8f:a0:82:ad:
         0f:d5:d0:03:d6:7e:89:ed:33:17:f4:74:a0:af:ef:02:47:4f:
         d5:34:d9:ca:bd:0f:1e:8d:9f:b6:46:7b:41:92:36:fc:1b:51:
         5d:80:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----