Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          649veZFEOXuc8isUt2T+FSPPvmz5rpYV+iWHxXsM07I=
Subject key identifier:   0D:FA:6E:D7:F2:F1:72:71:0D:C6:85:06:83:B0:75:D8:2C:EA:F7:5B
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       0194BC72CCDFFB589177C6936F7F4225D009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          0DB6
Signing time:             Fri 31 Jan 2025 13:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:27 +0000
Files and hashes:         1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=)
                          2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=)
                          3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: h7pkHf8F1DUOcxdzyh5t5hXTsGCherFY91ZeutIGFMI=)
                          4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=)
                          5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:cc:df:fb:58:91:77:c6:93:6f:7f:42:25:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Jan 31 13:00:27 2025 GMT
            Not After : Feb  1 13:00:27 2025 GMT
        Subject: CN=0dfa6ed7f2f172710dc6850683b075d82ceaf75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2b:e7:8f:f6:07:e3:17:52:ed:d8:59:de:55:
                    2d:ac:44:c5:3a:1a:39:c0:52:3f:fa:21:09:16:29:
                    38:00:6b:fc:7a:a7:ee:2e:f6:ff:68:fc:ea:01:bc:
                    9d:a5:f3:91:87:4a:79:43:40:44:f9:7e:fb:41:fa:
                    57:e4:9f:d6:c4:7c:83:2f:0a:67:77:2a:3e:80:6e:
                    5c:eb:20:e3:aa:21:12:6a:fb:f5:74:8c:25:9c:f4:
                    b0:b3:db:b6:77:d6:14:ab:f9:d3:f7:f7:5b:54:f3:
                    d1:74:74:f4:1c:92:50:2e:39:5c:42:2f:d7:20:02:
                    65:ba:22:f6:8c:1c:11:d6:76:6d:2d:11:70:53:4d:
                    27:7e:d7:b4:77:af:3f:43:c1:38:e9:a9:46:bf:1a:
                    94:54:1e:ea:8e:0f:bf:69:38:72:3a:9c:4e:0f:c7:
                    19:11:64:64:1c:9f:ca:51:5f:83:21:0b:85:35:2f:
                    f5:49:c9:51:ee:1d:c5:26:78:d2:de:dd:9a:ed:c4:
                    04:1c:52:12:a1:47:94:74:31:89:72:9b:34:9b:48:
                    7a:92:98:89:3c:3e:fd:6c:31:24:2b:c8:2d:8c:45:
                    34:c7:34:23:33:8a:6e:00:0b:c6:99:8a:9e:be:45:
                    8f:ef:bd:b7:4e:22:58:24:90:ac:ce:8b:6d:81:77:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FA:6E:D7:F2:F1:72:71:0D:C6:85:06:83:B0:75:D8:2C:EA:F7:5B
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:91:c5:58:84:72:b6:c9:59:1d:40:0d:cc:78:e2:8a:71:ae:
         11:2e:fb:0f:f6:cb:88:3e:62:8b:a1:2d:64:a3:f5:9e:15:d5:
         b9:af:27:5c:a4:6d:d4:d8:16:5b:91:ca:7c:a3:86:c6:cf:08:
         d2:7a:2b:b1:39:db:b3:03:63:63:d6:51:97:e9:70:2f:83:cf:
         a6:d6:62:ce:51:06:95:6b:07:95:53:93:3e:31:b1:a3:99:d6:
         a7:b4:d4:45:58:36:67:fb:2f:c2:c6:91:47:5d:e3:2c:0a:4e:
         8b:a1:58:08:f6:f6:94:05:1c:50:c3:ff:b9:6e:b1:0f:4b:df:
         f7:2c:4c:60:04:7d:03:80:ef:dc:e2:3c:c6:0b:f7:a2:10:8b:
         9b:be:c2:e7:43:a3:ff:b7:91:5c:c5:d3:d9:b8:4e:e5:80:00:
         2b:f1:4d:88:5f:48:93:15:d3:bd:81:de:00:14:bf:ff:94:00:
         de:df:8c:ee:b8:84:25:89:26:5b:14:e3:a6:d6:97:c5:48:41:
         04:af:40:82:d8:9a:9d:31:ec:52:5c:0b:33:e6:dc:49:4f:b3:
         68:08:15:c0:13:c6:3a:32:7f:98:cc:2b:86:b8:f5:74:34:41:
         20:4c:b4:2e:16:23:e3:1a:89:33:e2:47:19:37:98:e4:51:5f:
         f2:75:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----