Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File:                     UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier:          pJTzKSo3cAYaeGBzz4+LyLpKc50MkxNBxNJ8G8f+9cg=
Subject key identifier:   0B:D0:D1:89:A4:A5:0D:74:03:D3:78:98:CD:EE:92:6D:1B:31:2F:2F
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer:       /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial:       0194BC72EE5BC5A2EF8632A8F6E027AD8881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: CcJJz4LHqBfVmqebSCbbfSxazO4.roa (hash: NpYxNXz/TsGqoMRv+WmEIOF956M+rNYVRpeLiIuXSLs=)
                          2: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
                          3: O9n2W45IL4ZPQ7ySmP_wgMSjmM0.roa (hash: LHjzPi1frnVBcp5q4ol11nwZf0XWlDw2urze+/Pgr4A=)
                          4: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: 8LBzTJpryWv2Njc8Tam+Rx2wkMjzuz19oafC59cz89Q=)
                          5: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ee:5b:c5:a2:ef:86:32:a8:f6:e0:27:ad:88:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=0bd0d189a4a50d7403d37898cdee926d1b312f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:12:bd:4d:6d:c2:b2:1d:33:54:47:02:11:
                    93:92:e5:10:49:a8:3f:72:00:37:cd:c9:88:81:71:
                    7e:01:05:5c:59:74:b4:7d:0e:d5:cc:7f:07:aa:43:
                    4a:22:1a:37:ed:06:7c:e9:da:50:93:e7:37:d5:53:
                    0d:0a:af:73:5e:3a:c1:09:76:92:ec:c2:08:3b:9b:
                    33:60:1d:f2:c9:a7:bb:0a:61:3f:a8:b5:3c:63:f9:
                    74:23:9b:16:51:ce:a2:6f:da:29:9b:6a:ac:5d:fc:
                    09:7d:54:cc:60:85:69:ca:72:5c:d2:20:54:7e:36:
                    52:55:50:8d:82:2c:3c:42:c3:b8:2c:02:41:74:97:
                    40:c6:46:70:a2:19:e8:fb:67:25:4c:62:11:2a:ff:
                    57:24:75:9e:9c:bf:13:70:de:2b:9e:44:15:21:9b:
                    40:b0:16:a2:b2:af:7a:e0:c2:fa:03:8b:9b:d3:99:
                    5b:c2:c6:49:12:a7:4e:54:d7:01:c6:ce:ae:f5:97:
                    6e:2b:ae:e1:b5:7a:39:30:66:9d:55:42:5b:c8:59:
                    67:9f:49:0b:4a:0a:a9:d0:9a:7c:4c:bb:28:f8:77:
                    3b:8c:ec:b3:9b:ab:ae:a0:72:5d:0a:ad:4c:16:c1:
                    e0:cd:ff:e0:08:dc:85:4b:16:d3:6b:9c:3a:2c:9c:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:D1:89:A4:A5:0D:74:03:D3:78:98:CD:EE:92:6D:1B:31:2F:2F
            X509v3 Authority Key Identifier:
                keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:69:e9:7a:03:4d:02:b8:d9:57:0e:18:bc:3c:ac:65:d3:8b:
         0a:d0:ba:a8:8a:36:73:69:57:a4:6e:49:7e:80:1a:34:2a:fc:
         6d:bc:c1:0d:d3:20:99:59:a7:67:03:6e:25:89:27:a5:eb:9f:
         84:c4:c9:94:04:6f:c9:03:cf:14:02:2f:8e:69:a6:5c:3c:8c:
         99:60:99:dd:f2:03:fe:e5:41:89:06:b7:c9:72:6f:d0:83:5a:
         bf:01:92:d0:01:a6:37:21:16:a8:64:ba:59:c0:1a:2c:44:a6:
         03:b7:0b:a0:60:e5:c9:c7:d1:c1:5b:b2:ed:05:5c:6b:86:8c:
         6e:26:f0:e6:08:af:8a:46:9d:b8:40:6d:aa:f3:ca:cc:96:f2:
         87:02:4e:ac:df:2a:c5:71:77:44:aa:6d:37:e2:9e:1f:f7:87:
         18:eb:3d:54:fd:f4:53:76:db:da:e0:1d:e7:a5:22:95:03:78:
         45:c1:e4:19:fc:9d:24:2b:bb:06:12:d9:48:31:76:c8:18:6a:
         2a:c4:af:0a:cf:80:d8:93:1b:88:3b:ba:25:a4:c1:12:c9:8f:
         96:ec:c2:d8:ef:0a:c2:ba:a5:c5:13:ce:a2:d5:db:d3:7f:05:
         cd:02:12:9c:42:c5:dd:31:0d:88:91:57:74:df:f3:f9:b6:65:
         ed:5a:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----