Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          uP9ztUcVVWWc4Gh+oJaAIRWlltZjuvAu/MLQWvQAAq4=
Subject key identifier:   B7:20:14:7C:3E:6A:EB:0A:F1:0A:DB:87:0A:D9:88:30:F6:41:DB:FC
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       0195E00F679635DCD7C68C8FA82845F6E357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          0263
Signing time:             Sat 29 Mar 2025 04:01:00 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:00 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:00 +0000
Files and hashes:         1: EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa (hash: zKcPyyZHtwlaeSTOg+sebV3wQH2iDfrkeYXwI2IGAm8=)
                          2: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
                          3: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
                          4: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
                          5: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 5L2polxtPONdMnfJ8kfzQ8xMse4ezlQ7U8gWAFlZOm8=)
                          6: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
                          7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
                          8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:67:96:35:dc:d7:c6:8c:8f:a8:28:45:f6:e3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Mar 29 04:01:00 2025 GMT
            Not After : Mar 30 04:01:00 2025 GMT
        Subject: CN=b720147c3e6aeb0af10adb870ad98830f641dbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:e7:2c:3e:bb:10:40:dc:c6:38:62:74:b5:
                    51:97:8c:cb:95:51:43:00:98:ee:29:d4:bd:e3:38:
                    b0:c6:d9:80:aa:de:b3:27:a7:21:ee:3d:9f:ad:aa:
                    2b:ce:75:cb:24:c8:bd:2c:db:e1:bd:42:d2:ff:94:
                    89:e5:0c:43:83:22:0d:65:9c:2a:63:d3:97:52:d2:
                    7d:db:1e:1f:86:d5:cc:88:b6:0a:7f:88:10:08:c2:
                    66:b8:18:57:9d:96:e0:62:a9:34:17:7f:bd:c6:0c:
                    42:38:a4:30:77:3a:b0:ac:30:97:45:9c:f6:ff:ce:
                    20:44:51:66:2e:c6:2f:ca:e3:15:1c:9a:1f:f2:ac:
                    d2:47:44:08:92:33:40:b7:fb:68:09:7c:86:21:fb:
                    25:c7:14:8e:c1:52:de:d2:f3:3e:c4:21:e9:50:d8:
                    f5:fb:15:44:12:c5:a2:bf:fc:2a:00:28:5a:0f:b6:
                    66:34:63:e3:8a:4c:8b:98:df:8c:18:4f:ab:27:f9:
                    dc:91:9f:55:9e:5f:13:c8:e1:9f:88:a7:65:f7:37:
                    8e:b5:a2:df:2e:d4:c1:fe:16:01:79:2b:9a:71:b0:
                    c2:15:0a:75:d3:d1:75:09:84:17:81:ee:f4:82:30:
                    c2:0b:73:fa:56:84:de:fd:bf:31:8f:e7:bb:ad:3b:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:20:14:7C:3E:6A:EB:0A:F1:0A:DB:87:0A:D9:88:30:F6:41:DB:FC
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:19:c9:76:3b:19:7f:4c:1a:44:52:71:82:d9:3c:2f:ae:
         7a:71:8b:d9:f7:48:c4:d1:77:d9:6a:4a:76:df:0c:66:bb:1a:
         15:4d:4f:68:2f:46:b0:03:13:8f:d7:f0:8a:13:fc:a3:72:30:
         a9:79:64:2f:a7:e1:41:68:68:3c:0d:60:5d:ea:8f:9d:3c:0c:
         ce:a9:6c:7a:27:a1:2a:e1:97:2e:ca:3d:da:a5:e0:39:14:21:
         11:4a:ba:3b:c1:73:d2:8f:dd:8e:8e:c1:2f:3c:85:7e:22:93:
         a9:60:8b:65:c3:46:03:08:b6:c8:5e:68:b3:6d:ac:ba:f2:72:
         4f:e8:73:29:2d:ca:7e:83:3b:28:15:6b:8e:c5:87:e6:6b:d5:
         42:d8:54:40:bc:b2:65:b8:7d:2e:57:be:dd:6a:78:53:04:10:
         c5:ae:91:a2:4a:c4:1f:6b:2d:42:f3:37:ee:0b:1f:a9:24:f8:
         dd:52:7e:04:2b:9c:92:8f:20:41:1d:37:14:c8:02:fd:3b:c9:
         25:f1:77:2d:6f:dd:d6:94:bd:10:3f:b1:27:57:51:60:83:a2:
         fb:6d:b5:a4:d8:01:c7:65:42:48:2b:0e:d7:d1:f8:f2:65:c4:
         7c:27:85:5a:4e:06:04:3d:60:0a:20:ac:48:e3:77:1b:ff:74:
         e3:41:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----