Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          5rXQAaLvCv6zDORkgb7PwUqqR2TguKaWy299wi3qsWI=
Subject key identifier:   6B:50:87:0F:E1:EA:AF:C1:21:62:49:43:F6:1F:D3:C8:42:97:84:39
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       0195E0EB4FB9F5463122591487DA5F39D215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0BF0
Signing time:             Sat 29 Mar 2025 08:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:12 +0000
Files and hashes:         1: Adme2qf4ksDZ-6oCIlrNbBCgXlU.roa (hash: Wc3GOSjcrd2VFj704HdUOXmnp4XgayfLYKOQEVu24sU=)
                          2: I59p0fVLaIr89_ldEZwoF2MoYFE.roa (hash: FdQSWnL3ElGU7Qil0yNzTyWdhStFMv7BqktZ0+6IJ5M=)
                          3: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (hash: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=)
                          4: u526Wnr47KSqxtbe3YeXUjY_OXc.roa (hash: FvreOZl4avGV95mg5S5jeu4j5alGN81Rb9numInKC1U=)
                          5: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: FBTLzje4QeKMq1RmhfbHtC6GbfYiV1URNXdghg0ZjgI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:4f:b9:f5:46:31:22:59:14:87:da:5f:39:d2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Mar 29 08:01:12 2025 GMT
            Not After : Mar 30 08:01:12 2025 GMT
        Subject: CN=6b50870fe1eaafc121624943f61fd3c842978439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:9f:f3:52:91:34:09:e2:0e:36:46:3d:7f:
                    58:ca:92:bb:8a:dc:60:8a:ef:82:c1:06:56:c0:6e:
                    c4:30:db:c0:b3:77:4e:cb:53:cd:21:e2:bd:68:5b:
                    de:46:08:8c:0c:d7:be:c5:a5:ee:9d:c2:8e:e5:11:
                    f5:34:79:ce:bd:07:d3:9f:86:f0:63:63:fa:e0:e1:
                    ef:40:66:e7:cf:7b:f3:19:74:c5:63:41:39:19:5d:
                    73:be:69:06:07:64:b5:38:c6:72:0e:9e:fe:1f:76:
                    3e:30:36:2d:ea:8a:26:60:2f:ea:93:e1:9a:5b:0c:
                    55:e4:bf:16:58:13:39:5c:1c:c1:0f:dd:24:94:9d:
                    6f:9c:95:cf:4a:36:ca:1d:53:ff:22:db:c8:ba:12:
                    9c:63:5a:34:fd:e9:a3:ef:f2:af:23:25:e0:3b:9b:
                    e4:25:54:91:ea:c4:e2:fe:96:bb:57:a9:60:ab:f3:
                    5a:81:86:7d:c0:7b:a0:ff:90:76:8e:cf:7f:af:74:
                    86:95:f4:00:07:ab:3d:b3:e6:9b:66:e6:14:58:ff:
                    92:34:51:3c:e1:27:11:30:2b:11:dd:d4:81:df:52:
                    83:ad:94:71:3d:95:2f:62:06:b4:2d:dd:80:0f:7d:
                    16:64:d2:81:08:3c:69:6f:f9:a4:e1:ea:0a:5f:5c:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:87:0F:E1:EA:AF:C1:21:62:49:43:F6:1F:D3:C8:42:97:84:39
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:0c:42:bf:14:a8:72:39:be:08:4b:f0:a2:cf:25:71:a5:
         18:54:ba:58:06:40:90:77:af:90:61:ef:4d:30:93:69:df:4a:
         e7:b2:61:61:52:ca:49:31:92:2e:4a:a9:0f:ee:65:7e:7b:17:
         ea:29:0c:e2:d7:49:f1:8f:65:4c:34:df:04:3f:dd:3c:ed:ac:
         45:b8:29:49:23:fb:f4:81:99:d1:69:58:27:96:10:3a:7e:0a:
         8a:cf:ce:ad:af:ee:35:9e:1a:fa:2f:2c:f7:45:eb:8b:cb:c1:
         2d:e8:88:b7:cf:e9:91:3f:6a:0a:76:9b:19:69:0f:0a:64:fa:
         35:2c:bf:60:15:a3:6f:db:fe:a2:c8:e2:38:98:b0:e6:2f:4b:
         54:f4:ce:f3:de:a1:2b:ea:c5:41:d5:fb:d4:c9:42:c3:f3:8b:
         ba:e0:cd:b8:1c:8e:47:30:e7:b6:ce:52:45:36:3f:e0:a8:91:
         c5:f6:f4:f1:44:df:23:62:7b:1a:29:06:37:19:af:d8:f0:71:
         a2:0e:e3:85:11:38:6b:67:ef:da:ba:e2:4c:0e:aa:20:ce:b9:
         31:34:77:0e:61:ad:7b:49:76:fb:a8:19:e7:ce:2a:f1:d3:26:
         a9:50:bc:3f:dd:28:ab:b5:ce:8c:4e:e4:80:f4:9b:6d:73:ae:
         13:b6:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----