Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          X9+SkJ1OPNwNWgu9nBVidR8Trck+zpW0+7Rxg0MoscA=
Subject key identifier:   53:43:2E:2B:B9:E6:B9:D0:C2:84:40:F2:A2:9D:38:6B:E1:FC:78:B1
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       0195E159061CEC4CD00065BE6CA429C3F94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          11A1
Signing time:             Sat 29 Mar 2025 10:01:02 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:02 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:02 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: 4eUjRO3pTSBaw8h1DJK8WdC65ZhD1ya5W3FLx+H3Ck4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:06:1c:ec:4c:d0:00:65:be:6c:a4:29:c3:f9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: Mar 29 10:01:02 2025 GMT
            Not After : Mar 30 10:01:02 2025 GMT
        Subject: CN=53432e2bb9e6b9d0c28440f2a29d386be1fc78b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:15:44:87:a5:92:8a:ea:de:fe:46:3f:bb:
                    1b:59:41:f1:25:a1:84:40:86:44:1b:fa:9c:f4:6e:
                    76:07:02:fd:fe:12:56:c9:11:21:99:fa:c7:a8:91:
                    24:64:01:6f:27:08:79:aa:33:32:19:a7:fa:e1:47:
                    01:be:88:16:fd:a4:c8:e5:db:1c:b5:8b:f3:99:0b:
                    44:4c:ff:fe:83:b3:d3:2e:60:3a:1e:4c:fb:0d:2b:
                    ba:6d:81:72:91:dd:4b:e6:26:7e:f2:2d:09:69:c6:
                    66:62:4d:fc:96:8f:f5:79:f8:08:cb:84:73:a4:05:
                    f7:e7:bd:ad:f9:8e:90:6f:06:60:87:87:3a:1b:8e:
                    3a:65:99:9f:72:a3:b7:49:80:60:23:4f:dc:44:0e:
                    0a:8a:ad:38:b9:ff:7a:7a:66:32:3f:90:f8:b9:48:
                    86:e1:8f:d7:de:db:16:10:4b:84:12:72:c8:28:01:
                    68:b8:a0:bf:05:1b:ca:13:69:dd:86:f5:e0:f0:9a:
                    4b:cb:7d:43:2a:b0:b4:39:35:e6:36:62:47:a2:73:
                    14:2e:b3:b6:2d:be:1f:49:94:38:bb:4b:63:d8:67:
                    06:be:17:ae:1e:c7:c1:ed:ab:03:d6:a0:03:f5:3a:
                    ab:79:67:d3:77:1d:31:80:b4:df:e8:2d:7d:d6:db:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:43:2E:2B:B9:E6:B9:D0:C2:84:40:F2:A2:9D:38:6B:E1:FC:78:B1
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:a6:7c:92:bd:47:28:02:ac:85:1f:d6:89:2f:01:6d:c3:
         ea:06:7a:f8:16:91:c4:e8:39:70:b6:79:6a:e7:70:76:c2:b1:
         dc:3f:df:53:7b:8b:f0:1e:bc:97:0d:ec:26:04:d2:6b:25:b6:
         b1:37:eb:83:2d:c3:30:89:45:fb:a2:23:fb:ef:d1:95:a4:d6:
         21:de:4e:89:44:80:eb:ae:dd:a7:d2:6e:f0:c7:af:9d:96:5b:
         d0:86:16:50:25:2a:01:b8:f2:f2:99:33:4f:73:1d:a8:38:30:
         31:81:a4:4b:4c:a0:f4:de:c3:65:06:2e:31:ba:96:9e:54:6b:
         2f:e7:4f:f8:ac:61:94:4c:61:58:7d:78:de:96:d8:53:06:68:
         db:f3:c2:a0:ef:ed:fb:31:98:ef:13:cc:8a:12:79:31:ce:18:
         bb:2b:1d:e1:7c:67:27:6d:1e:85:f6:e2:99:73:fd:7a:ed:79:
         aa:a3:3e:d1:b5:4a:cc:a7:d5:5c:c5:6e:ae:88:da:a7:93:05:
         f2:bc:71:87:9a:86:35:42:6c:a9:f3:a3:60:cb:0f:57:59:58:
         74:de:25:ed:7f:ec:fd:9f:33:db:c3:ec:e9:36:e8:3f:d6:46:
         7b:ad:e4:92:d2:b6:fd:38:25:e3:19:d1:b2:5c:ae:aa:aa:f9:
         4a:9f:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----