Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft
File:                     ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft (raw, json)
Hash identifier:          rYmK5JEFeHAaYTUfI7GkbJSkW1fyHm1Mipp9F4aozNg=
Subject key identifier:   20:49:A5:C8:59:7E:14:BB:4C:F7:5B:3A:EC:BC:77:2F:B0:47:99:05
Authority key identifier: B9:AE:78:6E:C3:A6:D8:39:3E:02:3D:5D:75:BE:7E:3F:1D:F9:AB:2E
Certificate issuer:       /CN=b9ae786ec3a6d8393e023d5d75be7e3f1df9ab2e
Certificate serial:       01934D4EE5DCF5B215F75DAC31016BB64388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua54bsOm2Dk-Aj1ddb5-Px35qy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft
Manifest number:          0402
Signing time:             Thu 21 Nov 2024 06:00:36 +0000
Manifest this update:     Thu 21 Nov 2024 06:00:36 +0000
Manifest next update:     Fri 22 Nov 2024 06:00:36 +0000
Files and hashes:         1: E244zs7jrR5Tyi2x5xDhLhsYspk.roa (hash: KtcM2FK7GIYcjAdsxtuOMUGeqe+ID5cukaGi2Ko2Pqc=)
                          2: ua54bsOm2Dk-Aj1ddb5-Px35qy4.crl (hash: TD19hf7+6m6sjVtfUkRJPTJyXQSAfvG6JnI2Ae7qnLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:4d:4e:e5:dc:f5:b2:15:f7:5d:ac:31:01:6b:b6:43:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ae786ec3a6d8393e023d5d75be7e3f1df9ab2e
        Validity
            Not Before: Nov 21 06:00:36 2024 GMT
            Not After : Nov 22 06:00:36 2024 GMT
        Subject: CN=2049a5c8597e14bb4cf75b3aecbc772fb0479905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:f8:b1:96:12:05:b2:90:5d:d0:85:b6:c2:
                    86:22:24:e0:bc:ac:0d:b0:8a:fe:c1:e6:49:02:43:
                    5e:d8:2a:ac:85:51:10:9c:d3:dd:d9:09:d6:d5:28:
                    30:f1:a5:4b:00:84:3a:ba:a1:11:5e:f3:62:1d:20:
                    9f:02:e7:ab:31:af:32:8c:42:fc:29:d0:c7:cd:d8:
                    a8:f1:16:24:12:53:8c:14:39:a0:f4:7b:48:0c:3a:
                    db:e9:bc:e2:21:68:8d:63:8d:13:4d:a3:1a:8a:0b:
                    8d:3b:c2:0f:ec:e1:74:20:e3:37:33:b6:5e:b7:6a:
                    5b:fb:c0:82:f6:b7:e4:99:2d:ca:b3:ea:28:2e:b1:
                    f4:22:09:f1:12:9b:d7:64:23:49:15:d3:55:86:cb:
                    50:de:83:78:3e:4a:77:0d:df:76:89:8b:3c:07:39:
                    0b:4c:0c:6a:d4:0b:2d:9d:4b:1f:07:2c:44:34:8f:
                    42:b3:be:e2:c8:eb:50:f0:b2:40:e2:84:75:4d:01:
                    c8:aa:83:3d:cf:f2:85:62:84:25:bd:aa:ef:8b:f9:
                    45:7d:e3:97:0b:e5:a1:f7:2e:fe:df:12:1c:e6:b1:
                    ac:d0:dc:96:51:19:2f:0b:82:d6:f8:13:25:35:bc:
                    82:93:ad:ee:fa:ef:ca:74:0a:a9:c8:ab:94:31:50:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:49:A5:C8:59:7E:14:BB:4C:F7:5B:3A:EC:BC:77:2F:B0:47:99:05
            X509v3 Authority Key Identifier:
                keyid:B9:AE:78:6E:C3:A6:D8:39:3E:02:3D:5D:75:BE:7E:3F:1D:F9:AB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua54bsOm2Dk-Aj1ddb5-Px35qy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19c943-93cc-4597-bec7-3318ee4a50a6/1/ua54bsOm2Dk-Aj1ddb5-Px35qy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:9b:08:f5:87:38:84:19:c2:58:bb:77:d1:e6:3b:84:58:
         0b:25:98:63:3a:65:8e:6b:ea:13:a6:fe:94:1b:1a:b6:23:d0:
         82:b5:79:c3:fa:8f:bc:45:46:a1:5b:0e:4d:6c:e9:0e:ba:7f:
         d3:1d:e1:22:e6:4c:86:3c:4c:6a:d2:11:7b:4a:a8:58:e1:25:
         42:df:f8:2b:78:29:cc:31:13:10:36:0b:50:5c:02:33:95:62:
         6f:64:c1:39:64:de:8e:4b:a1:97:19:10:7b:5c:65:c2:2f:05:
         6f:11:89:37:14:d9:ce:94:83:6a:3b:5d:f6:b8:71:93:f8:8b:
         67:a5:a8:36:44:0f:5b:dd:ba:df:37:69:a2:fb:1b:03:c3:f0:
         0c:f5:d3:ea:73:02:23:87:3c:cd:41:5d:ba:04:a4:9c:b4:e0:
         2b:63:8e:63:c9:b0:87:a2:2b:c2:90:ef:a1:cd:a5:4b:2d:fe:
         77:59:b0:78:c3:65:c4:c1:dd:a6:bd:b1:44:39:33:48:ba:9e:
         87:ed:01:07:67:2c:c6:21:d8:02:95:0a:4a:57:73:52:29:4a:
         d0:f0:25:af:0c:2e:41:5b:a1:07:d1:d9:3f:44:c8:23:7a:67:
         8e:34:3f:6f:29:14:e6:49:40:84:26:9b:18:74:08:b4:28:7c:
         0a:b8:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----