Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.mft
File:                     Ufhm8ytHxp1HitlTVOJX5Rojalc.mft (raw, json)
Hash identifier:          xYiyOsKc41TI4xgm5b/BCVptibG6PzROOc2abLbINzM=
Subject key identifier:   30:DC:66:E0:69:0C:C1:7F:4A:E8:4C:B9:3A:C0:47:EA:FA:BB:1A:6A
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Certificate issuer:       /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial:       0190286ED5C9F5450E4EF61435D34F3AEB77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.mft
Manifest number:          11D0
Signing time:             Mon 17 Jun 2024 23:01:10 +0000
Manifest this update:     Mon 17 Jun 2024 23:01:10 +0000
Manifest next update:     Tue 18 Jun 2024 23:01:10 +0000
Files and hashes:         1: BYB_srbbOAl2KI7rAModEgAfjW0.roa (hash: fkE0XKSgV9f0HrQtqm9ZplkylvO/3/62WPSe40crOp4=)
                          2: ETTG58pm0F4OKXSYGlKGAEkdrV4.roa (hash: WRb4TdkPpLPdzN/BIs5cGM6OfV+ewY6r5JOv3nOoEkM=)
                          3: NSdFGd9ySgErQ37389WrInAws5c.roa (hash: 5GSngycIwTrBkMpCBmTTBFoc7FzLS7VNq66AU+5oGAE=)
                          4: Q4dbJO7DaVQUomzT9rCfcYu4y1I.roa (hash: hNNTUgfE2Tx9LXnu5GT0x2T5s4g9VY6p8BIbmnzWoRM=)
                          5: Ufhm8ytHxp1HitlTVOJX5Rojalc.crl (hash: Qs1RvcrI7fVMAyuOp9KrB0q6XQALmeiC02ijHiVTHcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:28:6e:d5:c9:f5:45:0e:4e:f6:14:35:d3:4f:3a:eb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
        Validity
            Not Before: Jun 17 23:01:10 2024 GMT
            Not After : Jun 18 23:01:10 2024 GMT
        Subject: CN=30dc66e0690cc17f4ae84cb93ac047eafabb1a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:e5:5e:7a:cf:23:80:35:f0:b2:7c:d1:22:
                    40:90:5b:39:e9:63:7f:67:91:7e:1a:07:f8:f6:37:
                    8f:e0:96:06:36:80:a7:9b:a3:ed:ba:a6:72:f5:8f:
                    2d:98:1a:cf:ad:a4:27:fd:4c:da:1e:03:92:8c:35:
                    f7:10:d4:6f:94:76:00:bd:81:03:25:52:9a:b3:b4:
                    08:e1:18:55:1c:1b:ad:f1:c5:fc:d9:9e:89:63:cb:
                    07:72:08:89:2f:76:ca:f3:c9:7c:28:9a:d2:3f:78:
                    00:34:cd:9b:de:6d:c6:77:65:33:a2:b1:22:e3:32:
                    56:0a:44:14:41:be:26:af:17:c4:43:3b:14:7a:95:
                    09:13:2d:f2:11:58:4c:cb:4c:fc:1a:8e:d2:2c:b6:
                    56:74:a7:4f:40:88:27:a4:82:cc:76:b0:19:c8:fd:
                    b5:40:de:5d:53:66:54:42:bc:c6:e3:78:f0:58:06:
                    ab:7e:6a:39:09:8b:c3:46:b2:5c:cd:6d:0e:49:f5:
                    40:d0:ab:f8:03:85:1f:21:b3:e0:7a:b7:0a:ce:92:
                    76:b7:d4:e6:5f:b7:3b:ea:3b:c6:6a:be:93:a1:44:
                    97:8c:2b:0b:7b:b2:45:67:de:95:df:94:9a:15:1c:
                    cb:40:9c:ab:2a:c9:ef:4d:ee:66:b7:c0:19:5d:5f:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DC:66:E0:69:0C:C1:7F:4A:E8:4C:B9:3A:C0:47:EA:FA:BB:1A:6A
            X509v3 Authority Key Identifier:
                keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4e:38:e3:58:28:74:5d:56:71:2a:05:d6:e2:31:e2:f7:64:
         06:50:8b:f6:25:65:c1:19:d4:4e:1f:ae:12:4b:c6:25:7b:9a:
         4d:7b:c4:ed:b7:d1:c0:37:47:a8:b2:2b:92:f2:03:22:d8:42:
         84:d5:1e:ed:7d:87:e6:4e:42:13:49:8f:ec:67:c1:28:ab:0c:
         63:98:c4:a3:54:77:41:1e:0f:f8:fb:1f:80:28:15:14:85:dd:
         33:22:9a:2c:c6:ff:48:e8:9e:1e:20:7e:b1:cb:81:bb:e8:fd:
         ce:1b:d1:0d:18:4d:a2:6b:72:1b:54:43:c2:6e:35:81:f3:0a:
         7c:55:0e:e9:de:23:44:d2:59:8d:b2:b5:d5:9d:f8:53:89:45:
         b2:d0:20:ae:82:33:3c:b3:38:d5:21:ac:62:ac:c0:0d:fe:f0:
         07:c7:70:b9:e1:da:ea:df:1a:9c:c1:d3:0a:8b:11:32:32:32:
         09:1e:6b:9f:47:78:8a:4a:3b:ab:ce:9e:bc:f2:bf:41:1f:10:
         5c:0f:c1:c1:cc:45:ab:65:a8:bc:a9:d0:b4:e2:77:45:f9:dc:
         5a:f4:71:28:db:5d:06:a2:1f:f0:7f:03:0b:e2:f2:f0:44:a4:
         39:94:c4:bd:61:b3:47:c7:b7:4c:dd:5f:e2:18:96:6a:3c:f9:
         7e:ec:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----