Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File:                     UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier:          a+7BKnmBDY8MLD7dmaCyW9+xj+GhE88LF1XPEfKkBPM=
Subject key identifier:   A2:50:39:2C:FE:CA:EE:36:91:19:F7:D7:8D:62:E1:77:56:6B:4D:2C
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       0195E00FEA9D487B8C2206F616B395A591B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number:          1427
Signing time:             Sat 29 Mar 2025 04:01:34 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:34 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:34 +0000
Files and hashes:         1: 67knVum1wBay7k_VNa2UY1ZRh60.roa (hash: mJTVZRqj1O7LfCpRR9HxwFssov8nRBQ/WlFjuFod+is=)
                          2: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=)
                          3: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=)
                          4: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=)
                          5: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: n5ix7a0lBOFMQyeREn0t0aDTBxgLbJLTFRKlhP15H7o=)
                          6: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=)
                          7: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (hash: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=)
                          8: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:ea:9d:48:7b:8c:22:06:f6:16:b3:95:a5:91:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Mar 29 04:01:34 2025 GMT
            Not After : Mar 30 04:01:34 2025 GMT
        Subject: CN=a250392cfecaee369119f7d78d62e177566b4d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:ed:8b:95:32:31:bd:9c:e8:8f:9c:e9:a1:
                    1f:ed:48:b2:3a:24:7e:f4:e3:b5:59:06:1f:c7:cc:
                    2e:3e:e7:cc:71:ce:b4:dc:89:96:9c:e0:5e:7a:6f:
                    85:2a:e6:bc:23:7e:63:ba:fc:96:6f:2e:2d:4b:ee:
                    15:ef:d4:db:c5:4c:5f:4a:16:9e:82:da:b1:85:d7:
                    56:01:bb:4e:a6:2b:a2:d6:de:0a:c1:80:91:8a:aa:
                    96:6b:ed:d6:12:01:b6:97:f7:c6:2e:f3:a0:91:c8:
                    c2:a7:fa:28:63:2e:a3:63:70:e0:4f:07:3a:be:d8:
                    16:a4:30:12:f0:3a:79:2c:db:20:76:d1:b7:06:b8:
                    9b:00:c2:42:88:2a:db:41:c8:59:70:e0:b2:53:1b:
                    31:0a:58:da:e4:56:80:7f:4b:23:d2:8f:82:d8:aa:
                    44:c8:39:d2:5f:7c:10:14:c4:3b:cd:cb:f2:32:12:
                    17:93:9b:00:a7:c8:42:d3:e0:0f:9e:8b:17:e1:f4:
                    b9:b9:e9:a9:e8:2f:b4:f1:b2:e8:6d:7b:08:b2:f4:
                    43:85:35:33:e8:4f:5b:db:a0:0e:3b:f7:f5:24:c9:
                    bd:af:d9:d0:92:62:53:94:b7:b6:c3:6b:65:61:39:
                    92:e5:26:03:51:09:66:4e:38:8e:98:30:1f:d9:96:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:50:39:2C:FE:CA:EE:36:91:19:F7:D7:8D:62:E1:77:56:6B:4D:2C
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:1f:a5:d9:81:69:f1:95:cb:9c:db:5b:58:20:6b:00:62:
         03:dc:e5:6b:72:e9:fd:02:93:26:e1:98:a4:45:82:a0:c9:6d:
         8e:d7:35:65:fb:04:48:10:42:12:a2:4b:60:87:c6:e5:60:13:
         00:8b:f3:e0:3f:57:f2:4c:7f:55:43:db:eb:78:d7:45:10:6d:
         8f:87:0f:5d:5e:a3:ca:8b:64:1b:10:9a:4e:44:99:f8:e8:b9:
         8f:d7:47:88:df:03:90:0b:d6:91:99:2e:74:64:32:f2:65:04:
         24:2b:4e:0e:e3:b6:1e:2c:5d:b8:f5:45:b0:12:69:6e:83:51:
         6e:f5:39:ba:b2:2c:b8:57:9c:a2:af:ca:3d:78:d9:10:a8:f2:
         54:96:9a:d1:fc:5e:b8:2e:8b:6a:d7:5c:f8:71:85:db:74:5f:
         89:10:52:0f:37:61:89:f9:bf:33:fe:de:e8:94:d1:8c:39:a7:
         a7:78:54:35:d7:e1:5a:e7:5b:6b:c6:6f:53:7a:e7:02:c7:bc:
         16:c2:b1:c7:15:c2:65:0a:43:12:74:4e:ac:c4:ee:ea:55:48:
         a2:5f:dd:10:38:a0:9b:a5:43:72:0d:06:68:09:c0:2a:fb:54:
         b4:78:89:9a:99:9b:76:10:f3:35:1a:8f:d2:2f:fb:3a:6b:36:
         97:f2:f1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----