Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          aaDFFGCVd37tnbrhF10sfmpWViJpqMo3bpPTr5d4g/M=
Subject key identifier:   A5:3C:CE:99:78:61:5F:87:18:4F:DE:46:D7:D6:C7:3A:0A:7A:66:2F
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       0194BCAA0D67259F49E57584A9A5B6B3AC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:48 +0000
Files and hashes:         1: FmQKM1byPT17aE4vxLhHd5hbPyk.roa (hash: xncz/of2OCuqwNzJF5Dlfe4RUORWgYvXswG7rPgqBQQ=)
                          2: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          3: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          4: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: 4o3gCFG3/Y4mEXnkcVO3AxZyIaFtA85zClt2pKdEJJk=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0d:67:25:9f:49:e5:75:84:a9:a5:b6:b3:ac:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Jan 31 14:00:48 2025 GMT
            Not After : Feb  1 14:00:48 2025 GMT
        Subject: CN=a53cce9978615f87184fde46d7d6c73a0a7a662f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:f5:a2:a6:b1:d1:20:56:76:cc:23:87:eb:
                    46:6b:2d:06:3b:f5:65:48:07:4e:80:56:46:31:a4:
                    6a:f6:cd:a3:2c:68:52:e7:85:f0:88:28:23:c8:5f:
                    e2:0f:d8:dc:08:eb:d0:b4:ef:f9:f1:2f:47:99:6a:
                    f3:28:c0:e3:e5:6a:49:9b:b2:0b:f8:6f:6a:16:35:
                    9c:4e:2b:f4:8f:fb:95:1f:d8:9d:5a:51:8d:42:a5:
                    5a:4c:5e:9d:39:00:75:1f:9e:ab:f9:e8:86:03:b8:
                    c0:43:98:fc:04:ff:73:89:c0:2b:8e:01:cc:e4:62:
                    9a:c9:22:f5:47:68:4e:b7:a4:c8:6a:12:32:46:4b:
                    8b:dd:ce:f7:85:6a:44:b4:d7:0c:ed:26:95:bf:80:
                    15:c6:af:22:06:90:e8:0d:5a:16:eb:1a:b8:74:b0:
                    37:09:4f:33:db:6a:f7:0b:8b:b0:69:ac:dd:ce:14:
                    1e:6e:c5:45:32:23:de:dd:56:6f:a2:f8:9e:2a:b1:
                    4f:c3:99:e8:14:aa:db:d0:22:97:35:b2:48:57:d5:
                    38:48:bb:0a:7c:6a:9d:80:92:c7:c6:35:dd:f8:9a:
                    f1:49:6c:cf:f2:e4:28:88:b9:a5:86:8b:ce:09:6d:
                    63:7b:25:cd:75:91:d3:0b:da:fa:a2:bc:b7:39:b4:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:CE:99:78:61:5F:87:18:4F:DE:46:D7:D6:C7:3A:0A:7A:66:2F
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:73:38:e5:93:a7:3f:11:08:7a:55:1a:cf:bf:90:fd:58:a5:
         fc:f6:c1:73:15:9c:67:47:c0:fd:f3:5c:1a:5b:4e:17:91:18:
         c0:cc:f2:23:8e:19:1f:35:4d:e4:98:97:6f:81:f8:17:51:8a:
         e6:d9:33:3d:52:8c:0b:65:c6:48:e7:ba:c0:58:03:8c:33:60:
         64:4e:d3:2e:97:2a:fc:b2:fa:88:62:d4:01:06:6f:bc:25:dc:
         d0:de:d7:c1:55:87:14:ea:d2:d7:1e:54:f3:2d:6a:65:f9:f8:
         d5:6b:d1:24:02:cc:a9:51:be:21:38:dc:89:5a:0c:1e:1e:31:
         63:be:c4:aa:c7:f5:c2:5c:2e:71:c7:96:7d:56:05:c4:c2:e7:
         82:5d:37:ea:7d:53:c5:fa:78:a6:be:39:84:74:fc:a9:8e:b3:
         f2:93:22:23:a1:af:2c:e3:d0:cb:0c:94:aa:de:5c:bd:0b:6b:
         6e:92:c6:7b:9c:be:0b:34:7e:30:1a:bf:c3:7e:28:9b:2a:11:
         75:32:b6:b5:a0:65:b8:53:3f:a7:c9:8b:26:d3:16:78:dc:0f:
         af:c8:18:09:0e:aa:96:cc:ff:51:a0:86:e6:ce:39:ca:f0:2f:
         53:88:07:66:0e:e3:6d:8d:8a:6d:6d:4f:d9:d4:44:52:32:5b:
         55:e9:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----