Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File:                     ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier:          ZljT7fV3EcxAif9a5dKm2fMe/jNCXdcYh0xmUWCKHGQ=
Subject key identifier:   33:2F:10:51:72:35:C9:4B:46:61:75:68:F4:4E:C1:26:65:9E:C1:38
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer:       /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial:       0194BD853514109C604CBDF16D1CE7F897F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number:          131B
Signing time:             Fri 31 Jan 2025 18:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:11 +0000
Files and hashes:         1: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
                          2: Ir-8EP74HfQ0cD4Hr9yXQji5KnA.roa (hash: YmOMvCrsz2jb6K2i7oALf5Sg3Nf0Rh97rWzYSDuxHUI=)
                          3: KcgCScsM5v7p6vKS8rOSX9Ho3RU.roa (hash: Qk3LJ9YPrTkJaQrqlLUWCESFb5TBYL9+BqXBP2LnE8w=)
                          4: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: 1fY9iNNdts1dNLkGpMIoI+ppsjJKgNjGxk12K1Z8jBE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:35:14:10:9c:60:4c:bd:f1:6d:1c:e7:f8:97:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
        Validity
            Not Before: Jan 31 18:00:11 2025 GMT
            Not After : Feb  1 18:00:11 2025 GMT
        Subject: CN=332f10517235c94b46617568f44ec126659ec138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:7d:f9:5a:52:75:e7:c9:26:c9:62:15:54:
                    75:97:d9:64:b2:f8:56:e5:e5:54:c0:ef:a1:f0:85:
                    8c:92:b5:c3:94:f6:b3:b9:5e:e9:c7:9d:7d:4f:6c:
                    cf:4b:37:9b:19:1d:87:17:d3:82:47:33:6d:24:d1:
                    62:67:f0:c6:25:cd:1a:fc:ac:74:e2:60:6e:fb:86:
                    04:48:bc:d7:f0:d4:f2:46:6c:6c:28:b3:3c:f1:b8:
                    f9:17:9a:14:e2:7d:26:ea:13:98:76:e9:e0:34:dc:
                    74:a7:bd:46:9d:9b:97:09:ed:0b:2e:ec:3c:e9:24:
                    fe:8e:b3:51:35:e4:4a:15:42:34:32:58:6e:67:a0:
                    df:10:fc:0e:dd:69:1b:bf:26:f9:c7:ba:db:40:23:
                    3a:9c:1d:36:45:03:5a:89:9e:49:12:39:a9:b3:af:
                    f4:43:d1:32:36:30:3c:68:9e:33:60:30:ff:c5:40:
                    f9:1f:cb:ca:7a:50:0d:7c:79:af:c0:dc:2b:61:0f:
                    91:93:5f:a1:39:ec:73:39:cc:4b:bb:38:c3:e2:e2:
                    a3:ed:35:1f:d4:5a:84:4f:85:85:50:50:8e:95:02:
                    1a:d1:dd:f1:dd:52:5d:9b:b7:70:08:ee:c4:12:cb:
                    81:a4:f5:cf:a9:3e:7b:d3:f4:24:e2:a0:71:d3:c3:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:10:51:72:35:C9:4B:46:61:75:68:F4:4E:C1:26:65:9E:C1:38
            X509v3 Authority Key Identifier:
                keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ff:83:ea:b2:5c:e6:cb:32:be:73:c0:70:1e:bd:68:f0:42:
         2e:16:dd:07:fd:4a:33:74:55:fb:68:90:fa:f8:45:27:40:03:
         ae:67:51:25:a9:3a:89:de:93:f5:e4:e3:d3:01:78:04:fb:c7:
         29:67:93:34:66:a9:0c:68:bf:ba:ab:3c:e4:24:4d:88:5c:85:
         80:63:43:ac:c6:8c:3e:49:95:e6:a2:49:29:68:f2:5a:76:a6:
         dc:93:f5:a9:7d:fd:71:20:f4:ea:5d:6a:a1:6e:8f:31:7d:5b:
         f4:9a:dd:75:1b:18:61:7f:96:9c:66:5f:9c:b6:a0:fa:0e:50:
         5b:a3:ce:6e:65:b3:43:af:95:42:0d:1a:bf:47:2c:fe:ad:8a:
         5d:23:76:26:43:3b:7d:5e:02:01:00:98:ef:a5:3d:75:3b:ab:
         0b:6c:c9:70:0b:9c:8a:96:d4:ba:23:b7:d8:96:55:2b:15:6f:
         c2:15:87:23:28:1f:12:1b:d1:dc:0e:39:dd:51:a7:7e:f2:0f:
         f4:be:9c:ae:03:87:4e:8e:84:25:c4:fc:4f:04:c6:c8:fe:19:
         f3:ae:bd:bc:96:8c:80:3f:92:cf:1c:50:e1:28:82:d7:5f:79:
         a3:82:94:e2:4b:0d:fb:26:9a:1d:30:97:f6:07:1e:ab:79:6a:
         0d:7e:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----