Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File:                     SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier:          CCNCaSDmFwCaSsGG4ewNqv5Aw4tnm1QiLM0ZNulMFBA=
Subject key identifier:   62:CF:A6:55:0F:38:BB:56:5B:F4:C6:CF:01:AF:38:A2:0F:6F:5A:25
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer:       /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial:       0194BCA9E358D1DEC9901FA11E8386821DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:37 +0000
Files and hashes:         1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: TCpypMTrhPBg8XC3TmTPWvFe2iJIYOpzmXFvWwpMKYE=)
                          2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
                          3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
                          4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e3:58:d1:de:c9:90:1f:a1:1e:83:86:82:1d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
        Validity
            Not Before: Jan 31 14:00:37 2025 GMT
            Not After : Feb  1 14:00:37 2025 GMT
        Subject: CN=62cfa6550f38bb565bf4c6cf01af38a20f6f5a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:2b:11:aa:a2:4e:b3:8d:9b:7c:d8:14:57:
                    31:8a:5f:9f:fa:13:d2:31:e6:3a:e3:39:b8:89:44:
                    51:de:8c:0b:c5:e9:2e:c3:28:cb:33:ed:cc:fc:10:
                    00:53:43:6b:37:fb:66:03:df:8d:7f:05:a8:7e:59:
                    ea:2e:b8:66:10:f2:23:ab:fe:3a:62:61:1d:e0:c6:
                    e4:f1:ca:54:ba:6d:cc:2a:f5:9c:cf:33:eb:11:64:
                    5c:20:f5:75:13:d6:25:fd:2f:53:38:d7:87:44:44:
                    78:15:d3:40:43:1c:74:f1:9a:fd:c1:fd:eb:d2:1a:
                    11:5b:65:5f:5d:00:b1:6a:cf:57:16:d7:5a:d4:23:
                    d6:01:97:26:1e:6b:87:64:55:c1:cd:f9:54:f7:e3:
                    d7:26:a7:ed:75:07:27:5c:47:95:54:fb:7e:0c:a3:
                    1c:b6:4f:15:b3:f7:75:3e:ce:ba:62:e2:06:b6:a3:
                    41:fe:00:fc:03:b2:65:32:86:f1:b1:bc:a4:cc:dd:
                    31:d9:d7:84:2f:b1:86:21:37:af:6b:22:b3:81:42:
                    9d:67:c5:5d:8b:19:cc:4e:47:30:fc:f9:82:75:a5:
                    bb:f9:1d:44:3b:c6:52:14:f7:41:34:ee:92:60:4f:
                    e2:cd:e6:a0:22:4c:d4:6f:5a:3a:e1:86:9c:50:a7:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CF:A6:55:0F:38:BB:56:5B:F4:C6:CF:01:AF:38:A2:0F:6F:5A:25
            X509v3 Authority Key Identifier:
                keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:56:09:23:db:74:a1:9d:d0:4a:3a:1a:90:95:05:63:c5:3d:
         42:67:eb:6b:34:7a:ce:e9:21:e6:98:8c:dc:53:fc:be:f6:7a:
         c7:8a:30:e8:5c:a2:83:33:08:74:a6:47:38:a1:e8:a4:b6:23:
         86:02:6c:5c:35:7c:d3:b7:f8:1c:d3:33:fe:91:08:91:aa:e1:
         41:ca:b4:03:3e:27:19:0b:90:af:85:e0:72:28:26:fb:a5:9a:
         15:3e:b0:5e:d6:93:ab:69:88:78:9c:4c:87:bf:11:e2:7d:25:
         cd:3f:76:db:d9:34:fa:e3:85:eb:b3:d0:70:9b:94:8e:27:62:
         d9:30:5b:7b:56:26:1b:f2:a1:63:0c:7f:68:b3:a9:1b:af:e9:
         c7:59:7f:bc:07:13:f8:45:ab:a0:fe:54:e6:61:dc:9a:19:2f:
         07:67:6f:d1:b2:dd:b6:67:75:e6:1a:76:9a:4b:5e:fe:f6:9d:
         6a:1c:d1:d9:4c:65:b6:e4:9f:5f:69:75:ea:68:19:0f:0b:37:
         6b:61:23:67:e6:b9:cd:06:1d:68:e7:09:94:45:9e:b9:1f:d2:
         db:39:aa:b1:dd:dc:4b:50:62:a7:0b:db:79:e3:c1:af:5b:aa:
         eb:64:d8:c2:b2:e8:0b:e0:2b:1a:de:92:fd:36:ed:f0:64:d1:
         c8:76:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----