Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          A37VUrecQFTKsRID5lwrfoSRq7jiSiTJLiR66Stavoc=
Subject key identifier:   4F:C4:BD:BD:E1:97:76:1C:EA:82:C5:2A:59:D7:42:07:C2:76:78:10
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       0194BC3C9D633FB1677BA4544AC1EFC453C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:16 +0000
Files and hashes:         1: 4vY-bTyKzTJbIG8K1hcmZ2OzV3Y.roa (hash: 94nlldFhiqgmPqtety18s97ySLGHCvNHQ/0uGpBprik=)
                          2: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: Fcenfn/9qaWpQnbnvCid2ogZM1wt5EgNAbbzlZpFaGE=)
                          3: JQ0Ci3sR6qQwTIGaQ3BnkTmwr8g.roa (hash: NJ/+TpDDRxQ81Zlt9bMC5ccWk2cE6WfgOi0+mg4nlBs=)
                          4: Vtkp4nVzagTb1teWd63BFZh8RwU.roa (hash: TYSKwA87i0+WxUKYjqVqa3ovHNk1VR5486G73L2E0tU=)
                          5: wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa (hash: vx36cOt+aE+Tw3PFdY9b+UteGXfJmHCFf0+yXWJQTLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:9d:63:3f:b1:67:7b:a4:54:4a:c1:ef:c4:53:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Jan 31 12:01:16 2025 GMT
            Not After : Feb  1 12:01:16 2025 GMT
        Subject: CN=4fc4bdbde197761cea82c52a59d74207c2767810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8b:df:c0:07:79:0b:ff:1b:4b:d2:55:ef:90:
                    fa:a6:1b:5e:cb:c5:28:1d:21:97:45:0d:ee:09:36:
                    c2:1a:e9:ce:8d:3f:8b:2c:5b:e0:49:e8:02:6f:e4:
                    c0:c3:b2:dc:f9:ba:9e:04:64:5f:a7:a4:49:fc:99:
                    ac:87:3c:4e:34:1e:38:3b:3c:af:d7:44:a1:49:86:
                    a7:b6:16:37:a9:81:1d:0e:b6:77:4f:39:20:d5:33:
                    5a:91:41:15:a9:d3:8a:23:a0:03:23:dc:dc:b7:e3:
                    b0:3f:d0:27:37:68:23:1f:a5:a7:56:16:47:73:9f:
                    b0:74:75:28:4b:01:ab:87:f9:ba:21:cc:2b:5e:ec:
                    c6:63:a2:0f:5e:29:a3:06:63:f0:76:6c:34:00:f0:
                    2c:9e:93:47:b6:c0:9b:a7:13:8d:03:b8:d5:39:4b:
                    0e:ad:b2:4f:74:da:24:30:e8:72:ef:85:08:65:b2:
                    02:fd:5a:8a:bb:9d:28:c7:8d:75:75:9a:5b:c2:17:
                    bd:95:2c:ef:c6:5b:ac:8a:75:70:35:11:0f:ba:a7:
                    97:ff:f2:32:fb:a3:b9:34:be:df:83:76:76:bc:32:
                    9e:85:4f:5c:d1:cd:47:88:0a:4d:1f:8d:35:52:9c:
                    cd:dd:20:c5:25:70:a5:f3:d9:2f:36:1a:34:00:72:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:BD:BD:E1:97:76:1C:EA:82:C5:2A:59:D7:42:07:C2:76:78:10
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:13:97:2b:28:15:70:48:fb:7d:aa:bb:b8:64:d9:73:0d:2f:
         f8:fa:a3:c1:11:9d:7f:c1:10:09:fc:04:c3:ad:25:1d:b0:7d:
         67:6a:b3:18:9c:53:69:ec:10:1a:57:5f:1e:84:3c:a9:e3:61:
         e0:e8:7a:ea:70:7e:8e:d6:ab:af:7b:e9:27:84:2c:bd:3a:f7:
         8c:8d:6c:b4:fc:a7:db:cd:53:c7:0d:37:cf:0c:de:4d:ee:76:
         b8:8d:30:9b:12:63:0d:ed:19:28:1a:3b:82:08:4e:41:0f:0c:
         6c:c1:a6:8e:91:c9:ae:2b:05:6d:5b:17:5a:2c:f9:9a:d8:12:
         4f:a6:9b:bc:84:39:69:0b:a2:f1:3f:55:72:ee:97:6e:15:b6:
         c1:34:3f:8c:43:7c:2f:4d:58:e3:46:3d:45:49:dd:5a:ad:1e:
         e8:ae:03:44:7c:b4:a3:bb:af:d1:e7:47:71:e5:50:e2:d6:1a:
         a4:8d:5a:43:b0:2a:c6:63:f7:3f:90:86:2c:36:6f:4b:02:89:
         27:75:a5:f5:c9:dd:b7:b0:be:b7:37:88:01:8c:e5:6a:77:91:
         74:d7:cb:ed:e4:41:c5:a0:ca:1e:0c:bc:6d:02:45:5f:10:51:
         8d:2b:c9:19:10:e1:57:82:71:12:2e:12:88:74:3f:18:c9:3d:
         9f:23:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----