Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File:                     Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier:          sihxG2f73CTFf25o9UOZSEfBuuuFGj730E5KAmwdUAo=
Subject key identifier:   20:6C:51:63:C8:95:82:CA:90:49:8F:8F:76:15:07:C7:1A:DF:9E:3D
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       0194BD17A4D34460A3A53DCA95B2C45B7A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
                          2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: uNTp/q8gP82gtU0zY6T5trAM+682JX8kaUZiVu86q8g=)
                          3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
                          4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:d3:44:60:a3:a5:3d:ca:95:b2:c4:5b:7a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=206c5163c89582ca90498f8f761507c71adf9e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:51:44:92:da:1c:c0:a3:6c:10:ca:03:59:
                    29:07:ca:6f:88:e7:43:6e:85:d8:d9:60:ac:06:15:
                    e6:47:ba:5a:84:aa:76:78:33:f4:c9:5f:f7:5b:1d:
                    96:d3:f9:01:33:c6:aa:38:2a:9a:a3:9b:6d:2f:9d:
                    23:48:3c:ce:8d:b1:28:ca:4f:f7:ec:aa:b6:5a:08:
                    71:70:4c:d1:67:2f:a9:78:f0:bc:2e:2d:99:8e:08:
                    0e:6e:e7:60:5f:60:1e:7a:b4:ec:5c:71:e6:03:94:
                    16:6a:18:be:75:ac:91:8a:f0:e3:e3:7c:ba:ea:89:
                    18:fc:a5:c5:ab:89:c5:b1:16:7b:39:bb:ce:60:1a:
                    fc:07:60:91:9a:a4:04:66:49:93:a3:c0:fa:0a:47:
                    92:a3:66:10:f2:88:f4:5b:f6:87:5a:a2:76:b8:a3:
                    e8:a2:58:03:e3:25:3b:9a:95:75:94:40:46:aa:b3:
                    00:1d:b5:0c:56:32:d1:f7:a1:78:e7:0c:bb:df:2e:
                    a8:a5:19:4f:a0:3e:c2:9f:f4:4e:e3:af:65:20:19:
                    9d:6e:2a:79:ed:78:ea:9e:39:9f:70:99:77:01:d5:
                    0b:5e:1e:b2:77:b6:a7:ac:44:cf:2e:5e:da:19:2d:
                    7f:b5:0b:d6:6f:9f:52:2e:f5:ac:bb:ea:05:8c:7d:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:51:63:C8:95:82:CA:90:49:8F:8F:76:15:07:C7:1A:DF:9E:3D
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:16:48:d4:80:9e:f8:0c:81:d5:9b:de:df:9a:40:11:a9:a8:
         1e:06:f6:cc:dd:c6:94:74:dd:be:9c:d3:37:55:ea:47:b7:f5:
         f0:c0:9a:c4:f5:d3:8f:6d:44:d0:21:48:fb:b8:c4:23:4b:8c:
         72:af:90:20:66:7c:29:f3:46:67:f8:e1:43:b7:30:4e:81:4c:
         ce:f6:0a:6d:73:26:8d:60:9d:28:57:e9:68:9e:4a:1c:db:90:
         14:d9:a4:37:2a:05:ad:b4:93:bd:61:05:91:c6:80:61:44:dc:
         5c:52:4e:72:00:f0:61:d5:f5:d7:ef:03:ff:3c:b3:95:b2:88:
         6d:5d:18:89:96:4e:85:81:5b:75:5d:64:ac:0c:5d:df:9f:76:
         cd:c6:34:40:b1:85:93:0c:c6:d8:cf:ee:8a:d2:27:77:26:cd:
         3c:be:7e:61:a7:6e:33:02:af:ed:e8:9f:59:1c:cd:38:e0:79:
         76:dd:e6:b3:5f:cc:33:08:8f:1f:66:53:ea:76:b2:4d:f3:a1:
         6f:df:2e:ea:4e:d1:c9:54:75:1f:ab:a1:09:e0:7d:40:56:5b:
         be:24:35:d3:bd:5d:0d:ba:4b:11:ed:87:74:07:98:ef:b6:24:
         4a:94:b9:dd:72:d8:46:7e:20:43:57:57:b5:fe:6e:cc:5b:7f:
         b8:e6:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----