Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File:                     NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier:          d6PEvXciHgW60bQ9SVxTP5eDOOrUDjoqvx9RzCEfpFM=
Subject key identifier:   82:BB:41:30:B0:AC:1E:9A:D6:FC:4A:23:0E:AF:32:46:FF:0C:09:57
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer:       /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial:       0194BD4EC86096C5E6E062DEF9126AD3C7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number:          1193
Signing time:             Fri 31 Jan 2025 17:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:44 +0000
Files and hashes:         1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
                          2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: eHB3CeOLzNsOygzGTNoUlkQHRp9nm/zvVOXYwI1liLY=)
                          3: NjqVwsZm4jeDC34zSEAaynDCJtE.roa (hash: FACRPaPAhFiAobZ2uWDfWV/Avnzc3vg378X+ZGOfI/s=)
                          4: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:c8:60:96:c5:e6:e0:62:de:f9:12:6a:d3:c7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
        Validity
            Not Before: Jan 31 17:00:44 2025 GMT
            Not After : Feb  1 17:00:44 2025 GMT
        Subject: CN=82bb4130b0ac1e9ad6fc4a230eaf3246ff0c0957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:59:55:50:04:3c:3a:dd:a8:5d:4a:8f:29:
                    76:ec:14:75:58:1f:42:ee:4a:80:39:e0:31:9e:d7:
                    86:fe:de:db:7f:f7:0d:a1:a3:be:94:19:35:31:ab:
                    13:ae:e9:9e:93:9f:73:fb:a6:5d:00:a9:43:c1:94:
                    01:c7:ef:fe:83:ba:02:f4:42:0e:83:1e:ab:86:fe:
                    64:c2:86:ef:12:ec:f7:63:c3:6b:71:ab:4f:67:80:
                    3c:c9:49:39:0c:3a:7f:11:06:6f:d0:85:6f:df:28:
                    2e:4e:af:66:ee:d3:36:ad:d4:e9:63:58:10:f7:5e:
                    fd:4f:90:42:30:ba:7c:3e:97:a8:ce:86:03:a8:38:
                    f3:9b:af:0d:fb:4a:40:72:a4:1b:01:97:ed:a7:30:
                    e0:b8:15:06:f7:b2:74:d0:13:67:69:86:21:d2:a9:
                    29:af:54:cc:e3:33:a6:6f:1f:b4:db:45:9b:32:3d:
                    16:3d:0e:c0:8b:37:f2:15:f0:52:ee:a7:c3:48:ee:
                    7b:6a:11:0b:c3:3b:d5:cc:a3:09:55:f2:41:6e:4a:
                    b0:d3:3b:8b:b6:d0:38:f6:3d:86:b3:67:2c:86:f3:
                    ea:5d:b2:58:72:48:19:2a:64:9f:9c:9f:f2:15:ec:
                    1b:fb:a7:3e:4c:dc:a0:11:54:27:10:63:c7:75:d8:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BB:41:30:B0:AC:1E:9A:D6:FC:4A:23:0E:AF:32:46:FF:0C:09:57
            X509v3 Authority Key Identifier:
                keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:72:6b:dc:ae:87:4a:75:c5:dc:3b:d8:a9:49:67:15:cf:1c:
         37:d4:b2:37:fa:d6:2c:40:bc:17:09:0e:62:66:db:60:7a:dc:
         ef:fb:62:59:d6:9e:2b:0a:ef:ff:83:03:43:fd:73:03:82:69:
         a9:47:60:97:a2:08:7b:8e:57:95:ed:11:f1:68:20:7a:b7:f3:
         19:28:57:e7:b2:40:93:ed:b3:c0:ef:b5:4c:ae:45:be:98:bb:
         5a:a3:12:94:22:7d:f5:65:75:4e:4f:09:8f:8e:ef:99:23:64:
         55:18:50:a6:95:6a:bc:62:aa:5a:7b:80:1f:15:23:6e:0b:ed:
         75:54:32:28:68:6d:83:fb:82:e9:2f:40:c8:ae:1f:4d:d8:31:
         72:26:69:8a:bf:39:75:a9:3e:43:48:82:0d:a0:79:5f:96:e1:
         5f:9a:8e:c7:5c:d4:4b:2c:81:fb:61:17:2b:5d:45:d0:93:48:
         16:b4:96:aa:e3:54:11:08:dc:ee:f5:53:41:12:be:1a:3e:b6:
         0f:cf:6e:fa:da:87:33:00:63:63:eb:0d:68:7a:6e:b2:c0:b3:
         14:8e:c3:4b:28:bc:81:b1:7c:e3:ff:04:df:6e:46:5b:49:1c:
         10:d0:d6:5e:ac:d7:fe:e8:54:17:8d:39:a7:98:5a:81:15:19:
         17:d5:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----