Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          AuNTyah8kHF8qIEb/MjTHTdLGRu4dQBAR/q0HSM62A4=
Subject key identifier:   0A:40:33:32:6E:42:62:F0:F7:DC:34:C9:D8:A8:B7:43:61:32:0C:48
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       0194BCA9B6804CB853885D6B66D57F510BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 14:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:26 +0000
Files and hashes:         1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
                          2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
                          3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: U3/6CzyCBXbs3XrY/S3pkReabMe56GcHhz84H5k2JRM=)
                          4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b6:80:4c:b8:53:88:5d:6b:66:d5:7f:51:0b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Jan 31 14:00:26 2025 GMT
            Not After : Feb  1 14:00:26 2025 GMT
        Subject: CN=0a4033326e4262f0f7dc34c9d8a8b74361320c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:cc:a5:45:0b:7d:ba:d2:5a:a0:92:62:55:
                    f6:6c:2d:4d:ee:cd:dd:9b:86:52:37:e7:b0:93:90:
                    8b:55:de:5f:08:3d:47:e7:28:5d:80:04:4b:d1:a4:
                    7a:4d:43:04:89:d4:7d:e3:8d:db:c0:33:1e:6b:ca:
                    90:64:5f:cd:a5:39:44:1a:ce:1f:7e:f8:9e:8a:06:
                    c2:c9:90:90:25:19:3d:01:75:8a:5a:f3:de:f7:5c:
                    5a:b1:8c:76:9a:f5:04:3b:09:e2:71:b9:fc:eb:a5:
                    94:e4:1e:22:4e:0c:76:7e:e6:6f:69:b9:51:27:bd:
                    85:d1:3e:a6:6a:ca:81:b0:f1:5b:8e:e1:a1:9f:9a:
                    a2:4a:c7:21:2b:ff:94:14:19:2f:88:f9:7d:0f:22:
                    cb:f0:73:65:4c:8f:16:f4:ee:d6:67:06:1e:f9:85:
                    c1:60:49:ef:45:99:fd:21:55:1f:78:7c:3e:6b:e0:
                    9e:b4:c3:18:12:c0:0f:41:86:1e:e7:57:0b:07:0d:
                    89:83:13:af:eb:bf:bd:2f:41:51:c4:0e:36:b7:b4:
                    18:00:02:50:b2:12:19:64:7a:a0:37:aa:79:06:84:
                    3b:8a:9f:80:05:bd:69:87:75:a4:40:e1:47:6b:4d:
                    56:df:0c:10:9b:1a:d9:b8:36:7e:c7:2f:2c:c2:84:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:33:32:6E:42:62:F0:F7:DC:34:C9:D8:A8:B7:43:61:32:0C:48
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:39:05:d7:24:27:6c:08:01:ad:7a:2c:7f:76:a0:5c:fc:
         2e:78:c9:fc:30:6e:38:e1:15:9c:f3:64:fd:00:2f:33:9c:53:
         95:44:17:d3:dd:20:49:55:02:c6:b0:1e:ee:bb:a3:ae:3f:d5:
         f7:7d:45:69:cc:54:d4:cc:01:6f:83:6d:86:47:d0:7e:d3:4e:
         19:ce:30:3e:b5:cf:c9:9c:ff:8d:48:0b:f6:1a:e3:fc:ca:98:
         d2:a1:00:09:35:72:12:1f:ca:0e:0e:e6:a0:60:b5:cb:7c:09:
         5f:69:9a:b9:a9:4e:3c:46:3f:59:0b:e0:f6:96:06:4e:3b:c7:
         04:96:70:d0:a4:e9:76:b0:f8:35:57:1f:39:96:1d:22:93:34:
         d1:88:2f:0d:77:d5:b5:a8:f9:48:42:23:4a:c8:d4:38:40:5c:
         45:82:0d:74:43:20:d1:4d:3c:c5:63:5b:d3:be:24:e9:ed:7e:
         cb:f5:6f:6f:f6:18:93:a0:e3:a4:4f:ad:e2:22:03:29:91:d3:
         99:c2:e5:2a:81:90:9b:92:4f:98:79:db:b7:a6:b2:c0:6b:13:
         fa:1c:04:61:be:b2:4f:53:8f:61:3d:09:cb:ff:d5:65:ed:40:
         86:d6:1f:e0:f4:32:aa:97:62:a5:88:1a:73:3d:28:ea:9e:ef:
         da:3f:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----