Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File:                     kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier:          3Pcgtu/opG9gb5QyyV/h6Xct3qP5RE3xyycQkDRSrwc=
Subject key identifier:   BA:D0:4B:99:06:99:51:F1:8B:64:F8:C1:52:ED:C0:D6:1C:C1:53:47
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       0194BCAA4055A29047C17965FD7D357458E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:01 +0000
Files and hashes:         1: 1OpL7R1BVF30eYquogWaFw9Zjpg.roa (hash: 5HBfkLhlNjgyPTg16npPx/gVvuAnNfr9yckXUxVoyH8=)
                          2: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
                          3: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
                          4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: AFXH6982RYNKhXHtKbdtPlRTKY6l0GyiQSrF0jg2SlE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:40:55:a2:90:47:c1:79:65:fd:7d:35:74:58:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: Jan 31 14:01:01 2025 GMT
            Not After : Feb  1 14:01:01 2025 GMT
        Subject: CN=bad04b99069951f18b64f8c152edc0d61cc15347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:55:31:4a:3a:67:41:d1:e3:ae:6c:37:7b:
                    43:42:43:a3:24:ca:68:de:6a:ea:c2:20:a3:ca:09:
                    a9:b3:e7:51:17:e7:37:3e:8c:2e:53:c6:27:b5:0c:
                    cc:68:ed:b3:c9:b5:f5:a0:b8:63:5a:9a:0b:56:13:
                    74:57:8b:40:7b:26:9b:77:e0:96:54:51:3f:9b:c9:
                    d0:cb:07:6d:79:9a:bd:fe:b6:b9:a7:0b:29:f0:d9:
                    8d:58:09:6b:d9:3e:39:42:e7:4a:9c:ca:51:9e:50:
                    dc:ed:d1:6d:f9:99:75:87:4f:53:55:38:c8:ed:f4:
                    2c:bb:39:89:dc:a1:a2:e0:cd:91:91:e9:1f:28:fd:
                    8d:6d:56:c8:35:15:97:d6:80:17:10:d4:88:c3:24:
                    82:4a:af:3d:c2:fd:95:83:b3:d9:fc:6d:46:9b:4e:
                    d2:99:8b:71:c2:38:dd:1c:5d:e7:9f:27:d0:a2:b3:
                    33:ab:59:1b:45:ca:ef:33:50:61:7c:5a:2f:bc:81:
                    13:a7:98:b5:49:b6:35:fa:33:97:7c:09:a1:15:49:
                    d3:ad:db:8f:4e:d6:36:47:b8:8d:af:bd:34:94:7b:
                    b8:eb:f3:c5:96:20:51:67:b0:ed:6b:6a:e5:cc:71:
                    90:0c:c1:20:0d:1f:6a:71:54:68:55:2e:ed:4b:b5:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D0:4B:99:06:99:51:F1:8B:64:F8:C1:52:ED:C0:D6:1C:C1:53:47
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:7c:5b:30:58:0b:97:09:fc:1e:a3:8b:50:3b:ad:37:d4:
         4b:e3:22:6e:8a:bb:c8:78:88:20:4d:08:a3:50:a7:ef:3e:84:
         64:9f:a6:26:78:65:60:68:d4:6f:b4:bf:4d:70:0e:7f:84:b8:
         91:0a:65:f0:a6:cc:76:4c:a2:85:6c:3c:73:8b:c0:eb:71:f0:
         47:7c:35:84:f8:9d:c2:77:89:47:93:73:8e:15:54:36:72:6e:
         b6:3e:4b:af:c0:95:78:b0:40:1b:72:98:b6:ad:ee:59:cd:f0:
         53:fc:55:9e:91:17:1d:2b:b3:21:b9:24:9f:b1:a5:5b:e1:82:
         cf:0c:0d:74:f0:bf:80:3a:ec:c0:96:8d:ad:49:83:61:86:5d:
         3a:5e:6e:a9:31:4c:40:25:87:8b:e3:69:e4:bb:dd:72:a7:38:
         d6:37:41:10:dc:cc:05:b7:25:38:71:b3:c3:83:8b:41:fd:10:
         30:5e:cc:ab:70:c7:d9:11:74:e6:f8:21:e8:de:64:29:0e:62:
         94:3c:97:f1:fc:f7:42:a6:06:82:b2:28:55:ed:c7:c3:71:91:
         cf:91:5e:61:2d:f0:9f:5e:b6:84:75:b1:22:e7:74:2d:23:25:
         7c:bd:de:4f:43:01:96:8f:6a:d4:b4:d8:f8:ee:52:69:03:6f:
         52:fc:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----