Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          6Gtk2dIxjr7ipaXJfVteSHPowllHnDE6wNaAXZuQy6U=
Subject key identifier:   9E:13:77:8F:F6:8B:DD:0F:4D:BF:7D:99:85:D9:8B:E6:B7:07:60:8C
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       0194BC3C05424CB1C5464B22D3EC7093BD3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=)
                          2: 9BvyxK4w-2rI5OIikTHWAG98MzY.roa (hash: l4Kx8IX2/5tA+zptkfMhudCGM8EbDIdsPj36q9UGwwI=)
                          3: Np5gpybgVTbW_JvWDHqz1f_WS8U.roa (hash: K2zfC5C37/DaTKYS6ZCx6tBqzud1Hd12o4z4cr9RIyA=)
                          4: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=)
                          5: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: /LZtgPTKuWnIp/lTHC2BKFjdFM9ZYRCG7YTgIODRUvM=)
                          6: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:05:42:4c:b1:c5:46:4b:22:d3:ec:70:93:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=9e13778ff68bdd0f4dbf7d9985d98be6b707608c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:42:a6:c6:1a:38:54:72:c7:f1:d5:81:7a:
                    fe:a0:f7:cd:1c:04:42:b1:42:19:69:0a:f9:29:1c:
                    d8:03:07:35:0d:38:87:1d:71:cb:7d:a0:5b:31:b0:
                    6d:28:46:d6:1f:f9:a5:f7:14:a8:34:ce:2a:a1:2c:
                    72:56:fb:1f:ca:a4:b7:89:73:f9:15:4a:4f:84:48:
                    dd:8b:48:cd:d6:19:02:c4:e7:8c:0f:cb:17:b7:3f:
                    7f:15:26:76:d1:ac:ea:9b:76:d9:78:b8:71:e0:65:
                    f0:be:95:e9:0b:36:6a:f3:32:e4:f3:e9:a6:4e:a2:
                    8f:2b:13:37:e5:97:72:37:1c:3f:a9:df:cb:c2:78:
                    5c:c8:9a:aa:94:0a:af:47:76:08:f2:2d:cf:ee:13:
                    17:79:0d:50:f6:50:3c:92:76:e1:2f:15:5c:f3:79:
                    98:6e:72:6d:f1:32:e0:40:51:48:df:40:da:a7:44:
                    bb:fa:7d:5c:a7:94:0b:48:16:af:19:10:68:7d:45:
                    32:ac:87:86:9b:42:4a:25:c1:12:59:59:e0:f2:31:
                    d8:56:39:7a:31:4e:58:a0:6a:7d:93:7a:12:00:8f:
                    22:b7:eb:69:c7:58:71:e7:f9:ca:63:eb:8c:f1:3a:
                    c2:7a:5a:fa:e2:9f:1f:c4:be:f4:40:f4:d1:06:b6:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:77:8F:F6:8B:DD:0F:4D:BF:7D:99:85:D9:8B:E6:B7:07:60:8C
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:fc:0b:b5:f8:70:21:01:10:70:81:93:64:68:cc:51:d4:
         9c:97:fb:4b:39:50:ec:22:73:47:5e:64:96:42:b2:57:d1:5f:
         29:0b:46:1d:ec:02:13:6d:bc:b7:27:6b:7b:58:49:77:a8:8a:
         db:ce:0a:e4:c4:14:a4:5c:0b:f8:9d:f3:ce:cc:a4:c9:06:29:
         ed:19:d0:18:ce:fa:d5:d1:bf:97:c0:d0:c0:5b:ff:c8:fe:4d:
         ff:c0:cb:51:15:93:6a:e2:5d:08:79:04:8a:d6:b7:5b:f9:74:
         49:a7:0a:ab:7b:3e:91:e5:e0:e3:21:77:fb:c0:87:28:64:76:
         80:7e:77:e0:7e:8b:99:d2:b3:05:36:95:a2:bc:91:52:32:b4:
         65:d0:68:93:b3:d6:ab:a1:cc:22:ce:e4:5f:9b:62:d2:d4:1c:
         46:1d:65:35:95:ba:a6:e7:79:94:c8:8f:a8:43:b5:d2:18:fd:
         3c:8c:d4:fe:99:8f:50:6e:5c:00:a3:03:07:73:ec:63:9d:0e:
         e8:f0:de:41:97:12:89:88:fa:48:12:53:72:2c:37:dd:dd:c1:
         6b:77:e0:64:50:be:6d:75:21:28:df:85:59:2f:4b:60:56:d6:
         12:75:ee:16:20:c1:02:0b:9a:1c:6e:4a:a1:f7:a4:f2:a4:22:
         11:27:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----