Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File:                     tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier:          d+91Fgzuu/YPJTXVj3lQdhvFvVzb0v8HJ4JviCZVRlg=
Subject key identifier:   96:99:4F:79:7D:06:A3:F1:44:55:23:8E:CE:F5:FB:CB:B9:1F:DA:B1
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer:       /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial:       0194BD8545AAFE52385883193ABD9F92DD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number:          12DF
Signing time:             Fri 31 Jan 2025 18:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:15 +0000
Files and hashes:         1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=)
                          2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=)
                          3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=)
                          4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=)
                          5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: 2bMy0PSVMY3T7FJvO4Rmw/rWR0ZfnKGEq6kNfDLih2I=)
                          6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:45:aa:fe:52:38:58:83:19:3a:bd:9f:92:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
        Validity
            Not Before: Jan 31 18:00:15 2025 GMT
            Not After : Feb  1 18:00:15 2025 GMT
        Subject: CN=96994f797d06a3f14455238ecef5fbcbb91fdab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:66:78:e3:da:82:cc:4f:3d:91:b4:24:0e:
                    92:1c:aa:38:41:32:19:1b:e8:67:f3:09:d7:cd:8d:
                    16:c6:5d:4c:5a:ab:f9:8c:9f:c4:64:7f:94:5b:3b:
                    6a:97:0c:58:f0:d3:f9:a2:ac:86:27:0d:0f:2c:58:
                    48:e7:6b:b1:ea:44:8f:00:76:ee:9d:3f:6f:8f:b5:
                    f2:60:3e:be:0c:f7:a5:09:c9:66:7d:55:da:fc:79:
                    23:17:c3:93:38:fa:a5:26:cb:29:a3:74:a2:05:40:
                    6b:8e:cd:18:fd:09:e1:93:08:a2:0c:59:65:2b:51:
                    f6:63:5b:b2:6c:eb:98:1c:57:ac:e4:81:d0:27:cf:
                    f4:b6:b7:94:fa:10:32:8b:62:c1:a1:c3:09:b3:8d:
                    a7:b5:58:59:24:eb:f9:b5:38:85:e9:c8:0f:25:c7:
                    9f:29:48:3c:cb:35:87:f1:98:c0:d6:0e:1b:62:29:
                    e6:a2:2b:ee:e7:2b:e9:7a:61:5f:56:cc:a7:0c:72:
                    18:98:22:56:23:f2:7e:08:87:e3:be:30:47:a2:f0:
                    4e:bd:80:0b:99:b6:de:90:20:56:25:0a:36:3a:ff:
                    49:c4:33:0c:26:ef:79:6d:6e:6f:ba:e1:e5:fd:ad:
                    ed:d3:59:0b:7a:0b:f4:2c:8e:00:d9:ed:af:a0:1f:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:99:4F:79:7D:06:A3:F1:44:55:23:8E:CE:F5:FB:CB:B9:1F:DA:B1
            X509v3 Authority Key Identifier:
                keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:98:00:95:5b:a7:a2:bf:30:ce:5b:84:54:55:a6:c5:61:
         7b:ac:57:48:b5:ab:ca:82:10:a2:fb:02:7d:f5:9c:19:1b:25:
         79:79:67:37:fa:29:1e:0f:68:d6:55:53:e0:a0:74:36:45:9a:
         3f:d8:93:4e:65:c5:73:ee:28:a9:14:b9:3c:c9:1d:81:94:55:
         d7:eb:f4:d2:3c:cc:8a:29:61:bb:27:28:99:d0:92:a1:b1:02:
         e2:a6:df:29:96:c5:51:dd:8d:8b:24:d9:c0:b7:19:d8:2c:b0:
         41:09:aa:c8:fa:b7:5a:d3:ce:4e:0e:20:98:f1:28:56:a2:7b:
         45:d1:8e:57:96:af:43:18:11:c3:46:71:73:3f:11:62:5f:40:
         21:98:7b:e2:f2:1f:1c:0e:1b:26:45:30:66:c7:92:aa:24:9b:
         14:3c:a4:60:a8:6d:0b:c2:66:72:44:d0:0c:b6:3a:43:01:75:
         9b:ab:45:4c:64:d1:76:e1:00:d0:e9:0c:bc:c0:22:2d:b0:48:
         d6:37:3d:32:2c:fc:fb:19:8e:21:00:5a:dc:62:53:c9:ac:29:
         59:44:62:52:9f:31:bf:a2:b3:2a:d9:3e:f6:4c:a1:78:ab:ee:
         3b:ac:9a:e7:2e:30:5e:f7:b3:ae:6b:38:1c:02:33:fd:a7:77:
         f4:e4:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----