Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          xFZpHQHBgMHThZuuBLpHRHE0+kB2uUl5ErXSPW6Yldg=
Subject key identifier:   59:71:BB:61:B5:12:3D:D5:7B:80:5B:B1:D2:BC:A9:9C:E1:3C:9B:C3
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       0194BCA96FC15DE6C830DD240A6B9C2B62DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          1387
Signing time:             Fri 31 Jan 2025 14:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:08 +0000
Files and hashes:         1: OXkC0V8UUnQSBguE_EOq6i-7AVw.roa (hash: RYTdm9xb/Agn5v4ku1WXfrlN8Cg1tfFhU39gUA45/7Q=)
                          2: T4IdyPOyJT-vcpUTevdsnNRpr2k.roa (hash: bowIRN0pzHA89i7IutwyoquoF4lwEHsh3PvwCnZ1E/Q=)
                          3: VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa (hash: 3XlfyZJkOhAphIjfT5R1eRXgrv3AJ140+2q4XOEf3nY=)
                          4: _1MbS75neK0OfHH5cQfHLledObA.roa (hash: n/m9uDKG5XGN2Lix9tsCCz30GU/UuRy/chtj19TvQOw=)
                          5: jsguEZSi2g1Z8ENz2ikBj1PJtOs.roa (hash: g0y1NPbMCtF3k5qeBTX0O2c4sjLyBwDs6E94jjgRs1I=)
                          6: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: WfllIOBZ+CEtL5b8TeBMhM0+F9sKvyDzcxoL7zxBsos=)
                          7: xWICqvpq-aio997r-Jl_e84mBzs.roa (hash: VzAED4IrYDOzI6JIjXM468jZwannD/UKmDolCUU8kg4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:6f:c1:5d:e6:c8:30:dd:24:0a:6b:9c:2b:62:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Jan 31 14:00:08 2025 GMT
            Not After : Feb  1 14:00:08 2025 GMT
        Subject: CN=5971bb61b5123dd57b805bb1d2bca99ce13c9bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:60:f0:32:57:4b:04:cb:d7:4e:36:5f:46:
                    30:f9:c6:63:33:80:bc:12:16:58:47:3a:48:bc:86:
                    c7:6e:e1:ef:7f:51:62:73:09:2d:29:52:04:d1:e5:
                    7d:ea:a5:9f:e2:1f:33:c3:0f:f8:17:7a:a9:7c:ab:
                    ff:48:c4:11:c4:14:78:47:f4:0f:7e:7f:b6:fb:4d:
                    0a:e0:ac:35:c2:1f:9a:b0:d3:a1:69:ef:6b:57:37:
                    6c:83:b4:5e:c9:d8:bb:93:99:4f:2b:a7:cb:0a:c3:
                    9c:9a:7f:f5:7e:1e:9d:dd:70:bb:46:a3:5b:c6:97:
                    02:37:57:35:7f:fe:51:c8:d5:59:97:f8:32:ca:b3:
                    ac:4e:2a:f0:77:26:ab:70:67:22:2a:72:ad:d1:3b:
                    87:de:ae:e9:f8:c1:fd:f6:1c:a7:87:a7:c8:29:ad:
                    3b:d4:80:ec:1d:6d:eb:da:cb:45:af:90:4e:45:ef:
                    d6:56:f6:1c:97:3d:00:14:bf:af:57:e4:a5:45:b2:
                    da:b8:7e:9d:19:09:49:c0:6f:f1:77:a1:c9:d1:bc:
                    34:7b:c1:b0:a7:ba:e9:eb:12:f7:ba:fc:73:05:df:
                    b2:87:ad:95:a4:0f:de:32:04:a5:3d:cc:1e:58:90:
                    ad:d2:5a:f8:e5:ec:51:53:66:b2:9e:b6:07:8a:9c:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:BB:61:B5:12:3D:D5:7B:80:5B:B1:D2:BC:A9:9C:E1:3C:9B:C3
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:69:e1:07:49:bd:b6:85:8f:81:2d:59:7f:84:a5:f7:4c:99:
         0c:52:69:db:69:8e:e2:e4:fc:7d:40:33:8f:96:63:cb:6a:5e:
         c2:d3:cf:c6:77:dc:b4:38:4c:00:d9:ac:4c:76:78:8d:55:83:
         7d:62:74:82:0f:7e:d0:b7:85:ff:5c:37:3b:3b:05:4e:3a:82:
         b7:c7:eb:69:7c:f3:65:b0:6f:bc:ad:1c:66:92:b4:b0:cc:89:
         d5:6c:a8:3d:21:b8:b5:f0:37:b7:91:bc:cf:28:69:85:aa:ae:
         08:33:36:d1:80:1a:cd:dc:51:fc:8a:6d:4d:be:e3:ba:fe:5d:
         a5:76:45:ea:a1:b2:4a:d9:07:32:08:03:b5:96:c0:99:52:33:
         28:09:cc:ab:61:6c:8c:72:f0:e1:ea:0a:b0:9c:f6:42:31:d9:
         84:b2:ec:80:18:de:e3:cf:f1:3e:a7:21:1f:c2:32:08:8f:86:
         f4:ea:0b:e6:78:a0:f3:ed:1a:5d:14:a6:b7:91:2f:9e:26:cc:
         07:9f:17:ae:df:27:60:08:1e:61:42:20:bf:8f:da:4b:66:cc:
         97:7e:71:0f:cc:81:f7:ef:2e:d3:1a:15:6e:52:ce:d9:2c:4f:
         b2:db:f4:5a:18:4d:a3:ce:98:37:e5:78:4e:c3:94:ec:71:69:
         83:2c:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----