Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          xe/x+fnY6VZa5HSalNZdB/SPbY7i0HcL7W8E9q3t3YQ=
Subject key identifier:   42:08:21:F7:ED:07:AF:89:4B:E8:0F:FD:93:20:E6:DC:5D:27:E7:FC
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       0194BC04FD1D57A5F83E22DE0AAD2535C8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 11:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:31 +0000
Files and hashes:         1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: bnvcvTeGCgqwP+xPF3AF5ESyvUWygJdAoWHRR3U4X4o=)
                          2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
                          3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
                          4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
                          5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:fd:1d:57:a5:f8:3e:22:de:0a:ad:25:35:c8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Jan 31 11:00:31 2025 GMT
            Not After : Feb  1 11:00:31 2025 GMT
        Subject: CN=420821f7ed07af894be80ffd9320e6dc5d27e7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:dc:ba:57:58:3a:ee:4e:0b:67:88:ef:98:
                    8e:ca:65:4d:bd:77:ca:22:59:a4:b6:9f:94:68:aa:
                    81:78:3d:d0:ce:d2:a5:22:cb:e2:89:f6:43:51:09:
                    eb:2f:50:49:96:f3:90:c1:50:26:9a:c9:a6:56:04:
                    5d:00:01:ee:aa:65:f2:b7:53:5b:68:fb:fc:1e:15:
                    9b:7c:a1:31:6d:0a:e7:6d:71:6e:d2:b8:c6:86:fd:
                    8a:dd:a3:17:a7:7f:ed:be:6f:df:73:7f:f1:8a:fd:
                    43:cf:74:a8:df:36:2d:95:7e:05:95:68:25:9f:75:
                    3a:a8:bc:70:da:d4:a9:8b:74:0d:49:c7:1d:e8:10:
                    49:72:94:63:d7:93:1c:f7:8d:69:99:47:31:e8:35:
                    df:92:1d:15:03:a4:e4:42:b1:d8:a0:55:ec:40:ca:
                    1e:ac:ba:d8:3c:49:fa:dd:a3:ca:3d:72:7e:80:05:
                    25:e0:d1:0a:32:0f:8b:35:5f:f4:37:6a:50:4b:59:
                    52:86:4a:9a:66:12:03:44:f6:2e:7b:5e:8c:14:70:
                    91:e8:66:1a:f3:b1:bb:7f:cb:4e:62:ae:08:32:e0:
                    7f:0d:22:ee:8f:26:82:90:67:14:46:06:36:2d:ce:
                    9b:49:02:e3:68:7a:19:bc:45:1a:9a:35:76:fe:cd:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:08:21:F7:ED:07:AF:89:4B:E8:0F:FD:93:20:E6:DC:5D:27:E7:FC
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:56:29:8c:eb:a8:66:07:1d:ee:c7:de:1c:58:3e:d7:63:
         4b:f6:50:f2:70:85:fc:06:fe:56:b8:48:d2:6a:62:6c:c3:ab:
         1f:7c:44:92:50:f7:47:b0:67:7e:fd:d6:e7:44:d9:bf:0f:b6:
         63:a5:1c:20:d4:b9:ed:70:bd:24:1e:72:d8:f7:70:2f:27:e6:
         f4:99:38:8b:05:74:fb:e2:a5:8e:7d:af:37:46:ca:7a:8e:8b:
         87:ae:5d:8f:7c:cd:bb:68:48:32:45:bf:a9:ab:93:df:b6:47:
         5d:d3:63:5a:88:f0:25:68:21:c5:7b:b0:0f:9a:33:22:b4:b8:
         fe:4c:54:71:b4:94:2d:6d:db:03:53:af:e8:e4:d1:e0:72:43:
         f4:6e:f2:f3:db:4b:cf:93:5b:54:6a:71:01:e5:bb:1b:66:84:
         f3:f6:10:2e:91:89:5e:9c:f2:75:d3:2f:f0:90:32:3a:09:85:
         ed:5d:1c:73:a4:46:5b:fa:e1:d6:cc:9e:a0:b8:a4:ca:91:c6:
         1f:55:89:2b:12:ca:22:ad:80:8a:c0:53:14:1f:5e:85:3d:d7:
         b2:c7:b5:9b:4d:77:c2:16:75:95:64:e6:5a:cb:d3:d7:67:d2:
         cb:7a:99:9c:55:6e:73:fe:4f:7a:06:cc:db:c4:55:02:eb:bb:
         62:d4:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----