Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          5xhGTUX9EJ2ak7mDdrrOz8U6aaS2Ce4+LvzoVc6chLw=
Subject key identifier:   1D:F3:B7:4F:80:F5:63:43:2A:6E:F4:BF:6F:25:E3:BF:C4:57:68:AA
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       0194BC732DC8F71A15A1773A150C309A1A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          12B1
Signing time:             Fri 31 Jan 2025 13:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:52 +0000
Files and hashes:         1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
                          2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
                          3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
                          4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
                          5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
                          6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: 3cL/Yq3pmFiLsqyzNETkrhixJovGmnTEs1XCDF3eaRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:2d:c8:f7:1a:15:a1:77:3a:15:0c:30:9a:1a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: Jan 31 13:00:52 2025 GMT
            Not After : Feb  1 13:00:52 2025 GMT
        Subject: CN=1df3b74f80f563432a6ef4bf6f25e3bfc45768aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:d9:94:84:ad:d1:29:47:41:58:08:d9:72:
                    be:08:68:cb:b2:e6:e6:fe:84:e1:3e:25:3c:ed:9d:
                    0f:0b:7e:f0:24:65:53:f4:dd:f9:17:fc:85:94:4b:
                    10:5a:d0:3b:01:f0:e9:af:68:e2:6f:8d:44:45:0a:
                    08:a5:34:7c:4f:21:89:4c:9f:06:c2:91:42:86:9c:
                    42:4a:ce:b0:cf:9c:5d:d6:12:8f:d6:63:fd:6b:14:
                    96:f5:5c:fe:5c:7e:c8:f4:18:5d:2f:01:fc:59:d0:
                    ac:05:77:26:b6:19:51:2d:3a:a9:95:80:94:1f:de:
                    a7:01:bf:d2:14:3d:66:d8:b0:00:96:df:b8:f3:b7:
                    ea:7c:9b:1f:57:57:06:cd:91:be:17:96:e8:51:28:
                    9e:7f:42:33:1b:c7:ba:25:88:72:3b:90:25:86:f8:
                    57:b3:55:cd:a8:b5:68:bb:70:d9:35:ec:35:c7:ba:
                    7e:c0:b5:39:ca:20:86:69:17:64:3e:c7:42:40:7c:
                    4a:8c:0d:62:65:1b:76:08:06:97:c0:f4:5b:2f:98:
                    88:5c:59:f5:21:6c:df:ea:f1:37:d0:6a:99:1d:c6:
                    d0:2b:03:12:1b:cb:7d:14:52:e2:b4:9d:47:ce:5f:
                    d5:7a:d1:b3:76:58:d1:dc:9b:e0:f5:f3:61:25:15:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:B7:4F:80:F5:63:43:2A:6E:F4:BF:6F:25:E3:BF:C4:57:68:AA
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:67:21:e8:5c:f4:cf:2b:2a:98:ae:c9:c5:e9:d6:62:ab:79:
         9e:2a:81:86:7e:16:68:e7:c1:a2:4f:3a:6a:f4:e1:85:42:40:
         aa:18:27:17:bc:e3:79:ae:60:03:6c:ef:29:12:38:7b:ff:61:
         ea:31:3e:69:81:88:fe:c8:d2:41:62:0f:15:e1:ec:8d:6b:cb:
         3b:df:e0:1b:46:85:3f:77:48:a5:f3:41:00:b8:fd:13:4c:77:
         1b:4e:8c:0a:89:0e:72:89:b9:ac:61:1d:01:c4:1c:a7:e3:54:
         c1:11:0d:7c:a7:72:05:5f:ab:74:c7:07:f6:e9:79:5b:40:9b:
         d5:e8:83:57:ea:48:24:26:32:50:77:0d:b7:38:95:ea:03:7d:
         73:7b:be:b7:16:c9:fb:7c:1f:33:e3:c2:0f:10:40:4c:b4:a0:
         38:05:9d:41:ae:3c:3d:94:fe:31:a5:79:d2:db:7f:c7:9e:de:
         bc:1b:8c:eb:4d:42:65:ee:c6:2b:9e:24:72:de:4c:e5:41:89:
         f0:16:e7:82:b3:96:b9:4e:82:56:ed:10:d8:1e:11:7c:46:7f:
         82:ce:a4:f8:4d:ba:99:8d:f7:e3:68:88:36:9f:07:fc:90:4a:
         6f:72:7d:9c:2c:69:da:9b:c1:f5:a5:ec:24:9d:81:ef:57:a1:
         44:c3:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----