Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File:                     2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier:          2LMBxwS4RgM2AVw7E8G0sb2LQZSmfD0XQKekJZCnnUk=
Subject key identifier:   E4:68:4D:69:5E:9D:D2:38:8C:32:57:20:BA:EE:7D:A5:26:7D:AA:CF
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer:       /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial:       0194BCE0B95ED652F76682CFF0E98DE101AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number:          143B
Signing time:             Fri 31 Jan 2025 15:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:31 +0000
Files and hashes:         1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
                          2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: gFfHAWRumgapyGdiWEcQ4NoJPhnEUzmyqQ/b9Vm9HrA=)
                          3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
                          4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
                          5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
                          6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
                          7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
                          8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b9:5e:d6:52:f7:66:82:cf:f0:e9:8d:e1:01:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
        Validity
            Not Before: Jan 31 15:00:31 2025 GMT
            Not After : Feb  1 15:00:31 2025 GMT
        Subject: CN=e4684d695e9dd2388c325720baee7da5267daacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:c4:4c:66:b9:b7:c2:64:85:dd:06:58:15:
                    98:5c:95:24:b6:34:7b:07:39:80:b1:1e:57:4b:47:
                    08:1c:3e:de:07:91:b9:80:ae:d7:a7:0f:89:81:3a:
                    73:ff:6f:ae:4b:34:e6:a4:51:38:1b:18:1a:91:e9:
                    5b:2b:b3:2c:a4:7e:a6:45:7e:7e:e5:42:c3:03:b8:
                    83:a5:e3:2d:49:50:a7:0d:c5:a8:5e:48:b4:34:99:
                    bf:3c:e6:63:9f:61:1f:10:85:ba:c6:c9:dd:e7:d7:
                    42:d3:0f:40:b7:ba:9d:7c:0b:9e:43:86:28:c6:4f:
                    97:4d:4d:53:08:07:88:3c:52:bf:68:e2:69:5e:dc:
                    bb:38:fa:7e:f4:e1:7a:18:73:03:9a:b2:8f:41:28:
                    1d:f2:a3:5d:8e:76:58:8b:e5:5d:ba:e9:df:9a:57:
                    59:f1:5c:28:10:f3:d4:51:b1:b4:61:6a:db:c5:5d:
                    11:40:99:6f:3d:6e:54:79:aa:5d:9d:16:6d:dc:37:
                    2b:0e:f3:b7:65:99:1a:b9:05:d8:4e:17:4e:6c:78:
                    df:88:67:67:c2:50:2c:68:f7:bb:dd:e3:11:48:fa:
                    e0:33:eb:60:42:84:39:eb:25:da:59:88:f3:79:c9:
                    53:de:ff:03:1c:10:ea:e2:8c:ae:b6:95:92:7f:0c:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:68:4D:69:5E:9D:D2:38:8C:32:57:20:BA:EE:7D:A5:26:7D:AA:CF
            X509v3 Authority Key Identifier:
                keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:fd:50:70:c6:bc:d1:63:8a:4c:8c:83:25:39:0b:2c:f8:
         75:72:1f:83:69:1e:3c:0d:10:c3:17:01:e2:1f:d0:44:a0:93:
         bf:6e:d8:84:b3:5a:ac:94:eb:de:17:5a:1c:ec:c9:e0:6c:80:
         0c:7e:ed:3b:b0:28:00:39:75:5b:5d:74:c2:2a:a6:54:0b:f1:
         b9:76:dd:3f:5d:33:f5:af:96:71:7f:6a:4a:ce:26:3e:17:c9:
         f5:9f:ea:0b:25:cc:36:55:ca:3b:ab:21:a7:79:6d:94:7f:ef:
         26:2c:5c:17:35:ba:ca:48:9e:60:c5:58:f0:16:85:a0:b3:b8:
         76:ec:bb:b9:21:75:7e:de:2a:4f:2e:62:cc:ad:25:76:48:f9:
         45:83:24:a2:ec:0b:74:35:12:79:08:36:0e:1f:37:30:43:07:
         e3:33:e5:61:0c:98:db:5e:55:aa:63:c2:67:31:5c:fa:29:d3:
         e0:f8:a7:e0:53:98:27:e7:bb:af:1f:92:b3:71:36:38:ae:5b:
         1b:2d:89:f7:47:9a:8e:93:22:22:8d:4e:ca:29:f4:27:de:d7:
         e2:5c:2f:70:01:9f:7c:38:7a:16:d6:23:36:f6:93:b2:0d:b1:
         d3:09:75:33:6c:b1:1a:b4:93:7d:1c:af:69:a8:bc:92:18:29:
         41:75:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----