Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File:                     _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier:          bhSVl1EKWDAad5k3ldcOOe1cSVEUQSJA/VO71DVX9tE=
Subject key identifier:   85:FD:D0:CE:EB:05:FB:11:8E:9F:8F:1C:0F:EA:1A:92:18:B0:CA:16
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       0194BBCEC49816ADD5B491936CED2467327F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number:          11DA
Signing time:             Fri 31 Jan 2025 10:01:17 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:17 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:17 +0000
Files and hashes:         1: Jaf-Nc0O1GOCePBZlGQ18UYp4xo.roa (hash: 4lquctxZybthnn7HIcusM8tbPg35K5u3vKHWESNtRoo=)
                          2: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: GnIU+L/MB3qwxqflUvNVZSfuwE9rD+DN24COry/W/U8=)
                          3: f7S9xAXMtoHXIWXeQsykpctQxNM.roa (hash: Q4hA/wIKEkwP/Vj65aZ2uO4MqJnj/mjQP7x/ZVfd3Uc=)
                          4: xThsddYizU9zce14GHgo8DJEm0M.roa (hash: xTnNSblE9F5a4BVdVV24fpOa0j64fQcjoHWF3jqeK84=)
                          5: xuTFaPBZlRCNPxPmstQBZKmKPnU.roa (hash: sRHH2//YW4/9Ra0qA3kCbbxZqx+E6+W61I8MRO4kS6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c4:98:16:ad:d5:b4:91:93:6c:ed:24:67:32:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Jan 31 10:01:17 2025 GMT
            Not After : Feb  1 10:01:17 2025 GMT
        Subject: CN=85fdd0ceeb05fb118e9f8f1c0fea1a9218b0ca16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:dd:1c:48:3b:29:5d:e9:18:9c:a9:fb:24:
                    87:e0:b5:ac:c1:d3:ac:e1:d9:54:5a:72:1c:13:79:
                    24:2b:b9:44:c5:85:87:3c:36:c0:79:08:0a:7c:af:
                    f8:76:13:c1:65:9d:28:aa:89:8c:85:31:0c:25:ad:
                    41:18:37:70:16:10:6d:59:d1:48:c8:20:a1:78:13:
                    53:76:2a:fc:2d:7f:3f:16:a3:4a:84:07:27:f5:98:
                    0e:8a:01:b0:f2:b4:8f:ac:ee:8f:0a:21:c8:7a:0b:
                    5e:14:28:ef:b4:62:36:c2:95:5b:b5:24:cb:4f:34:
                    7e:12:5b:70:28:a4:d6:3a:50:56:6d:02:0c:8c:8e:
                    3f:1a:fc:a8:77:2c:8b:73:f3:fe:a3:52:63:7e:dd:
                    d9:71:f7:7d:5d:b2:0c:ad:99:2c:94:ee:18:fe:07:
                    1a:3a:17:26:93:1f:3b:54:52:d2:aa:83:1f:56:88:
                    2c:20:17:0c:ff:a5:93:c3:15:1d:c2:c8:2d:52:68:
                    e4:9e:be:dc:ce:d1:98:d1:ca:ba:85:e0:45:f4:40:
                    53:6a:74:27:1e:2f:ea:f5:d1:19:df:c2:02:e2:15:
                    bc:11:71:3b:ff:b5:32:fc:8b:1f:91:42:47:12:cd:
                    80:41:19:2d:23:43:6d:47:f1:83:27:c9:ab:59:7c:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:D0:CE:EB:05:FB:11:8E:9F:8F:1C:0F:EA:1A:92:18:B0:CA:16
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:9b:2a:77:a5:d0:07:3b:7e:e3:42:e5:be:ae:44:ba:5f:
         aa:a9:2b:71:b4:43:99:d1:19:9d:25:83:aa:1e:47:c2:41:0b:
         09:ec:04:5c:e6:a3:ec:7a:c7:6f:15:4e:f3:1f:00:eb:8a:fb:
         9a:f0:79:91:0f:bd:0d:d6:89:67:11:00:8a:3c:69:ec:e5:2c:
         ad:7d:dc:09:69:dc:95:64:38:9d:e6:12:aa:76:c9:ef:ea:d8:
         0d:54:8b:8a:9b:b1:8f:31:6a:90:3f:7c:11:28:26:51:da:1c:
         54:b7:e8:7e:b8:74:1d:16:f2:ba:c3:3e:7c:22:2e:34:e1:91:
         5b:95:56:f2:b7:fb:9b:c1:a4:d4:64:8a:d4:b2:a5:03:05:73:
         ce:6e:7d:4c:b7:d6:ef:ac:f4:dc:93:f0:1d:9f:ba:0b:f9:63:
         9c:d0:ed:37:1b:63:dc:0e:90:74:07:77:0f:2b:f7:5d:f8:38:
         8e:53:00:03:46:4a:a8:5d:45:88:ee:8b:65:5a:70:78:2d:26:
         10:a9:f6:05:69:a8:99:b4:9a:0f:7d:2d:1d:8f:72:06:af:2c:
         89:d4:36:c9:36:6e:3b:c0:a0:e5:07:f5:97:59:5a:08:ab:c4:
         13:9a:21:d2:7b:5a:98:8e:e3:ca:3c:2e:9d:79:62:05:ac:cb:
         a7:7d:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----