Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
File:                     hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json)
Hash identifier:          0DvXpWbVnvxibTmzEtofkbl9QgJcPrhwSnmci1urfDI=
Subject key identifier:   8B:11:77:43:1B:CD:C1:65:B9:01:AD:D9:2A:3B:D3:BC:38:8B:31:B7
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       0194BC04A114A7D253B11DB176EBFF93DEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
Manifest number:          108A
Signing time:             Fri 31 Jan 2025 11:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:07 +0000
Files and hashes:         1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=)
                          2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=)
                          3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=)
                          4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: pZLI3zUQxW9YI3QxpLaMDtFP/qmnDEA0QY4CZEK+z/E=)
                          5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:a1:14:a7:d2:53:b1:1d:b1:76:eb:ff:93:de:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Jan 31 11:00:07 2025 GMT
            Not After : Feb  1 11:00:07 2025 GMT
        Subject: CN=8b1177431bcdc165b901add92a3bd3bc388b31b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:ee:ff:db:43:e3:7f:75:b3:12:34:e7:75:
                    9b:79:5d:4f:5b:33:17:40:a7:9f:26:dc:2c:e1:29:
                    33:1b:11:38:84:83:1c:67:1a:c1:27:dd:87:6e:96:
                    a8:da:66:6e:19:17:87:85:42:f4:f4:e3:ea:fb:2c:
                    83:62:28:ff:41:ec:31:a1:b5:4b:ea:62:ee:4b:fe:
                    4e:72:1a:c8:fb:dc:6c:86:81:64:3c:de:fe:aa:bf:
                    06:95:a9:5c:37:0f:71:cf:58:05:a9:d4:88:76:d3:
                    fc:a7:8d:3d:9a:ea:11:20:e0:1b:7a:01:91:a4:25:
                    3a:13:04:6d:b0:d5:e3:d1:c2:a7:de:51:1b:02:90:
                    41:0f:d4:60:c9:95:ee:09:20:c0:c2:3a:21:a0:4c:
                    03:6f:63:44:e7:35:1f:44:cc:47:65:b7:01:1e:79:
                    72:92:cb:c3:68:6f:24:29:9e:79:95:2e:0d:19:16:
                    23:66:f9:be:f6:c2:96:09:e9:63:d3:88:d9:39:4f:
                    99:61:8c:53:24:6a:23:3f:8c:c0:a7:9a:90:b3:67:
                    76:7b:be:c7:8f:bc:6e:13:a9:d3:72:39:6e:6a:54:
                    6a:2a:51:10:30:5c:91:45:bf:bf:8d:38:05:d3:8b:
                    8d:14:1b:82:01:34:86:78:7f:0c:a1:f1:01:7f:85:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:11:77:43:1B:CD:C1:65:B9:01:AD:D9:2A:3B:D3:BC:38:8B:31:B7
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:aa:32:78:d9:77:02:84:a3:b1:cd:77:7d:58:28:20:fb:55:
         7d:63:3e:57:a6:6c:42:78:0f:e6:5c:e6:8e:57:5a:26:4c:27:
         1d:71:30:37:eb:5c:64:a1:1a:59:a0:14:fb:61:45:3b:12:0e:
         33:65:3f:30:37:e8:e2:8b:21:43:1f:11:a2:72:2e:94:17:1f:
         ab:29:b9:2e:24:3a:c0:4b:17:64:06:a5:a1:64:2f:93:e4:0b:
         92:61:89:54:32:92:33:41:2d:39:05:5c:2e:b7:38:d6:20:dd:
         f7:2a:ec:03:8f:a6:41:18:63:4e:62:69:0b:b8:f6:70:e8:e7:
         c8:58:86:c3:92:e4:d8:79:cb:7a:da:ac:84:d8:43:78:fc:0b:
         1d:33:b6:2d:7a:2b:d1:24:ae:75:d3:a0:23:b9:91:01:10:f8:
         41:cd:c0:18:39:8f:0f:80:28:89:b2:67:68:31:b5:4b:d3:c5:
         38:35:ec:6a:99:8f:82:41:67:74:72:cb:8c:f4:fc:66:72:2d:
         7d:48:7b:f3:f1:22:c0:b4:90:54:37:1d:ed:d6:d7:e7:98:3f:
         7d:2d:6a:96:19:45:85:ed:d3:67:12:f2:c9:5d:41:35:82:6a:
         b1:b8:b8:05:9c:fb:40:56:f9:51:cf:8f:86:7f:87:e1:48:56:
         71:72:06:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----