Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          x+Q2DSLw0M4S1HKScCZBIqAPtgoguXogxbdkWXutoAc=
Subject key identifier:   BE:5B:CA:BC:48:9E:96:6C:32:AD:1B:DE:60:1E:20:49:3B:24:43:76
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       0194BCAA3BD0522CDCCEFEB29245EE02944D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 14:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:00 +0000
Files and hashes:         1: DurIZqoPKpw9LYGIPBrHPFq3LHw.roa (hash: zhg8WLRUrYe0q7NH9Wz8ueiA39mg7KprcnCZzHNNbsw=)
                          2: PnB8IMDITEDpen2OPTOxZTtueZw.roa (hash: qeR+1XSa8d/i/SIsn+15UPdwoIkYRW0OqLmRrfqzRas=)
                          3: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: V1IT7k+gFumB+v1umiv1skR+ld1OTHPU8/0U/K9kKG8=)
                          4: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (hash: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=)
                          5: vTNM4m6CbUwbrvUjHBwBVw0_vYs.roa (hash: 7BbpPre0ZtLQJ0mFYOMZGVaoQeJskvISu8hLB2sHUnE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3b:d0:52:2c:dc:ce:fe:b2:92:45:ee:02:94:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Jan 31 14:01:00 2025 GMT
            Not After : Feb  1 14:01:00 2025 GMT
        Subject: CN=be5bcabc489e966c32ad1bde601e20493b244376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:9c:f7:cb:7a:d6:99:5a:47:64:14:2a:a4:
                    9e:05:8a:30:37:f2:60:a4:9e:b5:d0:14:65:78:17:
                    1d:31:32:57:bc:6a:54:63:4d:89:6c:65:b0:24:42:
                    97:f7:3d:50:1c:5d:54:0e:22:57:ef:11:9e:c0:10:
                    4e:b1:51:66:17:84:97:00:95:42:2a:37:a6:fb:ff:
                    44:58:c2:86:79:a5:f5:6e:4e:21:af:2d:97:31:90:
                    be:40:49:19:3a:90:c8:b8:d2:82:24:25:4e:e2:26:
                    97:a0:3b:51:f1:f7:b4:97:dd:7d:ff:cb:14:29:9a:
                    30:72:9d:bc:33:04:72:2e:35:25:46:7f:38:dc:f4:
                    22:3e:b5:fb:2f:8d:e7:72:3c:b0:d2:44:75:47:e7:
                    4b:04:c8:19:21:fb:58:10:2a:8e:40:20:c5:cb:08:
                    65:63:54:30:f7:37:22:06:af:58:b9:1e:28:0b:15:
                    43:57:5d:62:15:c1:88:b3:f2:5f:e0:06:33:6d:0e:
                    1f:a0:28:bd:49:9d:02:5b:fa:8d:5d:40:e8:3c:00:
                    b2:b8:19:be:ec:53:f0:ca:4d:c7:06:16:f9:48:3c:
                    0e:1a:4c:0d:b6:2d:a9:3e:4a:54:96:80:d5:d9:9a:
                    ac:a5:fe:cc:f2:81:99:3e:e3:9d:61:11:51:7d:47:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:CA:BC:48:9E:96:6C:32:AD:1B:DE:60:1E:20:49:3B:24:43:76
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:5a:6c:cf:be:44:4b:22:16:61:d4:0f:96:0a:16:6e:b1:
         71:8f:80:bb:69:36:21:3e:c4:67:19:91:0a:81:a6:08:4e:68:
         ea:1f:13:eb:95:ce:2c:8b:e2:b8:e7:04:c3:97:c2:38:d6:7f:
         d1:3c:cb:bf:f1:42:64:94:53:49:3e:b0:2a:3e:09:06:0e:cf:
         ca:b3:e9:6e:43:4d:3f:57:e0:a9:2f:1e:76:55:84:fd:5c:06:
         ac:b0:7e:6e:1c:43:b6:10:85:9f:3c:a8:cd:59:d3:33:e8:24:
         f3:69:e4:8b:86:d8:c3:00:3c:28:e6:ce:6d:ad:be:72:14:34:
         66:47:2a:66:96:c6:df:1f:9e:a4:4d:ee:b7:4d:6f:1b:50:1f:
         ab:44:0b:bb:55:19:19:84:1f:bf:70:b1:22:66:3f:a4:bf:af:
         84:b5:7b:c8:e0:4e:1b:62:d1:33:88:cb:fc:b3:ce:88:0d:cf:
         98:95:49:b6:f6:e1:0f:cc:9b:32:20:33:df:f0:fe:e5:ed:45:
         5e:e1:e6:08:8c:7d:29:51:fe:9b:8d:12:a7:34:62:3d:ab:3f:
         9e:83:f4:4b:24:a4:11:d4:61:b3:14:d9:74:9b:28:0c:fa:4a:
         b7:37:82:c6:b6:bc:b5:c3:8b:2f:8b:30:64:27:6b:b7:15:02:
         1a:f6:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----