Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File:                     Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier:          L/qeEf3wIOr7iRt7pYfpcxz+KgCaeiSgQrIyNOWiUiQ=
Subject key identifier:   28:E5:C7:A8:4D:A5:74:C9:11:CA:B6:46:0C:91:55:79:34:DF:6A:7A
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer:       /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial:       0194BC895E0D67AA13FFDE52BB479918136B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number:          012C
Signing time:             Fri 31 Jan 2025 13:25:06 +0000
Manifest this update:     Fri 31 Jan 2025 13:25:06 +0000
Manifest next update:     Sat 01 Feb 2025 13:25:06 +0000
Files and hashes:         1: LjCg_l42hSjVMHo-J0Oyn-3VFsw.roa (hash: rTXkRxS2gY9Nh1dHNuGUurQlznABiYA0cdKx5JAPEOw=)
                          2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: 6vXLNN8vBMLJMMwbrhRVEm0n19IZhv75dqNQGDRAQWo=)
                          3: P1ZtH1tzePD4Vahlfq-1pK0NCVA.roa (hash: MDIXhSdv2wAFzVk5mq/aOXmoZOYx14K+lncmzhb8LUk=)
                          4: lEauZh86ti9d2H61TNFR6XbJC1Q.roa (hash: oqaeC8qW2rPWqlEcXp3jN5EvCeVE5sbpes4nKJ0jwq0=)
                          5: zv81fkI3Q2TSXwjuxFrY0IWnK0I.roa (hash: UofIshPX+IU+9j1hlx7jiFm9OZR+CRB18/MyGsvvXmM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:89:5e:0d:67:aa:13:ff:de:52:bb:47:99:18:13:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
        Validity
            Not Before: Jan 31 13:25:06 2025 GMT
            Not After : Feb  1 13:25:06 2025 GMT
        Subject: CN=28e5c7a84da574c911cab6460c91557934df6a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:d6:70:82:61:a9:6c:f7:cc:59:6a:e8:b7:
                    9c:59:67:31:f5:3f:2e:83:a7:16:38:a0:bf:1d:d8:
                    ff:8b:5f:5a:ef:05:14:32:cd:52:ee:57:b0:16:40:
                    fa:83:b0:16:3f:17:6b:96:5b:ad:32:91:bf:89:8f:
                    de:cb:30:0d:55:29:18:19:47:77:65:e7:0b:95:56:
                    6a:8c:2e:af:54:cd:8d:d1:cf:d7:f6:d2:c6:ea:1b:
                    32:7f:8e:59:3c:7c:fc:dd:cb:f1:5a:75:3c:ff:98:
                    c6:6a:47:92:de:e2:1a:c4:fc:21:e6:ee:d7:72:35:
                    a5:27:80:b7:ce:5a:f4:8d:1e:77:9c:12:72:b3:09:
                    fc:d0:79:13:82:5a:29:d4:49:e4:0a:ef:3b:5b:61:
                    bd:a8:47:4b:a3:85:b7:e9:49:ee:b1:64:3a:1d:69:
                    4c:ca:e4:0f:f5:86:ac:e7:1b:43:c2:e9:82:1e:b5:
                    1e:5b:0f:f3:df:cd:f3:dc:58:42:b4:5c:a4:04:e7:
                    59:dc:3d:72:11:73:4d:8f:9c:c5:bf:1c:ed:15:f8:
                    45:ec:35:30:d5:f3:f9:fd:ab:03:56:ed:b8:63:48:
                    ca:23:d1:0c:c9:ea:32:18:5e:df:c7:62:42:ba:de:
                    41:27:65:dd:c6:31:aa:09:60:c8:a6:2d:9d:33:12:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:C7:A8:4D:A5:74:C9:11:CA:B6:46:0C:91:55:79:34:DF:6A:7A
            X509v3 Authority Key Identifier:
                keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:2d:3b:45:c0:f8:22:2c:e1:0f:96:ed:3a:b5:28:b9:d6:
         dd:f3:51:61:29:ca:da:db:37:74:57:af:04:1d:bc:0c:7a:62:
         ba:43:ba:6a:3f:5b:2e:5d:30:5e:f6:7f:44:9d:75:5c:a4:a3:
         8a:e6:25:78:77:f9:7a:97:e5:d2:1b:32:82:88:c2:03:17:97:
         42:4d:26:44:4e:3f:02:8d:15:3b:5d:28:84:96:97:b2:39:49:
         ed:f3:83:42:2e:7c:6b:1c:3a:9f:82:1d:87:61:06:e6:17:48:
         1a:e2:c8:96:1e:f9:ed:82:ee:e1:99:b0:d6:ac:78:98:6d:c4:
         6f:5a:3f:7d:de:29:66:fc:d2:e5:c3:7d:36:f4:8e:80:79:34:
         08:fd:fe:38:bc:4d:06:57:94:28:65:ff:ac:58:a6:df:d8:cd:
         07:2f:32:11:df:b9:04:1b:5e:e8:cf:89:8c:73:e6:36:ff:69:
         ba:c1:a1:dc:2e:e1:3f:9e:f2:f4:a7:43:6c:dc:81:de:de:33:
         80:5f:98:15:17:34:ef:2c:f3:99:9d:5e:43:68:a6:91:04:ed:
         e1:92:82:fc:da:5f:20:81:ef:04:02:8d:12:3a:9a:1a:93:04:
         76:5e:7f:12:8e:70:65:0d:23:a1:3b:a2:25:b9:74:c0:7b:65:
         80:67:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----