Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          fYTqNvZy0+jbVKe7+g6Mc7dPZrQYWSVioAz9DOTD5nY=
Subject key identifier:   F1:86:09:7F:9F:8F:B8:70:5E:63:EB:23:83:77:20:F8:7C:04:F8:62
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       0194BBCE30F7F86CD7F169745C26B6A432FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1442
Signing time:             Fri 31 Jan 2025 10:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:39 +0000
Files and hashes:         1: 3VccELQ6fMAd_SsWa28692gxXmM.roa (hash: RRYPd5SH9wEibMZ2O0GoQGL1BIRUFDBSyoxUuO5ANrw=)
                          2: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          3: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: /21TzaVDLDnGFAcUOmUb+2gel1Zfih5DJHKv1/u0n+g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:30:f7:f8:6c:d7:f1:69:74:5c:26:b6:a4:32:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jan 31 10:00:39 2025 GMT
            Not After : Feb  1 10:00:39 2025 GMT
        Subject: CN=f186097f9f8fb8705e63eb23837720f87c04f862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:c0:ff:f7:48:a1:f3:c4:c6:e1:df:ae:38:
                    85:dd:ea:93:1d:69:31:c8:28:ad:48:38:1f:b1:22:
                    d9:9a:dc:d4:5d:eb:9f:26:6a:d4:f4:68:7f:db:f8:
                    17:bd:b0:65:c1:6f:2d:a6:30:ad:f0:e2:6b:6d:87:
                    ba:4c:91:42:a6:cd:a3:ba:61:dd:94:e0:97:38:63:
                    e5:32:c0:be:d8:c3:1e:00:8c:8b:d7:b8:d9:25:c8:
                    80:91:ff:93:8d:ac:a5:20:22:dd:a5:d4:b6:8f:d6:
                    bd:09:b0:af:26:35:91:73:07:55:d2:12:04:bf:ef:
                    ec:ce:79:85:0c:3d:52:19:30:70:32:8e:61:b0:bc:
                    63:58:9a:a8:12:49:df:c3:89:25:d5:10:a1:a7:d1:
                    e6:b2:e0:f1:06:91:b9:33:92:e3:64:dc:89:b8:5d:
                    0a:95:83:9c:f5:8b:38:d1:7c:b1:7f:79:a4:58:59:
                    79:2f:30:ae:98:6d:32:7e:b9:8a:e0:3f:0b:c7:ad:
                    d3:00:83:f6:92:d5:c2:5c:78:c2:51:f2:1a:3f:e3:
                    04:9c:ce:47:e8:aa:dc:46:94:ab:32:6c:2a:d3:24:
                    4b:dd:c2:7e:2e:2e:ac:52:e5:0c:a6:2a:78:bf:39:
                    5f:8e:f3:e3:de:23:5d:d5:67:4a:83:6a:7f:18:7c:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:86:09:7F:9F:8F:B8:70:5E:63:EB:23:83:77:20:F8:7C:04:F8:62
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:27:0a:5b:9c:a4:7e:9f:df:87:fa:5a:b4:1f:81:c3:b2:44:
         58:61:ff:59:d8:89:a6:32:b6:bf:54:0c:09:c0:df:a4:d8:e7:
         6c:12:e4:bd:9f:87:e7:fc:78:6f:96:f3:75:23:a0:3f:4c:b5:
         46:8e:d6:cb:b2:3b:5a:d1:49:5d:54:f7:c4:5d:53:ba:3a:a8:
         2f:fb:ad:dd:00:1b:6c:e9:8f:3a:d6:a7:c3:cd:f0:61:e1:99:
         05:d3:85:20:aa:11:d3:37:f9:df:95:a6:8f:e7:9b:e6:16:e4:
         7f:65:5a:28:97:2b:ae:7b:11:56:33:d5:f7:f8:b7:8a:52:dc:
         bc:c4:f9:32:5e:db:5d:9e:14:7f:5f:d8:55:c3:00:dd:20:63:
         00:44:be:f3:ef:75:4a:3c:c4:92:bd:d1:ba:17:66:d3:a2:07:
         18:1b:45:a0:52:37:14:89:e7:3e:9c:57:bc:76:4d:46:e5:cd:
         76:49:9b:86:74:aa:75:7c:31:13:af:18:26:8d:ea:93:0c:ee:
         8e:39:8b:c9:c9:4f:f3:1c:4b:17:7a:0a:12:3c:99:32:67:b1:
         27:40:ec:25:91:e8:8d:25:e5:2e:fa:53:5c:06:3c:27:0a:21:
         8d:67:9d:00:31:8d:f7:85:d6:65:8f:ff:18:dc:fa:aa:b2:47:
         d9:2c:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----