Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
File:                     jBhqVuqEwTxidoqdF7rhM87fEEU.mft (raw, json)
Hash identifier:          26Ywkg+n7S3ae36O8UUQBBqAG+Af2aab3TSjb/lfzTM=
Subject key identifier:   21:90:75:5C:72:BF:A6:3A:BE:17:AB:9B:F7:47:F9:97:56:88:62:2B
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Certificate issuer:       /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial:       0194BBCE4CCE911AAF43694D3EB335786D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
Manifest number:          143F
Signing time:             Fri 31 Jan 2025 10:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:46 +0000
Files and hashes:         1: REfYg6zs4mzXkznv8BZKawAeEPY.roa (hash: fxWL8SMng2Jg9LEtF9apPtdYuyEYzVdto0OqCyAqJew=)
                          2: S2Oderrp7lYRIScX-QAUHtFKgP0.roa (hash: CJ1oiM/HycEGfncA5aOP1zkSKBg0JuVq13Asp3X8j2w=)
                          3: Us5fsFK1rDmbmMuRZc376JRXA1A.roa (hash: uMRE+27TjtGt0OGORHpHmlRoFrYZQRl3Whf6j5Y0xFM=)
                          4: YEfco2c9_b6VDtGwlUBszWvCvI0.roa (hash: 0dy3l8v/4sRsGHHGtOtE/Z/gbG5L+kAxLfCYcCqk4xc=)
                          5: jBhqVuqEwTxidoqdF7rhM87fEEU.crl (hash: F79S0hWdsBbPS6bzo92ntk1fVSbyafMTl+O63UZChfI=)
                          6: qNE1Oc5YdEXAaCXUki-27-49n4M.roa (hash: kONF3c4X+eIS37hIjtumNoVHLNO/2aceAl9uEWgk568=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:4c:ce:91:1a:af:43:69:4d:3e:b3:35:78:6d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
        Validity
            Not Before: Jan 31 10:00:46 2025 GMT
            Not After : Feb  1 10:00:46 2025 GMT
        Subject: CN=2190755c72bfa63abe17ab9bf747f9975688622b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:0a:a8:80:43:51:71:a9:54:fd:22:42:3e:
                    eb:96:95:ee:64:53:ba:78:c9:45:44:e0:5c:12:7e:
                    6b:84:5c:73:b2:04:55:f6:63:5c:0d:22:41:f4:ac:
                    67:91:80:20:6f:c4:e6:0e:c7:7b:0e:3d:87:7a:8a:
                    49:05:a1:22:f0:3a:0b:02:86:32:8d:f5:a7:26:0e:
                    b1:f8:20:94:18:64:dd:7a:f4:60:1b:02:67:4a:e1:
                    c2:fc:60:2d:b8:89:3f:7c:96:98:52:2e:55:c1:08:
                    80:16:72:fb:7f:ee:f8:84:f9:a5:98:45:d6:a7:6c:
                    1d:25:0a:11:d6:b2:a6:56:bd:34:6e:85:b0:1a:2e:
                    ec:bd:05:7e:5c:cb:4f:d9:37:e6:db:3a:76:a2:59:
                    1c:db:f9:95:27:7d:63:f5:6b:eb:86:25:74:8c:9b:
                    6c:25:ce:9a:ad:8f:00:6b:b7:06:20:b4:ab:0f:b0:
                    69:86:bc:d2:00:ef:8c:b0:43:ba:ed:3f:48:46:03:
                    cd:8d:c3:e9:a8:5d:8c:61:4b:73:7b:65:4f:f5:82:
                    3a:16:1e:e0:33:0d:70:d5:1b:c9:6b:4a:78:68:6e:
                    44:52:e4:44:39:ed:3a:b1:f4:2b:70:38:24:53:c1:
                    38:1d:47:60:e0:5b:66:bd:8a:16:11:18:b9:f9:c6:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:90:75:5C:72:BF:A6:3A:BE:17:AB:9B:F7:47:F9:97:56:88:62:2B
            X509v3 Authority Key Identifier:
                keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:57:32:8b:61:70:6b:9e:f0:4a:98:1b:de:fc:8b:82:d9:f5:
         78:80:44:14:76:ca:58:f1:8f:11:4c:84:10:57:25:17:b6:06:
         59:5b:ba:93:3e:7b:9c:bd:b5:e6:f3:23:1a:5e:3a:0a:fa:5d:
         91:97:9b:62:ee:f6:2e:a4:23:ca:b9:b9:b9:58:eb:f0:c6:88:
         2d:d4:bb:63:04:3c:30:2e:da:26:be:d4:1a:8d:9b:02:63:a0:
         3c:3f:4e:be:6d:e9:2d:d4:85:a3:b4:00:9b:49:1e:94:50:7d:
         f5:d5:b2:27:60:19:0d:ba:97:6d:8f:ba:d3:2d:4d:94:6c:1b:
         40:7f:d3:66:b1:3f:fb:5f:a0:91:a1:36:a7:a6:3c:00:ab:93:
         18:2e:6b:84:75:9d:19:87:fa:82:85:3d:7e:fd:41:1a:ea:1e:
         63:39:ed:9d:85:15:c9:f7:99:f0:8b:93:f9:7b:90:c3:cd:f8:
         bf:af:e1:c2:80:b8:4d:a9:21:83:f8:3e:9b:85:c8:7f:ea:e3:
         a1:09:1c:59:8b:d8:dd:91:2c:36:f7:f7:6e:7d:3a:19:b3:8a:
         c3:1b:46:4f:f7:de:d7:29:a1:65:7c:6a:d7:86:4f:9d:65:c2:
         01:f8:86:d4:6f:1e:87:7c:f8:34:b1:d6:8d:54:c6:cf:0a:cc:
         6b:50:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----