Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          aoTh+ZFPE4Cr4JIN6kM3q0tlccABuox7cA9UCBuhtC8=
Subject key identifier:   0D:C2:E9:0D:7E:AB:34:93:10:3B:6C:01:61:7F:3A:0F:4B:F7:0F:1A
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       0194BD17556B8CD70BA8CE5AA39292E94B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 16:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:10 +0000
Files and hashes:         1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: z44Xc/LV8bmq0/hX2n1z8gGzXGZQRyyZbe2tNSM7jV0=)
                          2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
                          3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
                          4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:55:6b:8c:d7:0b:a8:ce:5a:a3:92:92:e9:4b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Jan 31 16:00:10 2025 GMT
            Not After : Feb  1 16:00:10 2025 GMT
        Subject: CN=0dc2e90d7eab3493103b6c01617f3a0f4bf70f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:90:a7:5f:82:d1:4e:e9:98:bf:8c:72:4f:33:
                    e4:6d:0e:53:13:d6:98:f2:e6:cd:59:43:3b:8c:3f:
                    7c:a0:72:76:04:68:79:5f:8d:59:07:d3:e9:51:3d:
                    25:9b:a9:41:45:a0:1c:98:f8:d3:62:a8:5f:9f:66:
                    bb:66:7a:7a:09:85:ae:f7:2c:a6:7d:be:90:83:96:
                    0c:64:53:a9:7d:1f:00:dc:04:16:ba:c4:7a:06:8e:
                    73:3d:d2:46:13:af:6c:4e:69:1e:0a:93:95:a0:10:
                    98:be:4f:e1:ec:9e:e4:06:6a:33:db:32:64:af:63:
                    0e:d2:9a:28:73:59:45:c9:b2:59:39:69:f8:29:b9:
                    73:b5:21:28:16:34:18:66:ce:25:72:bd:7a:17:55:
                    44:21:7f:57:51:3e:07:7a:68:ff:01:f6:c7:a8:a2:
                    36:45:e3:92:cc:03:cb:23:4c:4d:e8:4c:d2:83:9d:
                    dc:0e:00:4e:c0:c2:ad:21:54:6b:35:2d:8e:13:95:
                    2d:2a:8d:20:78:87:e3:8a:4f:95:9c:43:25:7b:00:
                    d7:b6:f2:fb:1d:32:8f:29:0e:ad:38:9d:4d:15:bb:
                    d9:9d:45:51:22:1a:f5:61:96:39:a2:fb:3b:b7:60:
                    e5:48:34:07:4e:8d:bf:4e:a3:1e:ec:c0:1a:50:49:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:E9:0D:7E:AB:34:93:10:3B:6C:01:61:7F:3A:0F:4B:F7:0F:1A
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:c8:57:c6:27:09:4f:4c:22:1b:f2:99:53:73:2e:3e:5b:
         d0:9a:5c:01:84:4d:87:b1:8e:96:8b:bb:2a:d1:97:47:d0:47:
         7a:c2:cf:5b:12:76:49:ed:d0:98:12:d2:73:7d:95:7c:53:f0:
         26:18:97:73:04:dd:2a:f4:f6:e5:e7:67:ab:1c:e6:13:08:2d:
         76:75:52:3e:1c:92:da:0d:95:95:91:87:f2:65:09:c8:bd:d5:
         e5:ee:75:a5:76:18:87:8d:84:6b:6d:e3:66:6b:40:40:f8:66:
         ba:73:c8:ec:82:fb:69:95:1a:5a:b4:7a:78:b1:98:da:bc:9d:
         48:12:a1:fb:94:4e:59:fd:46:20:df:65:c4:8b:98:b3:76:0a:
         42:21:71:fb:c2:d0:30:0d:04:f3:f3:6c:67:8a:7e:dc:55:99:
         21:ff:aa:5c:94:09:a6:f8:05:58:d8:7a:bc:6b:e5:f5:27:7a:
         70:4e:13:77:62:81:da:62:94:6c:ce:fc:ac:6a:fd:26:ed:56:
         3c:40:f8:5b:00:0d:53:45:34:3b:fd:30:4a:11:0e:2f:af:ad:
         e2:91:e0:a5:b6:2d:a6:eb:fe:bc:3b:22:4c:98:eb:04:8a:3a:
         b8:69:c0:d7:07:ef:88:3b:2d:de:da:23:fd:bf:7c:b2:99:8f:
         f3:95:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----