Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
File:                     gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json)
Hash identifier:          sUaq7jDp8nQJsxUeL+dU/0KtbGekI8r4mxdkj14HlX4=
Subject key identifier:   D5:6D:63:9A:12:9F:1C:A8:AB:AD:75:6D:29:FB:90:CE:74:DA:53:82
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Certificate issuer:       /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial:       0194BC3C32AE081F7D1ABF4C19AC89E14264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
Manifest number:          132E
Signing time:             Fri 31 Jan 2025 12:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:49 +0000
Files and hashes:         1: AHTg9VmGDmboYzdnURPHEfscAhc.roa (hash: EJAnurSy7dL6/EOxEWzPx0E5tdB8mhFHSs+OUGdmNJE=)
                          2: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (hash: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=)
                          3: Ka0CbbqxvinVFD8NCpgLSzN4Yuk.roa (hash: ewEXTB63pST4ITekJqikDrNA0xHVxP58LM3zCY4gO3c=)
                          4: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (hash: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=)
                          5: aHuPxYoxTVBAD5qRwAIntTvBYUo.roa (hash: jE0S/EIIiLy8A4TT+0QWlg16D+11OM3xpNzdkTsYxVw=)
                          6: cqDq4tCqin-RxETDXp25AqdBSeE.roa (hash: RTcBG4WyCxixqgAm7DJ0Zrr1Fu3C+khmPuB8vFple2U=)
                          7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: h3tbo/r+jj4jvzcSgD1bXbHyrkzVjdiW9826/+47xx0=)
                          8: h-tvk7C7HYBOLYv_ABx2fNgHR9w.roa (hash: zNRYwDmzMbVfNXkGpvLErGmatw1vKWMLP5C9y/PFQm8=)
                          9: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (hash: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=)
                          10: t10ytuHzLBo0-cyFhVGWj6IJRt0.roa (hash: MsPrygdde5gAS+ElSL2+5g+vrekUVGzvRNpNRAOCFCY=)
                          11: uI8lFhTxbU7XCjkbphUEU_LgR1s.roa (hash: 8FbC9jD7odYRy5r+lSqmVJIE2x1QODwfdsQJ3Toqh1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:32:ae:08:1f:7d:1a:bf:4c:19:ac:89:e1:42:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
        Validity
            Not Before: Jan 31 12:00:49 2025 GMT
            Not After : Feb  1 12:00:49 2025 GMT
        Subject: CN=d56d639a129f1ca8abad756d29fb90ce74da5382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:64:5e:d9:49:be:57:68:a6:e1:8a:a5:f8:
                    6a:46:1f:e5:3c:dd:62:04:fc:b5:e4:3f:79:53:f3:
                    a6:5a:21:c1:8f:92:ed:73:cb:90:50:45:10:cc:a5:
                    39:20:b6:50:24:5e:b2:69:b2:f1:69:fb:8a:cd:24:
                    fb:73:09:76:7e:c3:e1:5d:20:be:3e:ae:8b:e1:9d:
                    3d:4b:70:98:a5:6a:2b:00:8f:86:01:ae:99:91:a1:
                    49:47:f8:fc:d4:ae:ee:fe:af:9f:f7:ca:f6:0f:de:
                    5e:a5:fd:90:cd:ec:bc:34:8a:82:a0:03:dd:3f:01:
                    41:20:1a:5c:39:dc:81:2c:bc:54:f3:8c:f7:63:8e:
                    e9:4a:9b:e0:90:bd:f9:6c:d3:56:f0:bf:a1:b3:b0:
                    fc:2d:b0:8e:96:44:58:10:8b:bc:a6:06:15:1f:ff:
                    56:ce:53:9a:c4:c3:14:ad:36:f6:91:e7:16:45:ee:
                    8f:ff:7e:ad:fb:c9:5b:a5:17:8f:8c:0f:74:e9:85:
                    6c:97:75:1d:15:a4:4f:74:fd:84:3e:f1:e2:2b:8e:
                    98:78:62:ae:55:da:2e:e0:a6:9b:31:85:83:18:ca:
                    43:cc:96:03:83:8b:c9:60:e3:2f:d2:eb:3a:ac:45:
                    30:4f:2c:5e:53:76:5c:6e:b0:71:c6:76:3d:80:df:
                    a4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:63:9A:12:9F:1C:A8:AB:AD:75:6D:29:FB:90:CE:74:DA:53:82
            X509v3 Authority Key Identifier:
                keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:5b:f6:ef:21:12:f0:95:19:97:c0:89:b1:ba:72:bf:71:
         56:65:dd:41:23:4c:41:04:33:2e:31:07:48:78:1d:70:b3:44:
         4d:76:d3:d4:67:25:88:ea:c2:e7:53:45:ac:bd:3e:7a:c0:4d:
         3e:65:08:c2:e0:3f:1f:f5:b7:75:1d:5e:5f:de:83:c7:d4:b1:
         a0:01:58:d4:b3:ea:43:1d:28:ea:30:67:6d:b5:1c:91:6f:ce:
         0b:9f:87:c2:6c:66:72:fe:6a:10:08:8e:e6:ac:5f:e3:5b:19:
         fa:09:f2:94:cb:b5:43:8d:34:e7:04:d9:1c:c9:44:5b:07:91:
         33:e0:a6:8a:a7:ab:64:5b:fb:d3:e8:26:71:4c:7f:dc:f1:a8:
         78:84:c8:52:bd:d0:20:fd:d3:a7:0c:76:f0:d8:8a:9a:7c:fc:
         e8:fd:6e:e9:4a:b3:14:d9:e9:b4:e5:fd:86:c4:7d:ad:ea:e8:
         c8:6e:7b:c9:27:9c:2c:91:02:c0:27:e3:bc:f2:05:c8:a3:20:
         8f:d8:17:90:cc:d3:9f:1b:ad:17:88:97:77:68:97:6f:50:91:
         db:05:e1:f4:0e:38:1a:f0:d5:a2:75:6c:b7:cf:d7:4f:cf:72:
         cc:c4:27:38:3d:c7:6c:0c:89:5d:cc:48:44:33:00:19:97:e5:
         a8:e9:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----