Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File:                     PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier:          wbDMWqLwRF2+RM5fA8qMiaB6G/KWOskeGggRqPIq3Pc=
Subject key identifier:   BD:F0:DB:19:73:38:D0:BA:A0:B9:F3:91:E2:78:1E:A6:63:9C:D8:FD
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer:       /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial:       0194BCAA379310B52F5ED7ED2D7E07B6A303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number:          143A
Signing time:             Fri 31 Jan 2025 14:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:59 +0000
Files and hashes:         1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
                          2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
                          3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: /G9qoWPY2n0bz73NLK2UtSRTRiODznlVPo0R7VFx95Q=)
                          4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
                          5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
                          6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
                          7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:37:93:10:b5:2f:5e:d7:ed:2d:7e:07:b6:a3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
        Validity
            Not Before: Jan 31 14:00:59 2025 GMT
            Not After : Feb  1 14:00:59 2025 GMT
        Subject: CN=bdf0db197338d0baa0b9f391e2781ea6639cd8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:04:88:0a:7b:82:18:80:7f:a5:a3:83:b1:
                    f7:ee:f9:75:11:bb:f2:f0:d1:38:6d:85:e8:24:4a:
                    bb:f6:b6:89:1f:a3:ba:44:da:2b:ce:f0:c5:c4:4b:
                    1f:f1:1a:e0:7e:20:ac:53:ab:82:b2:3a:65:1e:a8:
                    ce:c8:bd:05:14:f6:1b:b4:b5:13:22:1c:44:72:42:
                    83:a7:55:5e:a7:11:e4:60:12:f6:85:fc:55:9b:ff:
                    2e:a5:d2:4e:d0:92:da:9a:c7:f3:57:4c:54:ef:9a:
                    e2:e9:c2:c0:ed:c3:62:c5:cd:1a:6e:1c:42:7b:c7:
                    91:87:31:43:53:e3:5b:fa:5a:42:a0:20:1c:ce:f0:
                    88:1e:72:fd:69:98:37:0d:43:b6:7f:ee:6a:fd:3c:
                    f8:1a:24:3a:91:ec:2f:03:4c:63:83:ee:8f:70:27:
                    48:1a:e8:34:8f:9c:14:cd:d5:b0:67:ef:7c:eb:5e:
                    35:bb:94:38:bb:57:73:bd:0e:d4:fa:3c:30:b1:47:
                    9d:28:aa:c8:63:b8:41:e0:8c:de:45:8c:12:ab:ce:
                    01:bc:e6:31:a7:11:d6:76:84:38:58:80:ae:69:21:
                    ba:ab:59:f5:1d:56:87:1f:ff:7b:27:bd:58:70:da:
                    46:fa:db:58:1b:97:f3:c9:1a:13:4d:6b:3f:1f:fc:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F0:DB:19:73:38:D0:BA:A0:B9:F3:91:E2:78:1E:A6:63:9C:D8:FD
            X509v3 Authority Key Identifier:
                keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:70:58:e5:87:2b:d4:21:42:16:27:d2:f0:a6:de:12:b1:17:
         ba:75:db:f2:6c:9b:15:61:b6:8f:a1:7a:34:2c:5c:bb:7d:52:
         f7:a5:ae:02:d1:56:b9:a7:29:6d:15:af:06:00:27:d3:43:03:
         19:01:c2:d8:fd:64:6a:2e:27:d8:4b:4e:5f:52:ab:af:79:70:
         74:05:8c:bc:98:a4:ec:c9:66:96:77:cb:19:ab:2c:16:98:25:
         94:ac:dc:e8:fb:8a:87:27:c0:31:8b:7c:9e:c0:37:04:6d:c2:
         0b:39:88:4a:f3:2b:87:48:3a:6a:f4:b4:a1:1b:ad:59:aa:54:
         33:e2:4e:63:83:b4:0e:0d:69:bb:30:c3:a8:d0:ad:75:01:c8:
         5e:25:42:59:fa:32:7d:4c:7f:6c:a1:3b:12:63:0a:ea:b4:b7:
         b4:83:07:37:e6:06:e7:aa:0a:c5:6b:ab:71:8e:55:a1:8d:ac:
         c1:ee:59:17:53:ff:f4:8a:21:11:c4:47:61:88:71:6a:c2:d4:
         42:86:cd:18:b5:ed:1b:31:7e:7e:41:bb:19:54:63:84:e7:76:
         5d:2d:25:b3:9b:81:9b:e6:c9:c3:70:a6:a8:32:3f:32:fa:98:
         10:f4:a2:56:a4:4f:fd:ce:0f:e2:8e:64:6d:f9:3c:ae:8c:d4:
         09:23:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----