Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          +FlJ6I0ouvdBnfR0a/46Cd8lSM7zaFHdYqLIuYphAtE=
Subject key identifier:   A6:B1:A0:3F:02:57:8C:BC:D2:EF:F6:62:92:CA:4A:3C:F4:F4:26:FF
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       0194BC3C6AFC40472AFE67B28164E939F9BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:03 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: 8zuYiVs/rG7qG4BKJwuhb12YRAvXE+IFbS89/TBFH80=)
                          2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=)
                          3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=)
                          4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6a:fc:40:47:2a:fe:67:b2:81:64:e9:39:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: Jan 31 12:01:03 2025 GMT
            Not After : Feb  1 12:01:03 2025 GMT
        Subject: CN=a6b1a03f02578cbcd2eff66292ca4a3cf4f426ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:ea:5e:86:90:62:ba:fc:48:7a:0d:f4:30:
                    f5:e3:1a:02:70:57:dd:31:b4:43:01:29:d6:12:15:
                    6e:a3:33:48:13:78:c8:0a:c8:ad:81:57:e8:71:97:
                    f6:e1:d2:ed:81:61:2a:e7:0d:3b:ef:eb:f2:87:0c:
                    a9:2f:91:00:ab:16:38:22:97:e8:e8:80:ae:77:5b:
                    3e:96:d2:9a:48:71:bf:69:5f:d8:a0:45:dd:01:84:
                    32:f9:82:e4:54:15:44:54:af:3f:a1:00:00:8b:7e:
                    31:cf:ef:2a:d4:55:a6:fa:0e:ea:79:59:fd:c1:fb:
                    d0:d5:e2:e8:98:d6:f5:2f:8c:76:55:cb:73:7d:73:
                    6a:17:f0:75:80:16:a6:2e:65:2e:83:27:3e:a3:8c:
                    47:0e:ff:73:3e:d4:96:6e:7e:b2:c0:31:0f:d3:7f:
                    72:8b:d0:25:3b:bb:0f:f6:5d:63:37:3a:0a:70:a7:
                    b1:6a:a0:b6:cf:d8:b9:f4:61:cd:01:a0:80:56:f0:
                    6f:a5:ea:67:65:c2:4b:37:ef:a9:79:8c:34:1f:7b:
                    cc:c3:3d:db:dd:13:50:64:b5:ee:a6:10:4e:ad:a1:
                    23:85:98:ab:ae:99:e5:45:32:b5:9a:53:a3:13:f2:
                    81:f2:c0:a5:d7:09:e8:25:c8:b3:df:20:fb:42:42:
                    6f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B1:A0:3F:02:57:8C:BC:D2:EF:F6:62:92:CA:4A:3C:F4:F4:26:FF
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:d4:d3:8f:29:f6:9a:f5:a5:b3:8f:86:00:5d:40:77:4e:
         1b:85:91:67:c2:ce:e6:ba:e8:a7:e6:14:f7:a6:3a:07:33:fe:
         6a:b1:05:dd:4f:ae:de:af:7d:b0:7e:cd:a7:35:81:6f:eb:41:
         d1:89:67:2d:22:0f:53:40:3a:f9:d4:b4:d4:84:5b:24:c5:1c:
         1e:2c:0b:4a:79:31:70:32:cf:58:bb:3f:36:88:7e:a4:42:69:
         10:42:db:3e:d1:2b:8e:76:0f:2f:e1:44:ed:24:c2:57:ea:e7:
         66:bc:16:2e:74:9b:9a:25:f5:cd:75:55:1a:1c:0c:75:d5:1a:
         18:04:c2:dd:f9:67:57:40:39:3e:2c:b7:1a:13:0f:e2:77:9a:
         f1:b5:65:0e:4e:7b:94:2a:22:81:d6:89:25:f4:33:c4:58:0c:
         ac:c6:54:66:cb:6e:1f:65:63:a0:58:53:98:6b:c2:ed:ec:41:
         9b:30:1a:e3:b8:f0:24:b9:b6:d7:26:bf:8e:a9:9a:eb:5b:0c:
         a7:6a:f5:cd:ee:17:a6:03:e8:0d:49:e2:28:55:96:25:4f:df:
         07:dc:45:b9:7b:95:1c:fb:27:ab:5d:89:56:d7:06:01:f7:28:
         67:64:0f:ea:14:a4:97:1b:5d:9f:67:2a:1b:8a:6b:20:5f:ff:
         30:79:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----