Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
File:                     5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json)
Hash identifier:          nLIhiMz3pAsKlvCNiZUYUKm7p0BcTb7U81GLIGI8F6A=
Subject key identifier:   BB:AD:13:8F:1E:02:C3:E7:50:A4:02:E7:DF:D6:F8:E4:97:D7:9B:FD
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       0194BCA99EEFC3FC434CCFC74507E8E4EEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
Manifest number:          143C
Signing time:             Fri 31 Jan 2025 14:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:20 +0000
Files and hashes:         1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: FrPfLa13jLFNT32LI9KOXtb+Ff/v18OCC5RnEfESs/M=)
                          2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=)
                          3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=)
                          4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=)
                          5: boEXbjNEx33wzw6E6JRbWglAiOc.roa (hash: 3yrH5bI0y5QY0oSIFS2nNUKvCD7KcuqU8IZY651c2PM=)
                          6: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=)
                          7: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=)
                          8: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=)
                          9: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=)
                          10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=)
                          11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:9e:ef:c3:fc:43:4c:cf:c7:45:07:e8:e4:ee:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan 31 14:00:20 2025 GMT
            Not After : Feb  1 14:00:20 2025 GMT
        Subject: CN=bbad138f1e02c3e750a402e7dfd6f8e497d79bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:4f:c6:98:40:cf:9d:0e:5f:62:18:f3:d4:
                    65:3c:db:de:d0:6f:04:6c:f3:68:65:7f:23:51:21:
                    07:0f:23:14:2f:3e:00:39:42:aa:89:63:64:80:27:
                    d0:57:f5:d3:a8:1f:49:18:c4:5e:46:54:f8:a7:f8:
                    ed:02:0e:9d:88:2a:5e:28:55:51:ec:46:da:e0:01:
                    98:c2:95:fc:81:33:7f:a2:64:fb:d5:da:b5:a5:a7:
                    67:3f:43:e6:9e:e6:1c:62:b5:e8:69:b1:de:85:08:
                    9c:b7:de:f0:58:1e:10:71:86:b0:40:13:fa:9a:71:
                    09:5b:bf:6e:7c:3c:4c:d4:dd:e3:26:2e:48:ce:01:
                    92:65:1e:f7:61:93:27:bb:7e:c8:0f:60:4a:d2:11:
                    4c:47:63:72:08:a0:4f:1b:52:3b:91:88:f2:c2:3b:
                    09:a8:bf:0d:cd:1f:a4:55:55:c9:7c:30:63:11:61:
                    39:a2:17:d7:80:c5:f7:71:7c:ee:da:d7:74:ca:7d:
                    ae:4e:40:ff:f1:8b:ac:2d:5e:e6:36:27:78:30:49:
                    69:90:77:f3:d1:18:0a:0a:4e:da:ae:c8:fa:1a:d4:
                    06:fd:fc:db:16:74:c4:ed:17:3a:36:6e:97:a7:21:
                    39:90:da:9f:61:f2:ea:29:2d:4b:58:87:ea:45:af:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AD:13:8F:1E:02:C3:E7:50:A4:02:E7:DF:D6:F8:E4:97:D7:9B:FD
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:f2:8f:f0:3d:23:d5:18:85:ae:dc:8b:1f:91:72:55:8a:ca:
         eb:0b:e4:80:6b:88:f2:70:23:ff:c4:ca:91:ab:cb:e5:27:55:
         63:8f:1f:a5:ff:c7:7d:4f:9c:d1:eb:3d:66:f6:04:a1:57:19:
         1c:c2:21:50:ed:da:6b:13:db:3e:69:e2:18:a3:e0:eb:0a:fb:
         2a:44:1f:cc:65:ee:b4:5a:67:11:25:c8:f9:ff:ad:71:b6:e6:
         45:ff:4d:ef:47:6a:4c:f4:c4:d3:11:19:1f:fc:70:39:da:b3:
         70:5b:ef:22:47:08:0d:47:78:f6:84:de:c4:3b:15:34:db:3b:
         ee:33:28:1f:14:08:e0:a2:eb:03:a9:9d:4f:56:79:ad:84:25:
         4e:84:b5:4b:1f:90:90:aa:31:47:ad:95:66:b8:1a:a7:fb:b0:
         ec:8e:c2:29:7e:ca:c4:9c:3e:44:b6:8b:d0:13:24:a6:8f:36:
         e9:95:8d:a7:3a:c9:ec:76:7f:d3:e9:06:b8:2f:87:e4:2e:5f:
         7b:82:fc:e8:08:42:04:cf:a9:b1:70:c8:62:30:23:6e:96:4d:
         df:e2:af:d4:bd:bb:3e:fc:d1:97:69:a0:b0:5c:8a:f4:aa:84:
         4f:71:44:47:84:75:ef:fa:36:45:cd:e8:32:73:c5:13:b3:9b:
         66:f4:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----