Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File:                     TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier:          LyCc7Ojne0bHmFWz75mCSPhi2hy0FfnY5sIwpuZg+6s=
Subject key identifier:   E9:55:48:BC:F0:FF:12:57:EC:10:43:0A:33:06:09:88:D4:3A:5F:C2
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer:       /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial:       0194BC72F59AB2CCCA23F53254082690A8D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 13:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:37 +0000
Files and hashes:         1: 1-dPM2O3Cq9rlPw_b3Bu58i_7ZQ.roa (hash: XqoYwMiUKjvv4+p3alYpBpdcCSNGWvnPPZeCLArAN1Y=)
                          2: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (hash: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=)
                          3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: 10VrlW9uDhqqboWtlpJhQe0RrL39ZrvCPIwZAA2G2vg=)
                          4: Vr7IufA3C9NGikBSGaXPWfPn02s.roa (hash: X+swUdsmsoD9I6W5uD/P9WRwAMBsf3kXls0seEffEoQ=)
                          5: _EI-DCtehkQJuSEZGP7N7ioX6Zg.roa (hash: uPXDlP3jf6C/noTaAyluTTWys0GZfmXGo9pUC5iBPfs=)
                          6: mYNoys889JEKo9j4oNdbRCLL9Zk.roa (hash: ZoVXON/ZR01LA7q9fnPxWvUyfhqGTxcjz/v5GxIUwf0=)
                          7: tIGmW-EI2nrWk4qC7j5FTTvEcKw.roa (hash: KGRsrUvfWuNnw7M6OrT2LhIDhaEzLkzjBqoyrd5RfaE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f5:9a:b2:cc:ca:23:f5:32:54:08:26:90:a8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
        Validity
            Not Before: Jan 31 13:00:37 2025 GMT
            Not After : Feb  1 13:00:37 2025 GMT
        Subject: CN=e95548bcf0ff1257ec10430a33060988d43a5fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:9d:fa:b9:cb:02:8f:ce:43:1c:c7:39:15:
                    11:ac:4e:1c:d8:30:9a:0c:90:65:f6:83:08:48:8b:
                    b4:25:e5:1f:63:33:58:9b:0e:f4:03:a8:d8:65:20:
                    dd:14:b4:0e:98:17:08:f4:30:b4:ef:53:7b:ef:2d:
                    b0:dd:33:c9:6c:dd:7d:76:e8:ed:e6:bf:0d:85:cc:
                    7c:77:7f:cc:0c:62:86:e2:04:40:2d:68:6a:93:26:
                    4e:2c:dd:8a:b6:4f:e6:dc:34:c9:35:74:75:f7:8f:
                    3f:ab:3f:a5:b4:cb:61:fc:e8:2c:ae:ef:33:c4:1d:
                    a3:57:33:49:9f:60:b6:40:8b:c7:20:05:fb:99:14:
                    fd:42:93:2c:3f:4c:a8:6a:c8:47:da:70:0b:95:26:
                    9c:68:79:26:f1:75:6b:8c:81:79:67:1d:64:e9:68:
                    b8:fb:bb:97:ec:f2:dc:69:56:dd:31:b0:63:c8:94:
                    a4:7a:d3:9a:37:79:d5:9f:3f:48:d0:ef:c8:c3:ec:
                    05:6c:9c:4b:4e:8e:31:06:92:ba:c6:ed:0c:7c:5c:
                    c9:3d:2d:ed:31:7c:c5:43:2b:dd:f8:ae:b4:8b:a9:
                    73:0c:03:70:65:e4:79:10:ec:18:32:a2:17:5a:d6:
                    46:9d:72:58:79:c7:5b:48:07:84:1b:95:95:ad:89:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:48:BC:F0:FF:12:57:EC:10:43:0A:33:06:09:88:D4:3A:5F:C2
            X509v3 Authority Key Identifier:
                keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7b:46:37:47:18:61:01:13:72:2e:3d:ae:a3:35:3c:0b:eb:
         c4:8f:c8:2a:c7:7c:ff:d2:73:c7:01:4b:28:41:4b:12:ed:cf:
         f0:73:a0:38:cc:f8:04:9a:80:a4:4e:4d:15:5c:13:6b:4c:17:
         cd:19:34:e6:d7:30:59:9b:00:b9:36:1a:0c:22:bf:c7:68:17:
         d2:be:f4:54:4b:79:2a:cf:87:d8:2b:2d:5f:9c:4f:2b:90:3d:
         ff:dd:65:b9:8a:5e:19:cc:d0:5e:7d:0a:0b:7f:20:25:72:6a:
         d8:b2:c0:ca:ae:70:4c:71:82:f1:7c:59:4f:0a:78:4e:4f:ad:
         ad:02:05:c6:3f:4b:6a:9d:32:09:21:1c:4a:2b:2b:63:02:8f:
         b0:ab:eb:2b:b7:09:4d:48:70:98:fb:de:ef:fb:dd:ae:30:58:
         f8:7c:3b:7e:c2:9b:13:d2:0c:e0:6e:0d:b3:22:59:d1:fa:68:
         ae:d4:9b:c3:c1:c0:ae:f3:1f:37:df:07:ce:1d:5e:c8:e2:ec:
         89:a7:c3:78:0d:4a:39:32:91:54:7a:dd:f5:1f:be:72:20:a5:
         6b:f2:a8:5c:db:27:11:60:6e:ab:ab:62:0a:3d:3b:4f:ca:50:
         ac:1a:df:15:31:fe:93:41:1f:1c:eb:08:7b:59:5d:26:dc:3e:
         2e:3b:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----