Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
File:                     csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft (raw, json)
Hash identifier:          qWa6o2BUC3qvyXn1IC+04oZhotZWPA3D7AtWxXbN5v4=
Subject key identifier:   B4:4D:E2:73:E0:B6:D6:BF:D5:6A:B6:3D:7A:89:6E:70:05:05:86:68
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       0194BCE06F1C36581C230F2150F0D5A0F333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:12 +0000
Files and hashes:         1: E21NAhDVeJIjhOGEeA7dZ6TV82c.roa (hash: 2Eo54WpqIcZduXMVnpn6V9sW+3m4FmzZ4Mra+/DmCe4=)
                          2: OloEbYDAzotqcqXrtsOE7C-nKdM.roa (hash: 1KugMutAlYxY9yVUop07GWwG3g/6VO6RKLlHRWpDAD8=)
                          3: WlRuTCJYddDH_ysVV5GnnWoYfEE.roa (hash: jZDPo73pyYZ9ohlhaHX22v8gbqxDIovMw2lLztIeSfo=)
                          4: csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl (hash: MbYenbZYFjuUisAPfnp6VsMkV2tLnuN1v7kh0gl/w9w=)
                          5: wtvWqQ83Z8viC8HujIFlaW94qzA.roa (hash: VRgdy/dQRtIj79oCA101wOc6cM5MVJQHJUw47Ux2YB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:6f:1c:36:58:1c:23:0f:21:50:f0:d5:a0:f3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Jan 31 15:00:12 2025 GMT
            Not After : Feb  1 15:00:12 2025 GMT
        Subject: CN=b44de273e0b6d6bfd56ab63d7a896e7005058668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:45:24:a1:27:11:1d:cc:b4:3c:48:df:5b:
                    2f:ce:fe:16:ad:c0:14:cd:88:b4:12:c0:9f:f6:e9:
                    7f:8f:ab:d8:7a:d5:c2:f0:9a:85:7e:e8:14:78:3f:
                    cc:b7:f5:5d:3f:1e:12:d2:0e:d5:47:1c:f1:e0:60:
                    18:03:ce:3d:fd:09:29:a4:b7:ce:ba:79:be:97:88:
                    2d:07:e1:ae:41:81:37:be:25:f0:2d:20:33:3d:eb:
                    1d:83:3d:de:34:a9:5b:28:47:f3:fd:a9:3a:f7:4e:
                    fb:06:34:6f:e3:1b:56:14:9e:9d:1b:79:17:79:48:
                    8e:a3:48:bc:58:14:74:2c:d3:49:5a:e6:2d:f5:34:
                    01:5c:a3:61:28:d8:ea:57:22:aa:ef:b1:42:40:9d:
                    ea:7a:12:b8:7c:87:f3:e9:68:6d:d9:88:c1:71:82:
                    fe:fd:16:93:30:4d:b1:cb:32:7a:3b:69:a6:ff:8b:
                    34:1e:72:f0:9a:75:2b:33:8b:ef:fb:b1:2b:1d:f3:
                    d9:51:16:50:30:42:a6:15:0d:15:97:f4:dd:0b:ab:
                    33:de:3d:ee:7b:cb:c8:81:8e:58:ec:b9:d4:ee:df:
                    d8:b6:f7:b6:79:0a:62:f5:b2:70:30:72:ee:c7:e3:
                    55:c2:52:44:9c:e3:2f:08:95:72:86:8a:40:0b:db:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:E2:73:E0:B6:D6:BF:D5:6A:B6:3D:7A:89:6E:70:05:05:86:68
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e7:02:aa:78:65:40:83:fd:5c:55:6f:36:10:86:09:a0:85:
         b4:ea:dd:dd:47:33:62:08:15:32:c3:e3:ea:73:b0:86:aa:63:
         67:85:60:9b:c1:5a:f3:e2:c9:a5:f8:6e:14:8b:4f:b4:f0:c3:
         0e:26:46:29:ad:11:7d:86:42:d3:35:b7:50:eb:5b:b7:dd:a4:
         f8:a5:ec:cd:cb:81:0b:1b:ca:76:c2:24:2e:7f:7e:61:8f:0d:
         8e:41:13:c5:d0:ce:ac:ef:da:60:66:e6:78:30:b4:b7:7c:79:
         77:c8:27:f6:f0:76:41:d4:03:fe:d3:81:fd:03:c3:04:9e:05:
         be:44:de:7d:85:53:35:02:5e:65:ae:f2:8b:ac:d9:9a:09:fb:
         5c:9f:49:f2:bd:cf:ac:b8:6e:f4:78:97:50:e3:3a:6f:d8:88:
         8c:fc:a9:b3:fd:19:96:72:54:89:99:83:de:d7:73:fd:df:a1:
         59:21:ad:05:7e:87:a4:f7:1e:da:65:d3:71:29:2e:95:ed:45:
         b6:71:8c:06:eb:d3:57:77:f8:19:ad:b5:a8:e0:ed:e8:e0:78:
         3d:79:c8:3f:1f:52:76:0b:8a:ee:3a:8a:7f:bc:c2:97:b5:64:
         93:70:5b:59:f4:11:07:2a:bf:8a:9b:09:62:31:c9:bb:84:aa:
         87:ae:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----