Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File:                     XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier:          xPa3DsxXIdTkPCYoQxRlWltBSKSaZJiVC4+mznKJ538=
Subject key identifier:   85:A9:00:B0:E3:3F:16:C7:01:E1:AD:CA:AE:EB:18:F6:22:45:2A:6D
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer:       /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial:       0194BBCE6FC19A19EB46C06798F1DADE9400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number:          133C
Signing time:             Fri 31 Jan 2025 10:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:55 +0000
Files and hashes:         1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
                          2: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
                          3: WdMCPBRF3SYVyusOAvLG3Px1q0o.roa (hash: 0pYw3BfMJddkmV2iZ0Sn1GwTLycumrvuPn+XFayO/cA=)
                          4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: 6c9jMAfA99O6jQoxh6Qc6XYbn3zHwX4sgAQ9MozKdA8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:6f:c1:9a:19:eb:46:c0:67:98:f1:da:de:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
        Validity
            Not Before: Jan 31 10:00:55 2025 GMT
            Not After : Feb  1 10:00:55 2025 GMT
        Subject: CN=85a900b0e33f16c701e1adcaaeeb18f622452a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:ea:c4:f0:d0:43:62:0b:3d:81:6e:a9:bf:
                    04:31:96:e2:d4:ec:28:e9:50:f1:3f:5f:00:9a:b3:
                    17:6e:a6:3d:41:c1:05:24:e6:fd:46:57:44:d3:81:
                    c2:ad:fc:39:6f:47:91:06:76:cb:ca:21:af:8c:e8:
                    78:8e:31:37:b1:c8:9c:30:04:38:85:ce:ea:dd:24:
                    5c:2c:23:2e:b9:ca:14:53:19:25:c5:3b:5b:25:d7:
                    94:9e:33:40:18:a8:3c:c3:77:e5:2a:2b:2d:9f:f2:
                    b2:eb:67:a9:fc:8e:6e:5a:01:b6:09:01:7f:fe:4a:
                    c9:80:8d:93:6e:93:83:02:7a:e3:20:9f:fd:50:50:
                    0e:31:29:60:fd:f2:2c:d2:07:1b:da:50:61:45:2f:
                    36:f2:22:52:dd:17:65:2c:9b:74:19:10:46:aa:7f:
                    9d:03:bb:59:8e:24:5e:e9:34:da:de:a9:8c:1b:cf:
                    62:25:f7:d0:05:b4:48:21:f7:34:3e:c2:f7:d2:d5:
                    ca:59:e9:52:82:29:f7:ad:2a:91:12:2e:7a:c8:22:
                    9c:e9:5b:73:15:9b:b4:c9:aa:af:0e:0e:2d:a8:d2:
                    d4:83:85:b3:67:ab:d8:0d:5e:46:c0:ab:99:28:7f:
                    8a:1e:a3:68:8c:a0:c7:0e:d1:05:52:c5:b2:53:da:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A9:00:B0:E3:3F:16:C7:01:E1:AD:CA:AE:EB:18:F6:22:45:2A:6D
            X509v3 Authority Key Identifier:
                keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:84:0b:e7:84:5e:e8:6a:de:be:f2:d0:02:27:ac:76:a1:43:
         43:4f:26:93:71:62:cd:64:d4:5e:68:32:d0:7e:76:b4:1b:24:
         38:20:2c:f9:9c:37:8c:45:e6:99:d4:e2:8a:77:bd:ec:4c:56:
         4c:55:76:3f:2c:46:89:dd:9a:e6:1e:09:09:94:3b:03:9a:4e:
         9c:26:27:20:74:35:38:08:22:7e:17:1a:5e:39:9f:4b:d3:8c:
         55:b4:0b:31:f8:bb:56:49:58:aa:6c:4b:42:cb:49:8d:cf:aa:
         a9:ff:80:0f:2a:e7:45:b1:e7:c4:dc:1d:44:57:e7:6d:b9:80:
         de:cc:50:4b:99:9a:64:20:39:aa:30:f6:43:37:b6:58:76:a7:
         ff:54:e7:67:6c:8e:5c:81:5b:c1:27:1a:26:08:46:1b:ed:39:
         5e:89:fc:10:cd:d9:14:85:12:fd:08:a8:3b:12:0b:ab:53:48:
         b3:23:36:ca:3a:43:61:15:52:0b:69:ee:b0:79:06:7b:e3:9c:
         fe:0a:d1:94:64:7e:3f:72:b7:06:2d:51:ca:1b:fd:26:a1:6e:
         4d:a4:e5:2f:a3:aa:00:62:97:2e:08:0d:85:7a:9f:bf:24:0d:
         45:8e:a8:33:03:91:5b:4b:12:42:4f:0f:9c:f6:21:ad:d3:6d:
         04:da:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----