Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          8LsKGRk9uoA0KwWDAYxoY+RF7NOUbBohqz0DqydWvWY=
Subject key identifier:   83:F8:D0:21:43:3E:73:DD:1D:53:50:87:AD:A9:FA:4A:5D:26:BA:65
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       0194BC3C3AB0DE8C8E05D698CE41C40B46AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 12:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:51 +0000
Files and hashes:         1: 6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa (hash: snOYWWn9LAXIRFMHKtV6wAS6uhRRwhXxfRK2VSExR1k=)
                          2: Dmq6rzRBY22zQprWtgsSucnmPfw.roa (hash: 53HdmBv78dIaQNhdTstURpa3FkH5iHS78bcTm103dts=)
                          3: Vfu8orab-u2hq4PDCFONf8-ELfY.roa (hash: 4g53e8SQJ6evWk5P2AQfilbVciXTa/dqHlUA6U7ixfc=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: 5HHeNH4meOMU6n/4zHxEe/WjDpXsrq3uJo56IKEKVaU=)
                          5: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (hash: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=)
                          6: gCqBeQcxeP4mgIeC8gxfXD2ihNA.roa (hash: M8yQO0ZHmNcXujVHcxJQENuFmwi7ywPsRmKiyTk43dA=)
                          7: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (hash: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:3a:b0:de:8c:8e:05:d6:98:ce:41:c4:0b:46:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Jan 31 12:00:51 2025 GMT
            Not After : Feb  1 12:00:51 2025 GMT
        Subject: CN=83f8d021433e73dd1d535087ada9fa4a5d26ba65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:d1:82:fb:56:6f:2f:4a:52:66:2d:3c:ed:
                    65:20:62:a3:d5:ad:a4:11:41:d8:be:66:08:5c:3c:
                    ef:59:aa:2d:bc:fd:05:6a:ca:5d:24:bb:d9:39:ac:
                    46:f7:81:d6:7b:86:27:0f:ce:8a:8c:5a:1e:63:8e:
                    b1:33:04:b5:09:c9:d6:de:67:63:69:c2:10:06:04:
                    c3:4c:d0:b2:b3:56:b0:e6:f1:ce:01:d0:a1:3c:b0:
                    cb:c3:98:76:a5:56:dc:0b:3a:93:ea:25:9e:86:3c:
                    cd:54:6c:10:84:2b:56:a6:6e:85:55:b0:dc:09:76:
                    87:d1:84:1c:76:96:dc:13:d1:1e:1f:88:38:f3:10:
                    92:6f:3b:a0:6c:7c:0f:ca:ee:70:6c:8b:c4:b1:27:
                    4a:b6:2b:42:da:dc:49:3c:8b:c7:a8:d0:e6:fa:9d:
                    2c:e0:50:e9:74:62:21:18:89:08:17:39:fa:9b:f1:
                    2a:34:64:3a:e4:31:02:92:d4:4f:e9:b0:01:c2:7f:
                    53:bd:c9:95:c1:e1:36:cd:8c:90:a7:80:99:cd:16:
                    63:11:af:d1:72:12:39:e5:12:93:97:01:93:29:36:
                    e8:01:2c:10:5a:0e:d4:83:a1:ce:85:13:dc:e2:aa:
                    13:ae:b2:db:86:a5:b5:ca:40:da:17:b1:e6:24:23:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:D0:21:43:3E:73:DD:1D:53:50:87:AD:A9:FA:4A:5D:26:BA:65
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:08:21:7d:9c:3e:a6:a5:8b:5e:3d:66:b8:c5:3c:f9:b7:
         cc:ce:a2:ca:68:b0:63:b5:84:79:7f:49:c0:f9:6f:fe:c2:1f:
         0d:f2:8f:94:14:d2:7e:07:d8:e9:b3:64:a6:56:5a:cf:16:b1:
         6e:35:70:cb:1c:dd:f6:b1:e8:a9:36:86:f6:97:3b:ed:92:48:
         20:99:a2:8b:e1:45:e3:df:01:4c:d9:43:47:8b:20:ea:56:2c:
         20:d4:23:3a:75:ef:e5:6f:e1:ef:82:7f:6e:c1:8a:5c:b1:84:
         81:6e:de:4f:74:50:d3:e1:56:88:95:24:eb:7c:36:66:6c:51:
         ff:0c:1a:86:05:bc:38:e6:45:8e:52:a6:a1:87:6e:a3:77:4e:
         08:12:1f:6b:b6:ab:41:3b:c5:26:4a:57:62:8d:59:53:47:51:
         7e:ed:9e:a6:d9:43:23:93:a7:bd:86:98:6b:c8:b5:ed:a6:a2:
         94:91:e9:c9:7f:53:2a:50:da:69:fe:a2:d8:e1:be:f9:f2:2a:
         f3:13:96:3b:c6:e9:e8:3e:e0:08:18:eb:18:ca:9f:64:3c:ca:
         25:1d:2c:58:7d:cf:70:f9:06:cd:d9:e5:03:52:22:41:f7:c6:
         7b:3a:c6:3a:db:93:43:fc:69:55:e5:5a:29:f6:2d:cb:1e:ee:
         79:45:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----