Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          eihI01D6pqtQeR54BEm6GclbWr3REmLbsArVH6UKX5M=
Subject key identifier:   2E:CF:1D:C3:A9:80:80:C9:88:34:F0:8D:58:49:06:16:D9:88:40:B4
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       0194BD175ED9AFEBE632A77EF3A8A8B6CBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          12C8
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=)
                          2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=)
                          3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=)
                          4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: fWENGjOdMx9qxrszyubW9OamXF8gphyAO2+X/lq2JIs=)
                          5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5e:d9:af:eb:e6:32:a7:7e:f3:a8:a8:b6:cb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=2ecf1dc3a98080c98834f08d58490616d98840b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:18:f6:34:02:11:19:57:38:c5:8e:c4:30:
                    ba:84:7d:56:f3:b6:b5:df:33:0a:7f:02:07:bb:fd:
                    f3:86:63:0f:bd:53:83:d6:c2:43:c9:5c:17:b4:d5:
                    44:b9:de:1e:2f:2d:4a:93:1f:3f:49:93:99:5e:c7:
                    e4:41:a1:40:68:bb:45:f1:0d:73:8e:2c:10:2f:54:
                    12:dd:92:8b:e6:13:aa:fb:88:b0:5c:58:14:5a:7f:
                    e0:ec:5e:1c:90:e6:1d:82:c8:dd:d1:83:bc:ed:5c:
                    11:c4:8f:3c:10:db:8d:83:2b:06:22:28:ef:6b:b5:
                    cf:03:d8:7d:d3:c9:f1:79:fc:90:34:e1:57:33:7a:
                    5c:ef:56:97:e5:fd:d9:fb:49:78:80:d8:cb:40:75:
                    ea:28:93:f3:3f:13:62:c5:4a:fd:d3:43:22:33:cc:
                    b5:c7:8e:3f:34:af:1a:9b:28:e4:4f:bc:be:40:22:
                    0b:75:e0:70:37:d2:9a:3d:1a:2e:55:ef:b3:68:ea:
                    68:71:42:b5:d8:67:64:a6:19:cf:0f:54:fc:ba:97:
                    2d:b6:7e:5a:0f:5f:f5:d3:2d:73:ff:63:6d:ac:aa:
                    54:c0:e6:a2:86:ec:37:c3:76:5a:55:81:da:82:2f:
                    e8:cd:16:bb:26:72:54:e0:b1:1f:c9:b3:c6:89:fb:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CF:1D:C3:A9:80:80:C9:88:34:F0:8D:58:49:06:16:D9:88:40:B4
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ca:38:cb:e0:32:c8:81:c1:67:86:60:17:10:8d:0b:a1:a7:
         31:a1:8b:74:af:fc:9f:44:03:b9:e2:67:1d:d6:28:07:92:c0:
         6a:9b:c7:cd:c2:1f:2d:da:8d:2e:49:00:f9:7c:fb:1d:ff:e6:
         0c:f4:88:21:db:e7:7c:2d:e2:26:a4:fa:5a:c7:33:93:36:32:
         7a:37:64:cb:ac:30:5c:c9:03:4d:23:d6:9d:c2:6d:dc:7f:c1:
         11:a8:a6:cf:bb:c8:82:77:8f:b9:95:f3:4d:c8:36:cb:02:67:
         77:df:85:9f:43:7b:2e:52:1f:9e:3c:d1:67:6a:eb:06:bd:0d:
         b3:4d:15:b1:2e:6a:9f:2d:28:3d:80:26:61:28:b4:1b:45:b3:
         d5:c5:5a:60:33:87:21:67:57:e4:b2:ea:e3:86:50:17:07:32:
         08:ad:c9:08:a0:9e:72:c3:3d:4c:05:0f:3d:8d:88:05:74:ae:
         d4:59:62:12:e1:71:aa:51:6f:1e:79:8d:b9:b7:39:ba:a7:e4:
         15:a5:aa:09:a8:43:43:5e:c5:db:3e:27:ad:fa:97:49:12:d8:
         b4:e9:57:50:91:e8:d0:9d:91:26:8b:5f:22:39:6c:84:eb:7e:
         bb:c5:7a:4f:76:9d:d8:1d:a7:db:18:00:84:86:3d:90:4e:97:
         c5:c8:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----