Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          /02WVEu5+HC0pj3U3pZwWtdR56gDhMBERxhDZ7fxTpk=
Subject key identifier:   1A:68:D3:38:8A:F5:73:87:BF:FB:5B:8B:2D:4D:AF:14:F9:FA:69:8F
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       0194BC3C2486C276F41CD109CC9B2537D2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 12:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:45 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: ODRdjuTQrtgCicVB3EHpvGXdJec7QxC3TJ4wtcLTrtc=)
                          2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=)
                          3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=)
                          4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=)
                          5: UKl3alsL8yH60mBrWhBQKGsUsvQ.roa (hash: NEBoD+GODx6lckBJaJWB/4++/wxgc2RbKTzZ6lIXc7I=)
                          6: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:24:86:c2:76:f4:1c:d1:09:cc:9b:25:37:d2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Jan 31 12:00:45 2025 GMT
            Not After : Feb  1 12:00:45 2025 GMT
        Subject: CN=1a68d3388af57387bffb5b8b2d4daf14f9fa698f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:c8:27:5c:ea:cc:27:ef:9d:04:c1:58:cb:
                    ad:f4:44:6f:54:cd:bc:fd:f2:c0:41:f6:de:ca:98:
                    c3:0b:8c:74:64:1d:d9:1b:ff:d1:df:82:4f:f9:14:
                    14:9e:7a:f3:ea:e5:ea:f8:44:1a:8b:66:75:29:4f:
                    5c:79:d0:38:fa:b1:c4:c9:50:c3:12:ae:19:2d:45:
                    01:24:c4:f9:7e:7b:0f:4f:59:42:72:05:14:11:85:
                    7b:c0:8a:6d:ba:80:e1:2e:04:e4:19:fa:6c:2a:ef:
                    05:8e:85:f6:0c:fa:a8:f6:1a:ea:ab:09:1b:ba:3d:
                    1f:cd:40:82:d8:6d:82:10:10:22:08:53:71:05:8b:
                    eb:ca:9d:1c:84:c3:32:13:4c:17:1f:5d:07:d8:72:
                    87:fa:d3:ba:55:fc:b7:de:1c:a1:f9:56:96:c6:1e:
                    4e:02:48:b5:0a:45:a7:5c:3e:d0:6a:60:f0:0e:a9:
                    57:05:a3:3d:ee:ff:20:c5:3e:1b:b1:0c:19:b8:bb:
                    af:f1:ce:c9:d4:2e:ce:fe:ca:b3:8c:17:f2:8a:24:
                    bb:78:51:ac:22:e1:a7:bc:9e:34:11:b5:2b:d3:b6:
                    05:24:39:fb:0c:fc:2f:41:73:96:f3:97:c9:f0:64:
                    43:b2:48:15:f9:56:60:3c:17:50:85:1b:9e:cd:b4:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:68:D3:38:8A:F5:73:87:BF:FB:5B:8B:2D:4D:AF:14:F9:FA:69:8F
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:95:af:e2:fc:1d:b7:74:e9:ad:4d:54:8f:12:24:57:52:
         dd:e8:f5:e8:52:69:a8:ef:88:98:21:a0:a5:9c:96:6c:0f:68:
         63:02:62:76:17:b0:40:d2:ff:55:ff:ba:01:71:42:90:d3:39:
         b3:59:08:61:ac:4e:b3:7b:83:45:8e:ec:78:2c:6e:f1:a3:e0:
         75:f6:eb:19:d8:21:f6:5b:9a:1e:27:25:c6:80:ec:42:c2:81:
         08:32:c2:05:51:bd:bf:d3:6a:38:50:a0:93:aa:cb:76:a1:36:
         34:2c:b1:ef:de:fe:3e:3d:b1:1f:17:a8:3f:67:9a:fd:7e:82:
         1c:dd:48:6b:1e:d4:83:81:3b:30:06:fd:53:00:da:37:59:f0:
         fc:a6:46:ff:b8:aa:9d:01:b3:aa:78:f5:90:24:a3:80:ae:af:
         75:64:a6:49:17:62:69:bf:fc:ea:9c:1e:32:26:da:28:9e:4a:
         5a:e2:b4:39:94:d8:4c:d1:2a:73:ae:7a:c3:5d:b9:fe:f2:ba:
         58:b6:7e:f3:68:73:d5:f1:c6:4d:d5:90:3f:18:f5:40:f4:a5:
         b7:ef:25:16:a4:ad:90:ce:21:ea:c7:c8:1a:11:e2:47:ce:0e:
         ff:31:09:3b:d7:a2:33:7b:ef:63:c3:d9:e6:b8:40:15:32:de:
         db:4e:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----