Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File:                     gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier:          KG7CsOrgR7H8VmqfhKYt+ZwyMA39FOHP708wROZe+vw=
Subject key identifier:   59:3D:99:F6:31:40:3C:29:5C:54:45:F4:25:99:C2:FD:A3:92:C3:97
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer:       /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial:       0194BC73224FCE48470060C8DDD736138FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 13:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:49 +0000
Files and hashes:         1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
                          2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
                          3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: Wk9n3HJov8yfbQbtloH3qHjAhl2ycTiaosw1OSa9xxc=)
                          4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
                          5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:22:4f:ce:48:47:00:60:c8:dd:d7:36:13:8f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
        Validity
            Not Before: Jan 31 13:00:49 2025 GMT
            Not After : Feb  1 13:00:49 2025 GMT
        Subject: CN=593d99f631403c295c5445f42599c2fda392c397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:c3:16:5e:62:2d:a5:30:60:80:dd:d2:71:
                    a9:05:bb:54:6b:d2:3e:eb:69:5f:02:5f:e4:41:a5:
                    f4:72:eb:71:0a:60:e0:f5:ca:43:94:ab:48:ac:d7:
                    75:42:60:1b:65:26:ab:a7:56:e6:0b:e7:af:b5:b5:
                    a1:d1:a6:1a:33:85:79:f9:3e:f4:5c:7a:76:de:ba:
                    48:4a:93:8f:cf:93:77:91:72:0d:a7:b8:15:b0:f7:
                    0b:b9:e8:93:d6:52:b6:bc:df:ae:62:27:cf:25:1b:
                    56:22:b9:80:32:c4:45:61:03:0f:6f:3b:ef:d2:24:
                    bb:a2:b7:fc:87:17:26:42:b4:dc:4e:6e:ed:8d:2d:
                    b1:9c:99:8d:8b:e2:48:02:e8:68:f6:90:1f:22:ff:
                    f8:c0:23:4e:0f:8f:3a:66:c0:58:f3:7d:a5:45:9e:
                    8b:f9:8f:21:77:36:78:e2:85:b3:ce:41:3f:19:af:
                    a8:d2:47:c4:2c:15:9e:d5:f2:ad:de:2d:b6:71:89:
                    86:7a:fb:c0:51:c8:a9:2e:00:cd:ab:84:50:95:49:
                    50:dd:4e:21:4e:1c:20:18:d6:7f:a2:06:58:a7:c0:
                    4d:47:55:6f:4d:11:f5:72:86:96:7a:62:cf:cd:be:
                    49:4e:af:f0:8f:a0:48:4c:14:b1:d7:b3:cf:a8:78:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:99:F6:31:40:3C:29:5C:54:45:F4:25:99:C2:FD:A3:92:C3:97
            X509v3 Authority Key Identifier:
                keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9a:d6:80:06:4f:01:60:af:c4:9b:30:a9:b9:45:1c:f7:80:
         8a:ec:ea:6e:00:4e:00:ac:bd:ac:6e:f0:2a:6c:90:01:02:86:
         73:e1:3c:16:06:c5:ea:5d:a0:cd:80:d4:67:fb:a5:06:4a:1a:
         4a:db:46:ca:15:09:74:3c:67:6b:b2:2a:19:78:e4:ca:0d:3c:
         77:ca:b5:ca:05:99:5f:59:98:c4:1c:35:14:29:70:fb:6f:11:
         cc:6b:1d:25:dd:6f:2a:e9:ea:28:8b:33:d8:b3:be:19:bd:86:
         db:e4:ac:c2:a6:73:f1:a6:45:73:88:4a:3c:0c:42:90:e5:50:
         de:ca:e3:1b:00:af:ee:6a:1e:70:a9:56:61:01:29:2d:e2:03:
         86:ae:a2:f0:91:ef:90:00:28:d1:7a:7e:54:4f:bf:ff:30:34:
         e3:58:b6:dc:96:ae:00:92:18:7b:42:bb:2b:0c:df:0f:b9:79:
         08:3c:97:a8:25:e4:60:b2:82:97:8e:99:b1:b4:30:9d:87:fd:
         4b:66:d9:7d:a8:97:1a:b7:25:31:77:b3:d7:3f:f3:84:30:4f:
         d2:52:73:54:f4:9d:b3:7f:bc:30:2f:62:db:87:ee:78:4c:b7:
         c3:da:7e:f8:c9:ab:91:7f:c0:f8:f3:b5:99:c4:b9:67:06:1f:
         d3:de:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----