Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
File:                     pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft (raw, json)
Hash identifier:          lY8YCIwnuj43+f48sJH7ntqtxpf3zPcbZGcBcH4ITQ8=
Subject key identifier:   3F:CC:BE:BD:F8:6B:AC:E5:F0:83:C7:65:1F:E8:FE:52:CD:74:B8:32
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Certificate issuer:       /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial:       0194BD17E9683A55AF18880D98CC8BCF8899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 16:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:48 +0000
Files and hashes:         1: C68Jy4vS9ZhrosrQ0hLHm1uIuZY.roa (hash: KriDQtKp0/6qr4HNTZ8vH7ju161mMdjIkNUJn2wDbds=)
                          2: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (hash: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=)
                          3: aLyfJT6We20ULVg1UbujnE5UVaI.roa (hash: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=)
                          4: lixJMjo5-_bNmfYtadlmrrGpsCg.roa (hash: OW5E61Tvo1LN0X4Q2KSxHXhfLjcuHjhFHfnXTwr/DjA=)
                          5: pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl (hash: MoHtxdME1V7tsOSU64bGav9MIaYQuT0oXOyeqlwU1YQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e9:68:3a:55:af:18:88:0d:98:cc:8b:cf:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
        Validity
            Not Before: Jan 31 16:00:48 2025 GMT
            Not After : Feb  1 16:00:48 2025 GMT
        Subject: CN=3fccbebdf86bace5f083c7651fe8fe52cd74b832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:1b:38:59:cd:4d:a6:50:1a:70:23:42:f4:
                    e2:c7:a8:f2:73:9e:bb:31:8f:8b:66:d1:77:ff:6d:
                    05:40:df:b2:cc:b6:3d:71:d9:c0:fe:e7:a9:24:cc:
                    10:2c:55:ae:64:59:83:6b:15:ee:70:d8:08:57:ac:
                    88:11:c1:e4:09:2f:c0:44:74:27:a7:0b:be:ba:47:
                    56:61:dc:81:51:21:75:3c:2c:ba:27:00:3e:4a:d7:
                    23:ad:67:5b:f8:00:7f:9f:e7:04:f6:55:53:83:84:
                    3c:3c:ce:2e:7d:a0:c9:52:99:2c:55:25:06:2e:a3:
                    f6:57:82:f0:6b:40:fc:a1:08:cf:81:6b:a8:a0:01:
                    ed:06:46:bf:05:c5:e5:76:ff:a5:c2:7b:5c:66:a1:
                    ad:fe:bf:f2:fc:b2:b2:de:8f:dd:06:1e:18:c5:e4:
                    8a:37:bb:cd:11:9e:4d:a1:c3:c4:bd:4c:ef:a3:23:
                    96:5e:14:62:f9:00:6a:5c:2d:68:ff:63:83:37:bd:
                    68:e4:be:33:15:3e:76:c3:03:34:16:ce:bc:88:86:
                    b5:bd:1f:5a:8c:8e:3b:14:69:a5:ea:f7:76:04:b0:
                    04:78:1f:18:05:48:66:51:98:60:00:85:b0:5c:9d:
                    22:75:48:d9:89:34:68:94:31:fc:fa:ba:51:ac:3e:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CC:BE:BD:F8:6B:AC:E5:F0:83:C7:65:1F:E8:FE:52:CD:74:B8:32
            X509v3 Authority Key Identifier:
                keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:90:1a:92:d9:9f:fd:a7:81:0e:73:c5:f3:8d:de:3b:11:d8:
         0f:55:62:8b:8b:f2:ce:b8:06:c0:2f:29:24:ee:94:45:54:da:
         f0:5f:2b:ee:85:49:a5:c3:73:4b:b4:33:60:91:30:2d:b9:ea:
         25:96:69:63:5f:b4:4c:59:77:b8:0e:87:c8:9d:b6:90:1c:4c:
         ea:54:bf:2e:4d:c5:22:71:38:7c:d5:aa:96:6e:28:d5:ed:06:
         d4:83:50:5b:d4:d5:54:4d:67:0e:8d:dc:21:cf:55:32:a9:fd:
         6d:ee:4c:da:59:2e:3c:7a:83:7c:12:74:01:76:d7:a7:d9:f0:
         cc:eb:b2:d2:bf:68:e8:da:94:b7:f5:4e:c6:48:38:76:c3:80:
         6d:d3:e4:bd:b6:3b:16:8b:b0:67:3b:09:a1:ac:6c:9f:4d:2f:
         ce:2d:d2:53:97:d5:fc:eb:a4:d9:be:b0:36:e9:37:9a:aa:e1:
         77:82:fc:75:c0:52:a9:cf:71:cf:8e:bf:b5:47:06:7b:ce:2d:
         c9:39:0e:69:c8:f6:da:d6:20:ce:e4:8c:c0:fa:88:63:b0:5e:
         ea:04:e8:a8:71:5e:c6:21:96:ce:86:0f:3c:0f:3e:fb:c5:42:
         9c:1a:ea:78:8b:02:0a:ff:63:6c:9c:3b:10:c4:45:09:5a:b8:
         a8:49:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----