Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File:                     87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier:          wwVHM+BpP1hPprfLsGgGH6Q+gmkUsVsg4uk5pTtGU8g=
Subject key identifier:   52:21:DE:E4:13:84:32:D8:DC:B0:BD:56:B6:CC:5A:D3:DE:EB:B6:43
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer:       /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial:       0194BC3C2E2BBDF4994AC4BCA510DF5DB596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:47 +0000
Files and hashes:         1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
                          2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
                          3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: cIR38j7OadehPZYVAggHk8OhiuXxe9/BZq0/4eXYEQE=)
                          4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
                          5: KsYncnghaxDA5x4UiPyWsOmG9RM.roa (hash: UI503uf1Ey46JuitcxCO88jhsuoBiLbllr+HxyvpTkA=)
                          6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
                          7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
                          8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
                          9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:2e:2b:bd:f4:99:4a:c4:bc:a5:10:df:5d:b5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
        Validity
            Not Before: Jan 31 12:00:47 2025 GMT
            Not After : Feb  1 12:00:47 2025 GMT
        Subject: CN=5221dee4138432d8dcb0bd56b6cc5ad3deebb643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:b8:58:7b:85:40:87:d9:8c:96:d1:b3:d4:
                    28:f7:37:13:2a:83:7a:df:9e:0b:0a:a8:9b:2c:32:
                    5c:dc:45:a9:e4:83:75:bb:1b:f0:d5:9c:95:4a:5d:
                    03:cb:ae:dd:b7:e1:90:04:02:ef:ba:4b:63:db:64:
                    4b:29:69:a1:34:fd:fe:65:cc:e0:f2:36:d3:66:04:
                    21:b8:e0:ec:e5:b7:6e:d2:bf:ef:2a:15:52:b3:0a:
                    fc:74:c3:4f:dd:f0:d3:47:03:5d:9b:25:98:de:69:
                    df:07:98:62:34:51:cc:cb:1c:51:aa:fa:2e:62:f1:
                    31:3a:92:b3:f3:f8:34:ae:5e:ea:bc:99:25:54:7d:
                    95:54:1a:0d:bc:78:61:5b:11:52:7d:39:d3:36:74:
                    47:0e:70:69:69:0b:7c:91:8d:a5:62:ec:f8:c9:74:
                    06:c3:5d:61:42:ca:c8:54:13:57:30:0b:c0:e0:75:
                    b5:38:f3:21:a4:47:9b:7d:70:cc:28:2f:dd:bd:22:
                    23:da:b3:52:42:ef:1b:77:58:b4:31:c1:7c:15:79:
                    93:20:b1:06:e7:59:f4:02:ff:ad:7a:a4:78:45:87:
                    39:9b:cf:0d:61:1c:07:cd:33:6e:ab:af:4b:7a:d9:
                    18:6a:90:15:63:13:63:ac:ca:c4:eb:5a:3e:1f:29:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:DE:E4:13:84:32:D8:DC:B0:BD:56:B6:CC:5A:D3:DE:EB:B6:43
            X509v3 Authority Key Identifier:
                keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:ec:6b:b9:02:73:fc:1f:6a:38:0c:27:26:e1:1a:fc:48:
         cb:f2:0e:45:ed:05:0a:7d:f5:fc:40:5b:18:db:3c:54:5f:bc:
         a0:6c:80:8a:52:a8:97:fe:1e:47:1a:22:7a:7d:a3:51:c2:22:
         61:6e:a6:5e:c3:1d:54:b9:7a:1a:1d:d0:d4:09:3e:cf:db:86:
         dd:92:0d:51:c0:bf:67:86:03:a1:0b:00:40:f4:b3:26:cb:d6:
         a4:88:9b:21:a0:8d:8e:cc:42:7a:94:16:ff:d5:3f:04:59:81:
         b5:af:0d:2f:b2:4d:d5:7b:98:e0:e1:73:37:02:f4:92:10:6e:
         7a:9a:23:38:3b:a5:35:68:b6:5d:c2:94:4e:2f:0b:26:4e:72:
         2b:57:fd:fc:3b:9e:7d:65:79:7b:f6:5d:57:f2:96:03:6d:b8:
         2b:7c:bc:d3:e1:ea:90:6d:f5:c7:76:b6:ff:6e:9a:b9:51:35:
         84:16:6e:a5:be:3c:10:61:f6:43:70:a2:3f:80:48:32:b8:64:
         c8:01:c8:32:17:27:61:49:75:ac:5b:bf:b6:7c:f1:c7:79:24:
         84:ae:2f:ca:8d:13:cb:3f:d2:cd:e2:91:e4:3c:55:08:04:fa:
         2a:c5:a9:59:94:b2:72:91:cf:59:14:eb:f2:64:de:60:75:4a:
         55:36:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----