Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File:                     JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier:          9RU/1BH2A1HzfbDtznSbAmMhbGahJ53NsDqRgcErZ3U=
Subject key identifier:   11:00:92:01:D6:D8:AF:8B:EF:7B:74:DC:47:F5:C2:BD:C4:77:D7:A2
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer:       /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial:       0194BC731CD15F6A0996BF0EDE35CD32FCE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 13:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:48 +0000
Files and hashes:         1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
                          2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: B2t2FVC+/YvtTw3uGzTCL9vVBg0/lomEL4OpHzP6mZY=)
                          3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
                          4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:1c:d1:5f:6a:09:96:bf:0e:de:35:cd:32:fc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
        Validity
            Not Before: Jan 31 13:00:48 2025 GMT
            Not After : Feb  1 13:00:48 2025 GMT
        Subject: CN=11009201d6d8af8bef7b74dc47f5c2bdc477d7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:e6:3a:61:e4:df:3f:bd:f6:74:0c:f9:c7:
                    b7:bb:37:59:7a:67:8c:51:92:17:a3:c1:1a:32:f0:
                    dd:4b:6a:f4:08:77:0f:92:52:36:06:73:f5:53:7b:
                    ba:72:6f:51:2f:cf:44:07:63:60:62:04:08:1c:db:
                    5f:8d:f4:ba:f6:d0:58:e2:3f:e2:6d:69:57:3d:81:
                    d5:52:e0:36:57:e8:d0:74:93:9e:6d:d1:91:6d:f2:
                    cd:d6:ec:ef:30:6d:28:74:be:ba:29:74:73:46:22:
                    1b:f0:cf:94:00:89:bd:cf:df:57:c4:ff:bc:1f:84:
                    44:33:89:3b:5d:e3:86:c2:32:07:67:7e:30:90:b6:
                    e8:73:07:84:7c:f6:ed:7f:65:2c:6e:b6:9e:66:d7:
                    63:cf:48:01:dc:43:d7:25:fc:2a:a3:86:9e:dc:43:
                    f5:04:96:c1:c5:0a:7e:97:8b:a0:1a:38:90:4c:df:
                    6e:90:d4:25:18:c5:fe:00:df:57:bb:8d:43:9b:c0:
                    88:17:17:c3:d3:d6:8a:99:3a:3d:f2:68:f5:ac:89:
                    aa:56:a4:ef:11:dc:ab:22:c1:c4:b8:aa:47:43:d1:
                    e4:b2:e2:0c:67:a2:82:87:d5:4b:3f:29:90:23:a6:
                    de:85:bc:a6:91:bf:d9:56:f1:74:93:4c:08:34:46:
                    e2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:92:01:D6:D8:AF:8B:EF:7B:74:DC:47:F5:C2:BD:C4:77:D7:A2
            X509v3 Authority Key Identifier:
                keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:fe:1e:3a:c5:63:e2:d0:56:ec:04:19:4d:2b:8f:67:e1:
         cb:0a:70:69:82:ab:19:a5:52:35:09:b2:8f:ca:7b:e1:81:bc:
         2d:fd:0f:44:97:8a:ba:32:49:0a:bd:39:12:24:1d:69:0e:dd:
         f9:cd:26:12:bc:a1:07:ab:3a:50:56:0b:e7:8c:8c:df:2d:95:
         31:72:0e:b3:10:79:58:e3:5c:b2:78:c2:6e:ee:a9:b9:bc:62:
         5a:ea:3e:6c:b9:d9:98:82:ef:55:70:1e:ad:ce:36:ab:b8:d5:
         2c:63:ac:49:75:78:1d:7f:c6:81:ce:a4:56:71:79:c2:b1:ab:
         af:8d:7a:bc:3b:3b:f1:32:08:e0:52:ac:d0:8f:a3:ae:29:0b:
         3a:4a:46:eb:2f:47:f0:4f:f0:fa:c6:56:e6:21:57:d0:db:45:
         63:d1:ca:37:a2:e5:0d:ff:57:51:d8:44:98:f9:39:22:ee:6d:
         d3:ce:77:f8:4f:99:55:0f:96:3b:8c:28:4c:e5:f0:19:7d:e1:
         e1:b3:a4:87:68:1b:ec:c7:9a:60:6e:94:ea:b4:3c:ec:48:c8:
         47:69:3b:2d:77:09:70:0a:f8:b8:9a:5b:9e:05:91:9f:e2:45:
         d4:72:05:d1:1b:b7:f8:14:97:58:d3:26:ea:c0:5f:78:13:8e:
         f9:62:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----