Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          TjYrm/5NAGPJ69SlPnR6GhtA2rLOUjVgINOzvtYBe1Q=
Subject key identifier:   D1:9E:35:AB:36:BD:88:98:14:62:42:75:66:36:5B:C4:BB:C8:AD:17
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       0194BD853FF876FB628DCC7032EEB1C61F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
                          2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
                          3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
                          4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
                          5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
                          6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: DdV/Eo5SCggapeYJzLfZfr4BXqpzRaUvosFSKPFOERw=)
                          7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3f:f8:76:fb:62:8d:cc:70:32:ee:b1:c6:1f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=d19e35ab36bd88981462427566365bc4bbc8ad17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:87:4e:65:c8:ad:9f:21:9f:f7:11:5b:bd:7a:
                    15:6e:e7:9e:ea:15:3f:2c:f8:46:b0:2e:b5:64:79:
                    e6:e6:15:97:98:aa:19:03:a7:16:ea:99:01:8b:a4:
                    0c:f2:d6:09:df:4e:6b:d2:87:79:01:77:a6:36:64:
                    a1:51:19:d2:74:a8:f5:2b:a5:47:b0:82:9f:72:02:
                    f9:65:a2:63:5b:9a:8c:08:66:a4:1a:a7:78:75:a3:
                    ea:11:35:4f:9a:e2:d7:3b:34:b1:df:b5:4c:19:a8:
                    ef:c8:51:98:99:80:92:e7:5f:2a:a2:9d:c8:f1:75:
                    79:c0:7a:be:10:f7:d6:e2:5e:24:1f:2c:d1:48:96:
                    f8:38:44:6e:c2:8f:c7:02:02:33:36:00:80:6b:d7:
                    ad:1e:81:88:01:ad:ca:c8:9f:87:2a:5a:6c:82:cd:
                    22:b7:49:b6:8d:51:9b:b4:32:2b:3c:3a:2a:da:eb:
                    ea:3f:f8:02:6e:f9:e2:4b:eb:53:bc:94:cd:4c:f9:
                    d3:d6:08:20:4d:7f:47:1c:38:41:5f:96:16:0f:27:
                    35:f1:1e:f4:db:9c:b9:31:76:7c:fa:cf:c3:ce:5c:
                    1d:94:33:a9:ba:45:3e:bc:ed:fe:3a:8e:82:2a:30:
                    f5:44:9b:cc:e7:ee:ae:d3:28:90:aa:08:7d:a9:c3:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:35:AB:36:BD:88:98:14:62:42:75:66:36:5B:C4:BB:C8:AD:17
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:18:35:02:8c:8e:c4:bc:43:89:94:d2:1e:e1:44:cc:eb:eb:
         a3:e0:36:0e:81:01:2d:c2:83:a7:ce:de:77:00:76:cf:2a:4f:
         d1:83:19:33:dc:98:b3:28:e6:c9:fc:f1:88:85:41:a8:2e:52:
         9a:73:d8:fd:46:5e:47:d9:54:3b:d9:93:27:ca:03:39:a6:41:
         29:f3:36:b8:80:2e:48:db:b2:bd:65:e0:51:1f:1f:30:79:58:
         9b:02:e7:cd:eb:cb:c4:b0:ea:5c:e7:04:7a:7d:08:3e:ea:71:
         7c:5a:2b:4c:60:72:09:6c:97:02:75:79:c6:9e:c7:3c:5c:9c:
         69:34:da:44:6e:dc:78:2d:63:dc:53:f5:c1:cf:5c:68:29:cc:
         bf:de:c6:30:90:ae:e9:78:ba:90:a5:e5:6f:5b:6d:e4:78:80:
         50:43:58:a6:69:77:90:d3:1c:c3:7a:51:fd:b7:5c:ac:90:5d:
         22:c5:6b:81:a9:e3:6d:19:cb:d2:fb:d6:15:fc:50:27:f6:fd:
         d8:64:0c:dc:c8:f2:fd:8a:2f:98:d3:19:5e:1b:89:3a:e1:c7:
         6b:c8:2c:76:f6:c2:7a:7e:ec:24:1d:e4:4a:48:e5:95:94:67:
         7d:6a:5c:8f:86:20:13:f7:4d:e8:6a:6e:05:e2:6b:27:c3:49:
         e9:c1:31:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----