Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File:                     VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier:          RvV8WxsMJpX6+3SieyrilQ0+SZQ+UbYuGFquOQoStnI=
Subject key identifier:   B0:F9:E9:7D:BC:3E:AC:68:13:AF:B5:B0:9F:92:DA:40:A1:37:BB:38
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer:       /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial:       0194BC3C2923BF0B5F98870923874CFD8416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number:          0BCA
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: 8JQcsysiOnri0kQHCtlxZWtskIc.roa (hash: 8uXbEXZddA7mrG0hLFGoh/Y7FsDHWEPfJhu2xn7axAU=)
                          2: Tonts4kP6Udz3-COJ0rpSpZMwoY.roa (hash: 1JB1btxTDJRO9s+lBZ2dImX9Ez8AqVDwUydfTozvsGI=)
                          3: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: EeBzP3byWCNx/F/b/TGuGBpwrmPBtQGZmvVbsUD648Y=)
                          4: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (hash: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=)
                          5: zCMQvVyUHIhgqGjnqqS6hG87t8I.roa (hash: tlgi6dRpTD9+AZIQcf0rkaPRaq7iQdTH9FHfASRSnUA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:29:23:bf:0b:5f:98:87:09:23:87:4c:fd:84:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=b0f9e97dbc3eac6813afb5b09f92da40a137bb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:59:c2:59:17:2d:67:b8:68:fd:44:90:15:
                    3c:8b:1c:cf:2a:d0:bc:00:7c:b0:77:84:4f:8d:58:
                    10:af:57:49:ed:e4:51:ec:6b:c6:c5:f3:55:eb:52:
                    ad:35:c8:66:00:69:3a:dd:c9:d2:4c:24:2e:5f:e4:
                    e9:44:35:3a:c6:c3:bc:83:5c:63:2d:4a:aa:e6:0d:
                    03:d6:27:b4:f2:09:e2:44:a8:f5:7e:ef:dd:5a:da:
                    b4:bc:1f:24:fc:77:d5:99:c3:54:e0:47:1e:7a:5a:
                    fc:30:3e:19:0c:28:b3:6b:92:ec:c5:4d:66:dc:3e:
                    56:17:8a:e2:0e:94:ef:8e:50:64:04:61:70:07:5d:
                    c9:e9:4b:d1:2a:60:fa:c2:1e:e2:e8:62:d5:94:82:
                    96:f0:b1:73:fd:22:57:0f:8b:54:28:1e:ed:75:27:
                    b2:6f:84:7d:21:c6:cb:b1:a0:78:c7:e6:3f:cd:1d:
                    23:8e:d9:20:f9:e3:96:7c:29:69:95:ae:db:8c:34:
                    f9:be:41:8a:b4:78:4f:69:c4:f0:b1:df:84:1f:ff:
                    b5:61:7b:47:5b:20:62:9c:a7:6f:9a:3a:1f:20:30:
                    63:14:99:55:d0:ac:c5:c9:ec:58:98:8f:e1:31:fd:
                    b3:07:16:85:d2:32:87:d6:0a:6a:1f:42:e4:fa:b4:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:E9:7D:BC:3E:AC:68:13:AF:B5:B0:9F:92:DA:40:A1:37:BB:38
            X509v3 Authority Key Identifier:
                keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:b9:31:8a:00:d6:12:92:5a:06:63:31:c5:b8:39:48:a0:
         d0:ef:eb:0b:1b:d9:2d:cf:07:fd:07:15:53:dd:dd:5a:48:27:
         03:d9:12:24:eb:98:ce:9b:4b:d1:4b:7a:91:3e:aa:68:45:6b:
         84:9f:88:19:b1:13:62:13:f3:51:37:73:5a:d0:89:fd:51:26:
         ea:95:17:17:b3:5d:3f:d9:76:be:6d:19:bc:b3:bf:c3:37:aa:
         53:07:0e:ee:0d:4c:86:ee:7d:07:01:16:e3:5c:e3:26:a9:27:
         04:8d:c9:b0:82:a4:30:6c:72:a6:33:12:63:55:da:6a:80:5e:
         20:04:4e:35:aa:e8:87:16:cb:0e:8c:13:68:9e:b9:d2:c7:02:
         e3:45:d7:86:44:9a:84:fc:c6:10:35:e4:98:95:fc:c3:8e:20:
         b1:8b:20:77:72:ff:6a:68:12:3f:12:8e:3f:c0:25:d3:81:b6:
         15:70:15:65:12:7b:d7:6a:7e:87:0c:9b:58:9a:fb:2b:d9:e8:
         cc:36:08:4c:03:6b:4d:30:30:62:0a:2b:75:ca:e3:82:db:fe:
         66:55:07:60:4d:a0:77:5c:d2:b7:08:29:43:97:a3:8e:67:25:
         cc:1c:5c:33:30:8d:59:5c:73:4e:df:b8:64:35:79:6f:82:37:
         be:79:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----