Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File:                     BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier:          +NunQU8oDf9rorGMzUWRXwpqu2dPij326Ke7w30gWM0=
Subject key identifier:   88:7F:72:77:B7:45:40:22:A5:E1:A7:AB:ED:86:F5:66:F4:07:C3:36
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer:       /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial:       0194BBCEF94EB44CD58A26B81B9F578CFA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number:          0D70
Signing time:             Fri 31 Jan 2025 10:01:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:31 +0000
Files and hashes:         1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: axYl2bqSXvo0SGGcYwrDMa+y3LQP6M+//L+RzBVqZnY=)
                          2: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
                          3: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
                          4: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
                          5: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
                          6: hecINikDAmK8G3Hw6ahvsRHRwW8.roa (hash: o+ggObSSPivM7xABVityZZJaZTXdzbRjqX3nGVmT/3M=)
                          7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
                          8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f9:4e:b4:4c:d5:8a:26:b8:1b:9f:57:8c:fa:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
        Validity
            Not Before: Jan 31 10:01:31 2025 GMT
            Not After : Feb  1 10:01:31 2025 GMT
        Subject: CN=887f7277b7454022a5e1a7abed86f566f407c336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:12:ae:dc:3b:89:bf:5f:2a:8b:16:8b:18:
                    d2:3d:97:74:fe:34:e8:b2:36:98:fb:e3:e3:11:3b:
                    b9:08:4d:12:17:aa:32:63:d9:fa:b8:5f:bf:4c:4c:
                    10:25:14:b5:5b:94:63:d1:c2:02:78:e8:9e:35:ba:
                    53:a0:43:14:a5:e0:c2:71:14:01:a9:58:7d:66:2d:
                    91:42:25:b1:12:5c:b2:d4:0f:ba:74:52:9b:ae:54:
                    8b:75:a7:b5:8a:dc:19:82:19:89:2b:2a:45:b1:ee:
                    cd:8b:de:ce:9c:05:99:b1:44:a6:74:7c:9e:88:16:
                    3c:68:4e:d2:31:c8:b5:fc:35:84:13:19:2b:e6:d2:
                    47:20:e2:91:3f:e7:d5:9a:d9:c2:25:3c:13:79:eb:
                    f3:d4:a7:af:bb:b7:3e:af:8d:bf:cf:94:c6:9e:24:
                    6f:a4:be:9a:ad:d6:94:83:99:52:47:76:37:7c:b8:
                    df:86:3d:e8:d6:4f:c8:f8:12:a1:d8:cd:cf:8f:22:
                    72:73:47:18:37:3f:b7:0f:55:d2:67:80:bf:24:1f:
                    ba:e2:d4:97:d2:7a:a4:97:a0:bf:9c:b2:34:e4:5b:
                    13:b9:4d:f7:77:29:77:f9:97:6d:d6:3d:7a:b6:07:
                    8b:2b:ee:dc:63:ad:85:34:3e:37:cd:00:a1:6b:8a:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7F:72:77:B7:45:40:22:A5:E1:A7:AB:ED:86:F5:66:F4:07:C3:36
            X509v3 Authority Key Identifier:
                keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:ee:96:97:bd:91:df:8c:ca:ec:ec:6e:eb:b7:91:06:5e:
         a4:27:28:a3:65:09:bb:75:a8:45:6d:fd:f8:5b:39:be:61:45:
         7e:13:0f:65:68:79:f4:da:1a:b3:27:bb:3c:c3:d8:da:89:10:
         50:e7:7a:3c:55:e8:ee:8a:2e:a5:96:53:7a:91:cc:6b:69:03:
         4f:f9:0d:c4:78:3f:00:0b:a3:f0:81:6d:13:14:54:84:a7:78:
         28:b9:f8:9a:aa:93:b2:e3:a8:a1:fa:45:37:cd:f8:6f:8d:55:
         da:74:ba:d1:69:1a:8f:d6:0b:1f:9a:16:ad:95:26:de:75:c5:
         ee:22:06:fb:a2:2b:93:c1:4e:7d:97:ee:47:f3:88:af:9d:97:
         a8:00:5a:57:96:5a:34:31:29:c1:d9:4e:e4:15:ee:41:4a:87:
         1c:d8:b1:9d:5a:59:3b:16:92:22:24:06:ed:ca:c0:44:eb:66:
         a8:bf:29:b4:99:0b:bb:fa:a8:81:77:3d:f5:ab:f7:3b:c2:31:
         49:f1:f2:e5:a5:e9:5c:4f:96:81:2d:81:bc:e4:99:f9:6a:82:
         12:5d:14:ac:6b:d9:2b:19:a0:6e:44:6c:ce:89:1b:af:d3:a1:
         e1:52:b9:00:81:b7:ef:66:b3:e2:84:3a:bc:94:81:a5:19:aa:
         47:7e:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----