Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          18jgdpFVXlakiPcG8RR5ufb7COwez2rw7TFmCyPSmj0=
Subject key identifier:   58:F0:FC:2C:A6:34:D5:4B:59:04:26:03:33:76:5D:62:30:BB:34:58
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       0194BCA9F705986E0FF68C76D1A83B3493F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 14:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:42 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: yLzQa5tKLxjxt1ZlBnDwe/16PBdWpTTO2rA7JfqzoRk=)
                          2: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=)
                          3: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=)
                          4: i0nThbwdezW0AO7pmekkEJjld0U.roa (hash: A1bHJVolhok5D0oj17VJpul41EQExCRaiyi6t8ZnkFw=)
                          5: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (hash: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f7:05:98:6e:0f:f6:8c:76:d1:a8:3b:34:93:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Jan 31 14:00:42 2025 GMT
            Not After : Feb  1 14:00:42 2025 GMT
        Subject: CN=58f0fc2ca634d54b5904260333765d6230bb3458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:bb:7b:30:fc:0f:9a:57:2c:78:64:64:df:
                    f3:1f:85:d9:28:bc:b7:89:c8:c4:c1:48:52:27:63:
                    45:da:1e:fa:03:29:8f:44:ad:9e:35:21:3d:d3:a3:
                    a9:56:cd:7b:2d:2b:ac:66:e6:1b:66:e3:87:6f:5a:
                    7f:96:b9:06:0b:99:c5:34:cd:7d:77:18:ee:7a:18:
                    2c:6c:c3:c1:dd:a9:53:d8:b9:8f:a6:bf:02:9c:a2:
                    3c:50:8e:62:57:37:4a:c2:90:d6:c6:5f:aa:53:02:
                    12:76:dd:e1:a1:a1:b0:54:42:22:95:d5:62:8a:d9:
                    dd:b8:da:2c:d1:de:e8:7f:18:d3:e3:eb:1c:cc:4d:
                    6a:aa:df:06:77:f1:3a:74:1d:de:2e:c0:51:2a:66:
                    40:72:bf:c4:7c:ba:b8:eb:3c:bf:34:bd:4a:d8:39:
                    61:fe:49:f9:9a:39:46:54:b4:69:fd:d6:53:c5:14:
                    46:aa:a4:12:ca:4d:d3:f4:b1:e7:c8:a3:67:5d:f5:
                    07:77:87:e8:60:c0:7a:bc:51:c6:d0:4a:0a:48:7c:
                    95:5d:26:f2:9a:9d:7e:a6:01:6f:bc:08:62:32:15:
                    0e:7e:0d:b1:ba:f5:e6:0d:e7:ef:df:2b:b6:21:d1:
                    94:14:2f:e6:95:3a:c8:fb:61:17:f9:42:93:ba:32:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:FC:2C:A6:34:D5:4B:59:04:26:03:33:76:5D:62:30:BB:34:58
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:29:f9:c3:41:19:23:d7:08:80:e6:97:94:6a:ca:e8:6f:75:
         93:c8:c4:e9:c6:1c:0a:91:a7:c4:38:93:0c:68:6d:e3:e1:2b:
         ed:40:23:79:e5:df:91:b9:61:bd:db:a7:85:43:c5:82:24:7e:
         16:bb:5a:0f:66:f2:f8:15:ec:51:2e:58:9f:6f:91:97:50:58:
         71:7b:9b:3a:2c:e0:6c:d0:1f:6d:a6:dd:92:da:ee:ec:23:c8:
         62:bc:33:ab:5c:8a:ea:04:4d:3a:05:ca:82:07:30:c2:ed:e4:
         3c:0a:72:d1:ff:95:9e:b5:85:47:ba:f0:b5:9d:8b:59:4c:02:
         03:98:cd:b2:46:7d:ba:bd:27:ae:6d:4c:47:f6:ca:e5:a4:0f:
         a1:90:b9:d8:50:24:dd:82:f3:39:87:c9:c7:5c:aa:af:4e:f5:
         3a:66:51:21:15:08:d7:af:df:25:1e:f0:90:08:9f:db:51:f5:
         53:26:aa:1f:a3:91:5d:e3:cd:af:06:68:d6:e7:93:12:17:82:
         6b:2f:bd:b1:1c:5a:d3:44:75:14:19:ee:e1:05:fd:0f:30:99:
         c5:d8:07:04:a4:98:ec:ac:db:08:26:a4:e5:da:0e:b1:50:6d:
         08:1c:f2:1f:d2:9f:13:8b:ff:02:26:b7:09:9d:7b:4a:0f:e1:
         61:f7:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----