Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File:                     thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier:          gYJNIpINHDliBp2W+egaZNSVfY4bUkY1CPDkz8TXVk0=
Subject key identifier:   13:59:FD:20:1B:67:41:6C:2B:D9:58:BA:AA:5A:AD:3D:79:06:8C:93
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer:       /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial:       0194BCE0893ECE039CE01A52475160361EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number:          086F
Signing time:             Fri 31 Jan 2025 15:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:19 +0000
Files and hashes:         1: B1zjeI12z7rKzJjEV2xk7Kx6YeQ.roa (hash: r2WGLNl7mqhMqh1kFVBikeJbCxyFFZKze+pH0m8/Lxw=)
                          2: J0SmJvo_DblXKy-6WzDl514uI_0.roa (hash: q/+Q30dvsgavMpRf9kHRcZOPpYacKoQhzHpVoqSh0+Q=)
                          3: oE2klgKXcU6ZFBaxD5Ye5dFs4b0.roa (hash: xVrVcQ4eqe5NnaROnCloWgSzhvwXlAPv4n0sYt9CbFA=)
                          4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: TYz3fbKKkPcq7COwwRMW+YTeKMalLdr66VIK0RbBCPU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:89:3e:ce:03:9c:e0:1a:52:47:51:60:36:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
        Validity
            Not Before: Jan 31 15:00:19 2025 GMT
            Not After : Feb  1 15:00:19 2025 GMT
        Subject: CN=1359fd201b67416c2bd958baaa5aad3d79068c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:ed:97:02:55:b7:94:8f:78:9c:b9:61:1b:
                    fb:bc:ab:29:4b:30:76:c2:f0:08:29:82:ad:40:43:
                    6f:9d:5d:6c:25:97:6a:e0:80:ac:d7:df:b4:5b:3d:
                    a3:cf:22:4e:50:ca:0b:4d:00:3e:49:fb:2b:a8:2a:
                    ea:65:89:ea:38:1b:ec:b5:37:74:da:41:64:d4:54:
                    f0:32:92:3b:71:90:21:5b:0e:be:0d:a7:0b:96:99:
                    85:3e:16:f6:16:ce:e3:7f:62:14:f9:bf:d5:1e:0a:
                    71:a9:d0:1f:c1:92:ed:35:3c:56:48:15:72:76:85:
                    91:c8:31:af:5c:e8:80:07:cc:c7:1e:a8:e0:e4:8b:
                    ee:c9:cf:91:4b:56:e7:9f:08:55:9e:00:78:e0:b9:
                    c0:6e:99:67:20:d9:19:dd:cb:f6:06:e5:a7:b9:54:
                    d2:f9:ff:1d:86:b8:50:bb:3c:ea:64:b2:95:1d:1f:
                    49:a6:f3:62:51:3b:49:5f:fd:d3:4c:f4:e3:94:d7:
                    9b:0b:b1:8b:d4:68:cd:31:a0:8d:4f:6f:b1:6b:f3:
                    62:29:11:b8:ff:42:55:ae:71:7e:ea:24:11:85:4f:
                    48:64:73:dc:73:2c:c4:fb:78:0c:b0:3f:c1:14:0b:
                    0f:7b:fd:65:11:53:d8:05:f2:b2:36:bf:66:29:ca:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:59:FD:20:1B:67:41:6C:2B:D9:58:BA:AA:5A:AD:3D:79:06:8C:93
            X509v3 Authority Key Identifier:
                keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:68:06:7c:ca:ae:da:cb:3c:a6:24:53:c2:a8:f5:ef:19:ed:
         2f:68:40:d3:d8:c6:a5:f5:17:dc:8e:08:6b:40:f7:a4:59:01:
         ea:68:ff:b2:77:31:76:11:a7:2d:52:77:e7:65:96:0b:27:1c:
         a7:81:3a:d2:63:4f:90:89:fb:66:d4:27:a7:bc:fd:ac:f9:04:
         0c:b1:4b:1d:d4:07:04:91:a9:a1:f9:b5:30:51:9d:11:db:de:
         ec:51:ea:45:f3:1d:d8:3d:d9:e1:11:c1:36:7f:e6:ca:6f:3e:
         ea:54:cd:0f:8c:bb:27:2b:47:ab:e3:be:fc:f9:27:4d:6f:00:
         5e:1b:f3:d9:b8:a0:a5:c3:58:de:34:d5:57:fc:c7:93:c7:29:
         b2:02:25:11:ea:79:17:83:03:ee:e2:ce:60:9d:b4:44:e8:a6:
         1f:9c:9f:3a:47:9d:5a:e2:61:ff:b4:bf:51:f7:ed:72:0b:b6:
         29:fd:55:f5:e7:76:b1:32:6a:3c:a9:a1:6e:77:d1:d9:e3:1e:
         99:2a:f3:80:76:5f:7c:26:7e:75:25:e0:68:62:99:e0:03:4f:
         91:b5:a3:6e:0c:de:07:70:c8:3b:75:b4:93:4b:e1:c8:60:4b:
         b8:b1:9d:9a:2c:86:c2:6d:5d:d6:a2:d7:2e:b7:ad:a7:03:bc:
         94:9d:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----