Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File:                     U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier:          3+8YzIGuZnV4l8Tnb8VOjOdY6v7d7RapjA/PJd6ESnU=
Subject key identifier:   84:FC:1A:24:71:D0:E5:D2:89:F6:50:B4:B2:18:D7:D6:C1:CF:3B:AA
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer:       /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial:       0194BBCE3A7312F75CD51AF641A291DCB652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number:          074A
Signing time:             Fri 31 Jan 2025 10:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:42 +0000
Files and hashes:         1: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: U+x1B4dqKneB+fJ9NI0HbDGIKhCn9ctXmyQAanrF/4c=)
                          2: g-5hPmoz7dP3nMeNf-8zyzCBLS0.roa (hash: 3ADI/JnmU2jWCSq5Oyp3ZfW9QGg96OokVA1qdrppkBI=)
                          3: jdP65vqZd3Yn6U96eT8_mfZkvjA.roa (hash: ne4jP46DKtEJ9p4ZQwpnXhCV9KcXgzPhGgBO66/D1T0=)
                          4: rqlbZmhX6az-9-fg97NcIUHnUrM.roa (hash: VaAY7HNRDIpkX6LMYIaC1zA2JriB1tOOLhUTcCXd3bE=)
                          5: uldn70CmsoO8mEjXDA2qsH171BM.roa (hash: sF3Le5y5D/xahF9JJgZ52rEEuG9V89PoQt2h37YZGwE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:3a:73:12:f7:5c:d5:1a:f6:41:a2:91:dc:b6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
        Validity
            Not Before: Jan 31 10:00:42 2025 GMT
            Not After : Feb  1 10:00:42 2025 GMT
        Subject: CN=84fc1a2471d0e5d289f650b4b218d7d6c1cf3baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:d5:28:9e:0a:71:f7:a5:5c:47:ed:6b:fe:
                    87:27:1f:58:fa:b4:4b:12:99:e8:50:8b:09:64:3b:
                    73:4a:8c:01:d3:ab:9f:72:d6:5b:fb:d4:70:9e:ab:
                    42:87:04:15:f0:c1:17:02:fc:69:fb:f0:d1:15:3f:
                    85:bc:e3:57:d7:79:af:97:4a:5c:23:99:38:2c:c0:
                    26:b1:7f:1f:13:18:88:bb:ef:10:7d:22:75:d7:98:
                    36:1e:b1:41:cb:18:12:10:18:b0:82:86:18:e4:8a:
                    e5:38:54:0c:ef:51:79:4b:64:f7:2a:6d:37:af:66:
                    30:e0:2c:ae:16:d6:a7:eb:52:0a:43:84:70:78:0c:
                    4a:1e:c7:9b:59:1b:4f:bf:70:82:68:a0:b2:b9:4f:
                    1e:25:bd:5f:b6:aa:6a:10:95:30:ee:89:e0:ec:7f:
                    39:56:bd:02:18:a9:f6:e2:90:c6:48:12:a6:7c:56:
                    01:03:08:e5:ac:4d:60:88:7b:61:ba:f3:3e:f3:9b:
                    b6:95:8b:5a:6a:1d:5c:d4:31:0b:61:92:7a:60:23:
                    d9:83:6d:09:8f:67:58:76:7a:dd:28:e4:96:a2:cd:
                    4a:19:2a:69:65:85:c3:26:7b:58:2a:9d:94:c3:9e:
                    13:ef:51:cc:cd:85:a5:1c:da:90:26:6e:b7:da:7d:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FC:1A:24:71:D0:E5:D2:89:F6:50:B4:B2:18:D7:D6:C1:CF:3B:AA
            X509v3 Authority Key Identifier:
                keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:69:0b:86:c9:b8:8d:c1:39:db:58:a2:58:9e:04:96:a4:
         80:9d:ac:2a:15:4b:14:3c:71:48:60:60:d8:c9:26:85:74:8d:
         c1:b0:60:8e:b9:9f:3d:c2:d1:39:af:23:b7:b4:0a:67:d8:40:
         b1:96:15:80:3c:4c:f3:40:b2:96:36:8d:da:a0:fb:e7:e3:0e:
         05:03:af:d7:d9:a8:93:8c:11:05:05:00:fe:3c:5a:84:02:f8:
         18:d0:cf:5e:c0:73:d7:9d:cd:7d:8f:24:ca:a6:24:e0:73:63:
         97:aa:4a:4b:33:47:94:b2:d7:33:ea:89:ed:f8:83:cf:56:80:
         4f:fd:9c:f8:a9:09:31:16:c8:74:f3:7b:1c:62:85:d0:bb:26:
         d1:3d:a8:46:b3:f3:76:8a:da:a7:ee:18:72:9a:a9:ad:00:2c:
         a5:d2:4e:b1:e0:65:1b:7b:0b:78:45:54:ae:d9:a2:28:af:c2:
         07:78:3d:c8:60:1d:62:63:51:ec:8d:c4:8e:95:19:16:a0:fd:
         3a:62:24:e9:89:59:fe:53:e2:3b:f8:34:bb:41:76:31:84:f7:
         a5:dd:b2:55:7f:cf:7d:13:5a:b3:48:d6:4a:56:3d:43:14:74:
         56:2c:95:c3:c5:01:0f:ec:4e:9d:08:cd:2e:cc:7f:72:ce:7e:
         a0:1a:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----