Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          7ABdGfonw0W0UevYesrfY++qny20ekKJ6eoeBfzfvhY=
Subject key identifier:   FE:6F:DA:9C:86:6A:27:2D:C9:7C:D2:0F:13:A2:13:50:F9:A2:C8:A0
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       0194BBCE726CDF4C6D0D69522349F18E2C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          1475
Signing time:             Fri 31 Jan 2025 10:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:56 +0000
Files and hashes:         1: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: DrGXBpxdOwg7eUm+2RCRc2CHbvKnnn3NAGT3zB4hJLM=)
                          2: Tpwox2GQ-yJ9HLWTRaWxH8d5qV0.roa (hash: ELzt8M4VFQ/L4bb+D2lW/LhS/rAc5G57DwvGblT3dfY=)
                          3: ZTtS_KFDYrFajwzmQlp7g4nyIEU.roa (hash: P76RIhHySXm494WDDNWzKV3HHRS7znBKKEXTc6xoFfo=)
                          4: cj3j3-bR7VQgB3gXYo2dmRq2UpQ.roa (hash: gKGZocs1spw2Gy440nE0GwLirEFHGrtOLlJSK8B32SQ=)
                          5: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
                          6: xZBog5lplSjfskEp6SSTF7tJ7tI.roa (hash: KaRE6zaPvAbeHJEM3l95UKtDEPJJQ5ALBTSoMg5Ftk8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:72:6c:df:4c:6d:0d:69:52:23:49:f1:8e:2c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Jan 31 10:00:56 2025 GMT
            Not After : Feb  1 10:00:56 2025 GMT
        Subject: CN=fe6fda9c866a272dc97cd20f13a21350f9a2c8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:a1:8e:3d:cc:3a:d7:e3:90:cd:91:68:dc:
                    42:31:00:29:ce:0e:5d:ec:7a:fc:dc:c4:b7:ae:a6:
                    22:df:96:fb:f9:f8:2d:e0:0f:a3:85:a1:0d:c7:5c:
                    9f:67:58:f4:2a:b7:d5:cc:55:6d:75:c6:8f:b8:51:
                    51:09:c9:37:e0:25:2a:c1:b5:ab:85:f2:12:5f:92:
                    f2:ae:35:cf:3c:a9:d4:39:03:a3:33:e9:5c:3f:3a:
                    09:3d:ed:5c:db:7e:38:18:37:72:91:28:13:87:20:
                    1b:a0:71:61:93:26:26:eb:3c:d1:a8:21:3b:4e:7e:
                    f9:95:9e:3a:63:40:18:0f:60:f7:ba:47:a3:67:2c:
                    80:23:64:80:e4:2a:2d:a9:b1:55:de:33:d5:b5:a9:
                    04:d4:b5:b2:37:d0:f3:d1:0e:67:76:fb:a9:00:14:
                    05:f0:4a:c0:f0:7c:99:ba:bc:b0:bc:6a:ae:ca:ba:
                    57:ec:d2:1f:70:48:9c:76:ac:72:bd:d8:4c:b1:7c:
                    c0:66:7b:1d:36:5b:85:ff:29:83:06:56:bf:f0:0a:
                    e6:f6:6d:7b:45:10:dd:09:78:b2:ee:25:87:b2:d2:
                    fa:a0:9c:9b:a2:bd:2c:5f:d6:12:33:5c:f1:68:c7:
                    b1:c7:11:9c:79:cf:9a:6c:1d:42:10:60:d9:52:ab:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:DA:9C:86:6A:27:2D:C9:7C:D2:0F:13:A2:13:50:F9:A2:C8:A0
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:0a:ff:0a:c3:2f:d4:d1:b8:0e:8a:67:a4:95:5e:b6:ac:
         c2:2a:eb:16:ff:2f:da:37:49:95:38:1f:06:c3:35:d6:63:c1:
         8b:2a:38:c9:c1:32:b2:cd:ba:de:4f:32:da:45:0a:98:96:79:
         22:2e:58:76:1b:be:25:e1:98:81:a3:19:93:da:d4:39:30:f2:
         c2:0b:15:50:00:f5:df:28:b7:84:9e:7a:17:63:d0:0a:38:7b:
         cc:12:14:5a:aa:8e:e0:6b:92:b3:3d:91:2b:03:53:91:85:5e:
         31:d9:49:61:46:ed:25:6f:0e:3b:03:da:f5:79:3c:9b:50:ea:
         37:9b:35:6d:93:36:42:33:cc:a5:50:d5:1f:30:4a:cd:3f:67:
         3e:63:b0:d9:a8:24:78:1c:33:f6:c0:47:97:38:a9:4c:d3:cb:
         19:e3:40:ed:0c:a6:45:91:e9:de:55:79:7c:f7:b0:2f:f1:b8:
         a9:29:01:fb:bc:4a:fa:f3:75:03:8e:43:fe:f0:e1:86:55:30:
         f8:34:e0:14:3a:09:73:73:93:ee:c6:d8:b4:ba:0d:84:16:32:
         38:5b:e2:12:4c:bb:1b:c5:e6:dc:67:c0:4d:53:5c:95:d0:99:
         19:09:98:bd:9f:d5:19:26:88:5d:61:77:7c:01:30:84:06:cc:
         65:8a:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----