Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          9CutRoJO89PiJ3LcoxTYul9Ny8++UiuYbTUiK6O/sak=
Subject key identifier:   48:52:21:5B:F2:62:57:70:99:C3:10:F3:70:E2:A5:23:51:E1:56:98
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       0194BCA9D036763C6C8EFFCE164B642CF0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          11E7
Signing time:             Fri 31 Jan 2025 14:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:32 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: kGF7W7TWJlUAiKKRdagAeg1epCeJ8iUvPmTWVVqpc9E=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d0:36:76:3c:6c:8e:ff:ce:16:4b:64:2c:f0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Jan 31 14:00:32 2025 GMT
            Not After : Feb  1 14:00:32 2025 GMT
        Subject: CN=4852215bf262577099c310f370e2a52351e15698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:60:1d:d1:75:fb:cb:fe:57:6d:5f:6e:25:
                    56:05:cc:25:d0:3e:9e:83:f4:08:7d:b9:ad:79:ad:
                    dd:4c:13:3a:ed:99:88:ba:18:26:d3:99:92:8e:58:
                    fd:5b:c3:f2:f1:d4:5a:75:d4:69:14:86:fe:b0:05:
                    39:bc:88:a3:43:b9:79:57:75:99:b8:d0:a2:81:a6:
                    d4:b3:cf:59:50:c3:52:0a:43:61:25:53:28:9d:a1:
                    4f:3c:81:36:95:a3:df:1b:b3:ff:69:d5:cf:b3:d2:
                    53:1c:22:8f:83:6b:35:f8:ae:e7:08:af:55:2a:05:
                    3c:97:30:09:32:7f:58:a7:ac:ad:ff:a2:42:de:8c:
                    e0:e6:9d:3b:4b:27:b5:77:0d:21:20:3b:a3:75:dc:
                    29:0d:7d:81:93:99:b7:8f:68:fa:02:50:0e:2c:bc:
                    3a:4f:96:af:d0:7a:96:ef:fe:4f:ef:26:60:19:d1:
                    df:b3:45:6a:c2:70:9d:14:a3:f3:9a:46:8f:24:1b:
                    45:ac:9d:84:1d:00:0a:8a:a9:0c:25:1a:ac:95:a9:
                    70:c3:4a:4f:fc:43:c0:f2:bd:ab:9f:85:8b:14:60:
                    94:7f:30:17:9d:c4:72:89:75:4c:8f:db:e7:df:de:
                    3f:82:0b:6f:5b:03:54:77:6a:46:0b:88:52:d6:8b:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:52:21:5B:F2:62:57:70:99:C3:10:F3:70:E2:A5:23:51:E1:56:98
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:c2:5e:e3:70:7b:76:b6:03:c0:99:5d:58:ec:f6:cd:2c:
         cf:9c:28:4a:d6:96:44:df:5c:28:24:b1:7a:3c:e8:de:29:7b:
         11:d8:12:d0:7c:46:cb:31:25:20:b6:69:4d:39:4e:5f:7c:c2:
         4c:7b:69:e0:13:6e:ac:30:15:c8:f8:19:18:31:6c:e9:b3:a0:
         1f:bf:06:39:fe:4a:62:75:05:83:e1:96:a5:f9:8b:f6:d6:90:
         14:71:c5:8b:4f:d1:5a:a9:cc:da:73:c0:6f:03:80:93:50:66:
         3c:d8:0e:e6:1f:15:61:37:bd:24:50:5b:9d:50:d7:79:93:9e:
         56:e8:5c:81:08:0d:e9:6e:ad:30:63:a4:c0:f7:8d:c0:57:22:
         a6:32:a5:30:88:a9:a3:0c:63:6f:12:b0:fc:88:33:7a:c2:c2:
         85:80:66:9d:ba:7f:36:46:32:32:14:43:b0:29:38:b5:57:32:
         0b:a7:c2:95:16:30:36:46:99:0d:0d:fe:93:50:78:74:fe:26:
         38:98:b6:79:cc:9a:c6:e4:05:17:0b:86:d7:af:11:f4:27:00:
         be:9e:2a:40:b2:55:24:c9:fd:7b:39:82:a7:c9:b9:3b:be:08:
         b2:a1:b4:3f:7e:4c:50:0e:ac:94:a0:0f:d0:ae:5e:d0:61:48:
         07:69:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----