Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          f8tJvYOt+AJmpPUZ+FPGVdJRq8YtEkvnVwViikPC1wU=
Subject key identifier:   2A:BC:A2:CC:BB:36:3E:DB:20:AC:F7:80:E0:A7:10:CC:26:53:1B:81
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       0194BC3C70ED583834CC883A218F47DD7373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:05 +0000
Files and hashes:         1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
                          2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
                          3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
                          4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: 99ok6NMY9or3rpebAY1B85hQqa3703f/Qjq/IWGU9sg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:70:ed:58:38:34:cc:88:3a:21:8f:47:dd:73:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Jan 31 12:01:05 2025 GMT
            Not After : Feb  1 12:01:05 2025 GMT
        Subject: CN=2abca2ccbb363edb20acf780e0a710cc26531b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:86:76:a6:4b:93:9a:9e:74:83:43:0d:40:
                    dd:31:c7:9a:4e:fc:f7:33:f7:0b:09:91:71:fe:be:
                    ed:ed:9d:55:d1:a4:f5:a1:2c:aa:8a:2b:fc:9c:94:
                    9d:d8:42:a4:42:57:30:0b:9c:32:d5:59:e1:3f:bd:
                    69:67:a0:6e:dc:49:36:03:da:10:ae:2e:2f:98:34:
                    73:f6:ce:77:fc:28:1f:b0:8e:ca:a2:a7:0c:d9:9d:
                    e2:be:a6:40:51:36:5f:d7:73:eb:0b:a2:d7:88:8b:
                    de:75:81:a6:82:19:9a:a6:66:a1:ed:bb:0f:be:b7:
                    f8:f0:d9:54:f2:05:5a:58:d5:88:f0:04:72:bd:27:
                    fa:41:d5:bd:7f:93:8c:d8:eb:91:13:6a:2d:20:45:
                    fd:d0:b7:8c:b6:55:ac:89:f8:60:b5:de:04:9e:c2:
                    f0:a1:88:a1:22:e7:e2:64:89:7e:88:a9:ae:ca:41:
                    6e:81:60:21:d4:62:ac:52:33:65:12:c6:cb:3e:df:
                    a2:99:07:32:4e:61:05:b1:b5:2d:a4:47:dd:be:ab:
                    2a:8b:76:78:e9:f6:fe:2b:f5:3d:fa:d8:03:f5:83:
                    57:88:6d:7c:d9:a7:3f:93:41:df:c2:af:67:74:ec:
                    40:69:6b:67:02:5a:0e:37:84:11:fa:ca:6f:3c:65:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BC:A2:CC:BB:36:3E:DB:20:AC:F7:80:E0:A7:10:CC:26:53:1B:81
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:42:cd:fe:d7:98:c4:5a:5c:90:bd:2f:64:18:e6:a5:c2:05:
         e4:6c:c1:a8:d6:8d:0b:4c:01:4a:4d:de:fd:33:aa:15:64:9c:
         6e:f0:e2:8b:2e:64:53:1b:17:97:06:19:f1:4d:d5:f8:f1:b7:
         5b:3c:44:14:6a:c0:e4:6a:de:b3:cd:c4:53:5a:d2:ce:a7:51:
         d6:f2:ab:c1:c7:40:a7:f8:ad:bf:79:3a:21:f8:8c:d1:2b:06:
         97:f3:83:cb:31:0d:e2:00:31:56:48:82:61:5f:e4:4c:af:7f:
         9f:33:29:36:41:b7:72:03:ec:b0:73:10:5a:96:1c:be:cf:94:
         4c:fb:f1:f5:fd:5a:25:3a:6b:2c:da:75:92:b4:81:6b:7c:46:
         a5:13:74:81:8c:04:39:95:5b:17:e8:64:0e:58:16:89:84:64:
         44:f6:be:c7:18:e7:04:b6:00:84:ed:a2:75:70:fb:19:5f:36:
         6d:17:a2:2b:3d:e4:46:94:c3:b9:b5:29:eb:db:2c:66:c6:86:
         83:a3:c0:25:33:33:83:b8:82:0b:94:78:44:48:a2:c6:7a:7c:
         9b:5f:d2:f4:a8:1d:cc:4b:29:01:73:82:c4:60:88:1a:ec:98:
         8d:2e:cf:ec:b1:a5:e5:76:0d:56:2f:94:05:d3:20:ae:7a:aa:
         29:22:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----