Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File:                     rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier:          GYNtU67DXFkw4KghamgsgQmaip/6vxIlz/9Bt2UmbK8=
Subject key identifier:   84:EA:86:1C:D6:D6:A3:55:DE:55:3B:B0:8B:43:0C:20:D0:ED:B5:40
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       0194BBCE6B866D9448C90B5E5201374DC2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:54 +0000
Files and hashes:         1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
                          2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
                          3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
                          4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: vNfxa5nEwHPhRbEtOfQJqQT9XyYzxX5tE6lLKytk9+A=)
                          5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:6b:86:6d:94:48:c9:0b:5e:52:01:37:4d:c2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Jan 31 10:00:54 2025 GMT
            Not After : Feb  1 10:00:54 2025 GMT
        Subject: CN=84ea861cd6d6a355de553bb08b430c20d0edb540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:7e:30:16:0e:7e:12:8b:84:c7:fa:53:46:
                    48:fd:28:83:9c:37:38:be:9c:be:da:88:65:fc:ad:
                    be:28:8d:0a:67:54:98:2d:71:e7:d6:72:0d:86:a6:
                    cc:7f:56:09:e5:7f:dc:d5:32:de:6c:7d:d5:f8:31:
                    de:4b:6c:b0:c9:69:0a:47:79:36:dc:75:ef:0a:9d:
                    50:de:fd:d1:4c:8f:66:cd:70:5d:a8:13:6c:3e:aa:
                    94:e7:37:1d:5c:db:02:80:f2:12:79:1f:49:99:f2:
                    4f:b8:e9:0f:4e:2a:6a:56:0d:ae:68:d3:bc:5d:1d:
                    b9:1c:45:6b:aa:47:fb:f4:6b:00:8f:47:94:4a:a9:
                    93:fc:8e:70:09:c0:0f:22:d5:a2:01:c7:3b:14:c9:
                    ea:74:2c:97:1e:3a:37:14:7f:13:7d:4f:50:02:1a:
                    bf:41:aa:79:4f:c0:36:9a:25:4b:70:ae:6b:60:31:
                    38:c0:7f:0a:6d:b4:a3:24:e5:0c:ba:d9:11:d9:64:
                    b1:e3:21:f7:05:a9:99:69:ba:37:f2:2d:72:75:6d:
                    f7:7a:02:7d:cf:b2:b4:ae:43:7c:e7:cd:eb:01:2e:
                    4e:2c:4a:9d:ce:69:9b:88:21:e7:52:0a:c5:76:60:
                    3b:03:5b:ce:87:c4:45:fc:0b:ed:cc:c2:af:cb:82:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:86:1C:D6:D6:A3:55:DE:55:3B:B0:8B:43:0C:20:D0:ED:B5:40
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:89:15:d6:83:b8:d8:d7:88:02:52:0e:19:75:d6:3a:5e:
         50:ba:f3:0f:6f:54:e5:ee:27:d0:d9:39:3a:db:8b:b5:99:d7:
         5d:c3:1d:f5:c1:d4:cc:2e:af:5c:51:66:bb:45:96:7f:28:48:
         01:c2:6a:52:96:f9:0e:53:84:54:b7:53:cb:d7:29:e3:1f:83:
         70:b7:bb:98:10:64:7a:17:99:67:f6:bd:ff:ef:e6:a0:c0:b5:
         fe:8c:6c:67:9f:88:c4:05:ab:be:28:2f:9c:53:15:24:1b:28:
         ef:b6:07:12:82:df:eb:3a:6e:b8:c1:bc:09:b1:7a:f3:30:0a:
         d9:ce:44:82:d4:11:3e:1c:a8:4d:91:80:57:f4:e6:17:3d:05:
         cf:8d:be:49:e0:4a:ae:8e:3b:1f:b3:c5:d8:ed:58:21:9d:90:
         f4:34:e8:dc:bb:ad:29:5a:92:91:cb:68:77:39:09:22:1a:89:
         7f:a9:ef:34:71:28:28:97:25:2d:dd:e9:ca:9f:83:b9:2c:10:
         f5:ba:95:9a:a6:9e:c3:41:8a:ba:1f:6e:f8:4d:6b:d1:63:1a:
         f5:5f:8c:c7:48:93:08:c9:3a:59:b3:a6:ee:87:d9:fa:63:ca:
         92:82:f5:00:fc:9f:10:65:76:c1:b9:59:71:bc:ff:ad:5d:56:
         94:64:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----