Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          GVf1NAw4cpp36HjMgbwTwWjGirhqnwT4C8e6yLTq/wA=
Subject key identifier:   C2:72:0D:58:CA:0B:FD:0B:1E:DF:FF:1B:75:AA:1B:BF:F7:AF:00:2D
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       0194BCA9950E0C2A121AF2FF082400829B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          030B
Signing time:             Fri 31 Jan 2025 14:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:17 +0000
Files and hashes:         1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: 48XvbkhRWfxRmjvJcarTJ5e50RcDvsOd0Awzdwb3AQ4=)
                          3: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
                          4: IlEGs3swTEykFsR9k5C7RdaE6C0.roa (hash: zQZ2kqcVA7iLm2FpONrymzqVeMVyWeuFsep/95FwbMQ=)
                          5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
                          6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:95:0e:0c:2a:12:1a:f2:ff:08:24:00:82:9b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Jan 31 14:00:17 2025 GMT
            Not After : Feb  1 14:00:17 2025 GMT
        Subject: CN=c2720d58ca0bfd0b1edfff1b75aa1bbff7af002d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0f:e2:4d:50:8c:fd:24:16:d8:96:1d:8f:f6:
                    f2:5a:0c:56:dd:cd:62:5f:d4:43:bd:b1:f0:ac:96:
                    71:9c:68:af:8f:ec:ed:da:ef:81:82:9e:71:b9:40:
                    0f:78:4c:02:a9:97:37:a5:66:d7:18:2a:0d:1a:c3:
                    ac:51:0a:ca:cf:84:d2:1c:29:c1:bf:99:fe:36:ac:
                    6f:27:9d:c5:d4:7b:fc:52:ef:40:f1:f9:20:d4:8f:
                    40:f9:75:02:c6:03:d0:5f:50:36:48:da:0b:17:d7:
                    2e:19:ab:8f:3f:34:5a:6b:68:2e:e8:33:18:fe:02:
                    63:02:d5:45:18:5f:c4:d8:fb:cc:06:62:a5:87:80:
                    65:43:6a:6e:c0:a6:7f:cd:b5:09:1b:ad:b1:5e:f0:
                    44:6c:3b:8c:fd:7c:d0:cf:2a:51:ee:67:96:06:35:
                    27:cc:aa:92:39:74:a6:16:07:76:a5:74:39:83:9c:
                    af:44:88:5e:51:f6:af:a9:8a:ae:dc:c6:e4:ea:2f:
                    ff:28:36:b8:30:bc:20:4c:c6:c6:7f:da:b8:2f:bd:
                    81:13:97:bf:b8:f7:94:10:fd:23:8d:8c:b6:ca:56:
                    12:b5:d6:31:a6:b5:bc:5e:c8:a2:28:a8:3f:9e:fc:
                    94:8f:a3:93:44:07:3d:ed:99:bd:bd:ad:f1:26:ac:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:0D:58:CA:0B:FD:0B:1E:DF:FF:1B:75:AA:1B:BF:F7:AF:00:2D
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:dc:17:72:07:21:54:05:b0:31:2f:da:dc:c9:64:eb:47:
         f2:78:1e:c4:61:ac:46:5b:b3:71:df:c5:7d:bc:e3:e3:79:de:
         eb:11:03:2a:ff:b9:8d:40:af:f9:3e:ce:98:d0:6e:d0:8d:57:
         1b:84:22:3a:c7:1f:7f:22:3f:95:ba:96:7d:2f:3e:5d:f7:96:
         46:07:64:04:60:09:bf:26:6f:93:2b:3b:81:17:77:57:fc:1f:
         c0:9d:9a:33:02:0d:2a:8b:0a:ff:18:14:1c:27:1a:37:da:c9:
         54:34:4e:10:01:30:da:1d:5e:0e:ce:6c:5f:10:f9:30:4e:d0:
         86:aa:72:e2:a4:af:f3:df:81:0d:83:2f:c8:21:72:00:10:38:
         89:ec:94:aa:c5:00:de:b5:11:29:91:20:a1:85:03:91:56:05:
         e9:82:41:51:0e:3f:04:dd:c1:21:d0:d0:75:a4:fa:77:5f:40:
         f3:2e:04:ea:ae:96:a3:47:03:89:d2:18:ec:46:fc:7e:7d:88:
         b3:36:23:8b:1f:15:89:0c:e1:22:9f:94:d9:7e:15:bc:dd:33:
         28:8f:6d:fb:a9:66:a4:04:83:7f:98:1d:cb:a5:ca:ec:ca:93:
         26:04:56:72:6c:05:ec:57:3e:3b:31:e4:e4:f7:65:e4:fd:79:
         e7:b4:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----