Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          KNF1Sdv3hIv3GKvJctHFISHgnxZJ7oP0yRPK/fmwjwE=
Subject key identifier:   40:92:36:A5:55:B1:6E:00:C1:AF:EA:D7:A1:FD:5E:3D:EA:9D:D8:2D
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       0194BCE0F334C1C05B38B7D713F1701BB112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          0D59
Signing time:             Fri 31 Jan 2025 15:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:46 +0000
Files and hashes:         1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
                          2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
                          3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: kG/4nmmF/Iw6QsAmlignVAy+t+xiIlAYgA4vei3kqX4=)
                          4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:f3:34:c1:c0:5b:38:b7:d7:13:f1:70:1b:b1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Jan 31 15:00:46 2025 GMT
            Not After : Feb  1 15:00:46 2025 GMT
        Subject: CN=409236a555b16e00c1afead7a1fd5e3dea9dd82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:5e:46:42:eb:32:1e:a4:f2:f3:c8:43:f4:
                    ff:9d:8f:c5:cf:24:dc:75:85:58:c2:b0:66:72:b9:
                    2e:37:bc:94:af:b6:e5:62:2f:43:7b:92:a0:34:b7:
                    18:19:44:a9:88:e9:bc:dc:a6:8e:19:49:1e:b8:f4:
                    4a:53:cf:85:72:6d:a3:bd:70:ae:d9:93:61:e0:6f:
                    ff:87:0b:fd:89:e7:01:41:d1:25:6f:07:a6:99:0b:
                    6c:2b:40:91:90:93:ab:40:e7:e9:b2:4f:ce:94:63:
                    1c:19:e8:b2:02:b0:8d:d9:71:7c:44:bc:18:6a:63:
                    1b:7e:64:16:67:ef:0e:a9:0f:0c:fe:e0:3d:c2:37:
                    36:b5:84:90:28:34:cc:05:3f:4a:fa:da:97:21:7a:
                    b4:41:66:ed:d0:62:60:78:a7:21:1a:2a:2c:57:97:
                    24:b5:cb:a5:1d:f9:e6:89:89:d2:a9:d6:05:82:98:
                    42:b2:b2:5d:5d:e8:d8:66:11:ac:61:34:ba:76:ae:
                    f6:51:67:59:c0:76:32:3d:37:8b:c6:d0:d2:89:bb:
                    15:78:0e:a3:84:cf:fc:3f:e2:b2:45:4c:22:69:02:
                    f3:04:55:14:db:40:c0:3b:3c:66:7d:ec:7a:d9:0c:
                    10:aa:4f:f9:da:04:e6:7c:fc:a0:1f:30:a7:b9:cd:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:92:36:A5:55:B1:6E:00:C1:AF:EA:D7:A1:FD:5E:3D:EA:9D:D8:2D
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:38:24:68:99:05:69:fe:04:33:f4:b0:a0:77:ce:6c:16:4d:
         eb:f8:bb:2d:82:4d:eb:7a:fe:cc:48:d5:a4:27:52:d3:c4:17:
         e1:67:50:4d:e3:7a:67:79:cd:16:fc:c3:b9:90:5d:e8:cc:ac:
         f5:92:72:f2:53:5c:7d:c7:1b:6b:8c:37:49:bc:0c:6b:3f:3c:
         f2:d6:62:c9:69:a2:bc:d8:a4:10:b7:c3:71:0e:01:b9:e5:8e:
         0c:61:7d:f5:b5:38:a3:64:48:6b:84:1b:e9:09:c1:d2:46:37:
         f4:03:46:62:f0:4e:df:f7:bd:77:73:d2:7c:69:1e:b1:63:ea:
         36:52:a9:be:ba:51:84:5a:2b:50:b1:70:f5:79:75:af:32:1a:
         e3:c8:db:dc:b6:56:63:01:be:76:1e:98:ca:25:aa:04:24:42:
         89:e8:0c:93:34:0e:a9:ea:b7:d8:ff:69:6a:40:af:05:b7:60:
         41:09:5c:00:bb:1d:eb:cf:3e:0a:56:b5:f2:a5:eb:18:5d:7e:
         32:78:ff:a4:e9:28:03:5a:68:a7:b8:2c:f4:77:11:75:4f:35:
         6d:09:be:ed:fd:85:f6:62:45:62:00:89:7d:7a:61:9b:00:c6:
         03:e6:be:11:61:4c:d4:5a:05:e8:16:b1:ce:15:d0:7a:dc:df:
         f3:65:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----