Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          8/pBRANWof4rx5TlArFN2kXQ7dl3aZS6mDJAHrD8YVg=
Subject key identifier:   53:C3:12:5C:AB:64:2E:79:9F:DB:90:6E:F8:3E:FF:D5:87:9E:C2:B8
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       0194BD85B50D9EAC4972732A14E4090DAE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          0F4E
Signing time:             Fri 31 Jan 2025 18:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:43 +0000
Files and hashes:         1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=)
                          2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: f0cyxTmF7mg79k0ooNn+SlLPJxYXQQ1NG/SAbjRUE1A=)
                          3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=)
                          4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b5:0d:9e:ac:49:72:73:2a:14:e4:09:0d:ae:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Jan 31 18:00:43 2025 GMT
            Not After : Feb  1 18:00:43 2025 GMT
        Subject: CN=53c3125cab642e799fdb906ef83effd5879ec2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:5c:fb:d2:71:0d:60:d9:4f:63:02:3c:59:
                    56:a6:6a:fe:8a:9b:20:73:3b:15:4a:3e:f5:76:4a:
                    35:fa:ea:35:2b:2f:b2:ca:8f:49:ff:86:89:96:49:
                    ed:d6:42:41:05:39:79:7c:ab:61:24:a4:a3:4a:c9:
                    68:f0:8e:3d:ae:0f:12:20:cf:8b:49:7c:ed:86:f8:
                    a4:46:39:f7:7b:49:74:76:20:fa:1c:96:9c:73:90:
                    fb:e1:38:85:95:12:39:8b:53:9d:9e:de:b4:50:60:
                    24:93:7d:a1:6a:25:a7:6a:13:99:51:fd:c5:92:b7:
                    4c:12:77:83:1a:c7:e9:11:e6:b9:f7:7a:af:56:05:
                    14:0d:d6:5d:0b:68:49:43:9a:55:42:b1:29:79:9e:
                    c7:57:cb:0b:32:8c:cb:73:59:53:d7:2c:7c:c4:28:
                    ba:e8:4d:44:e1:1b:ca:aa:b3:d5:26:13:50:6b:de:
                    44:a9:ac:79:c8:48:cd:b8:83:29:5f:58:38:70:8c:
                    7c:66:1f:61:01:da:44:ef:eb:71:b3:31:00:3e:65:
                    a7:a3:9b:23:e3:de:23:2c:de:99:03:a0:95:a8:d3:
                    4c:de:39:01:b6:31:3a:5e:78:9f:7c:89:70:c8:b1:
                    1b:1d:5b:98:af:fa:85:6d:2b:2d:0f:b1:4d:22:cc:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:12:5C:AB:64:2E:79:9F:DB:90:6E:F8:3E:FF:D5:87:9E:C2:B8
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:81:89:ea:f0:77:5f:ab:67:55:f6:91:29:a6:9b:fb:16:22:
         50:a9:e1:74:ff:32:32:fd:a1:38:90:d1:fd:15:73:dc:aa:71:
         d4:29:1d:88:0b:fc:4c:2f:c0:83:a9:b5:09:79:6c:9e:bc:20:
         31:2f:48:fd:d6:34:35:3f:c4:16:01:8d:f1:de:4d:5e:90:88:
         75:e5:39:23:c8:da:6b:18:d0:02:62:bf:26:1f:56:97:65:76:
         4e:a2:53:f6:85:d7:39:3b:c4:e7:d3:5c:b3:57:40:23:36:e5:
         ac:ba:01:3b:75:4e:66:0d:c8:f7:9f:6b:9e:ca:3c:ea:94:6d:
         ff:30:89:91:f8:e6:fd:07:0a:f8:f1:43:40:0a:95:c8:2f:f9:
         76:77:a6:c8:45:f1:44:c2:47:29:55:31:6a:f3:66:93:1c:7f:
         98:a4:70:b3:d1:c6:f3:5f:ad:0e:56:ba:1c:82:6e:6d:da:18:
         6f:b1:03:f0:05:0d:4d:56:ae:e9:ae:3e:e4:22:ed:10:6d:1b:
         99:d7:8e:cf:fb:02:f8:37:54:df:68:c4:75:8c:ce:55:2b:5c:
         a7:54:71:46:96:e9:4e:f7:15:8d:e6:25:bf:32:ab:b0:1f:06:
         e3:b1:d0:48:66:13:62:a4:e0:11:ec:88:20:b5:32:06:7a:00:
         9a:7b:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----