Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          +5KXpOHVphULW68OQtDIN/ngf6BYEo20rD8SjIYcv84=
Subject key identifier:   98:3D:AF:30:59:F2:CE:23:49:A1:2D:C6:24:80:9F:FB:43:8F:A9:4C
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       0194BBCDF8A94A38A104D14DF12427C8A46E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:25 +0000
Files and hashes:         1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=)
                          2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=)
                          3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=)
                          4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=)
                          5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: yn6dRfkIftoJnJECd0nP9sZlstL19rcb7KdxRicqC24=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:f8:a9:4a:38:a1:04:d1:4d:f1:24:27:c8:a4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Jan 31 10:00:25 2025 GMT
            Not After : Feb  1 10:00:25 2025 GMT
        Subject: CN=983daf3059f2ce2349a12dc624809ffb438fa94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:08:01:0b:c3:c9:f7:2b:a0:15:d3:e4:01:
                    58:a8:44:21:c1:1f:f4:8c:49:a3:f4:66:f4:c4:58:
                    d5:48:75:ba:c9:fd:bd:22:b2:f0:b4:e5:60:a8:ca:
                    b2:f6:25:f0:d9:4f:e6:a0:1c:5f:b4:51:dd:f9:53:
                    42:5a:a2:01:21:74:7f:40:37:68:a4:c4:6e:7c:92:
                    13:7b:86:5f:31:2f:32:45:31:0b:3f:f6:a5:af:e0:
                    6b:0d:be:b9:e5:71:3e:3a:df:c8:da:14:4b:a4:e8:
                    cd:9b:8b:4d:c9:26:e3:22:50:80:b2:32:b9:98:4e:
                    68:c3:9a:dc:d4:fe:3a:e7:81:a9:36:ee:e7:a1:7d:
                    75:17:c0:73:22:bb:a9:82:db:e5:d2:a9:fc:ad:67:
                    43:2d:71:1f:35:9e:0a:95:62:c9:ff:65:78:fd:42:
                    ea:8e:f3:d5:c2:de:fa:50:5a:e1:49:a3:34:3d:f4:
                    be:aa:27:ae:f5:6e:e3:fe:24:35:e1:8f:03:6c:71:
                    08:22:05:91:ce:f3:78:24:9c:bb:c6:f1:9b:6d:8b:
                    db:e8:50:b7:1a:29:38:21:ef:48:74:20:e7:92:b7:
                    18:43:5c:c8:35:f7:92:c3:9e:64:07:90:0f:5e:96:
                    68:98:dd:cc:dd:34:13:6a:ba:59:68:f4:0e:1c:fa:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:AF:30:59:F2:CE:23:49:A1:2D:C6:24:80:9F:FB:43:8F:A9:4C
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:26:32:2c:3c:07:fb:44:db:57:e3:bc:98:1b:9a:9f:ef:
         5f:39:09:dd:5a:b7:bb:2a:06:52:f6:8b:85:77:ca:b3:48:a1:
         94:96:b0:6d:cb:02:76:b1:84:fb:88:37:6c:88:d3:1a:8b:d7:
         01:a4:c9:29:09:be:ff:1f:22:f4:c0:35:1b:5e:de:a1:05:78:
         90:0a:c6:42:18:85:af:fd:9e:34:8d:a3:95:95:a2:e9:4a:03:
         ce:8a:d8:43:6e:4d:92:8a:51:9d:58:b7:bb:f3:c9:cc:cc:3e:
         82:56:4f:ee:be:90:5b:1f:b2:06:8f:33:1b:32:46:f1:e2:c7:
         71:18:0f:4e:c7:70:66:44:e4:3f:84:22:9e:33:43:ef:60:13:
         67:7c:1e:20:88:fb:58:fa:cd:96:ea:51:3a:d1:eb:0b:0d:d1:
         f0:28:40:fc:e9:56:94:0f:5b:da:51:4f:6f:5b:86:e6:a9:40:
         2e:f2:48:a7:c1:73:bb:62:75:81:0c:19:1e:7f:d0:b0:c4:28:
         af:f1:de:c3:58:49:47:8f:07:25:0b:97:6e:db:8d:b5:8d:8b:
         d8:d9:5b:a2:db:4d:c9:85:81:c5:49:d9:d7:69:35:e4:23:cb:
         47:5b:e8:52:98:e7:8b:fc:7e:ec:57:6d:70:91:dc:21:d8:6d:
         54:c8:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----