Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          LybDPxvujzyqel1rgy2O5UKFEozTEJRpPwpCYWPFMws=
Subject key identifier:   C4:EE:F1:40:3B:31:2F:BB:41:BD:9D:7F:6B:E8:6F:26:A9:D1:84:48
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       0194BCE0D770EFEE40816AE9CCC0E28B9831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 15:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:39 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: RJCgyv2T7ddiHdWN2HgxSgvGG17tGeRoen6FnA/Imbk=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d7:70:ef:ee:40:81:6a:e9:cc:c0:e2:8b:98:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Jan 31 15:00:39 2025 GMT
            Not After : Feb  1 15:00:39 2025 GMT
        Subject: CN=c4eef1403b312fbb41bd9d7f6be86f26a9d18448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:87:1c:9d:8b:34:67:60:a3:fc:6e:c1:26:
                    31:c0:53:15:5a:0d:f2:fc:d9:f5:b6:0a:8a:dd:b2:
                    8f:5c:c3:81:8f:a6:09:3c:fc:74:76:9f:5c:e3:5e:
                    4b:0e:3c:95:21:2b:20:8c:cc:83:71:1b:47:b2:18:
                    f2:73:b6:76:cd:e6:47:3f:42:47:b6:00:9a:a8:2f:
                    aa:44:52:72:68:b4:a3:90:3d:62:31:26:28:a1:f5:
                    b3:2b:8c:b9:0c:9d:a6:f1:06:52:0e:8f:64:ee:07:
                    91:a1:fe:bc:8b:7d:56:7e:75:3f:03:2d:cd:ba:9f:
                    ad:b0:af:9a:4e:2e:1b:58:f4:2e:7f:4b:e4:89:96:
                    b7:e8:d3:19:db:2b:84:d5:5d:ff:f7:15:d4:9e:69:
                    d7:da:b3:82:5f:09:b5:14:32:34:99:a6:9b:42:06:
                    29:a6:bd:2a:0e:48:51:65:c1:34:e2:42:49:20:e0:
                    b7:b4:a1:7d:26:12:d8:44:28:5d:d1:6d:4c:ec:41:
                    e1:80:b9:2d:a5:79:1c:21:b2:07:2a:eb:79:27:b7:
                    fb:30:fb:84:cc:7c:8c:9e:34:a5:ea:b0:a2:19:95:
                    b4:8a:eb:54:8f:ef:0c:61:f2:93:45:fa:d7:a2:2d:
                    48:be:2e:eb:20:8b:4e:54:31:3c:76:1c:2c:ed:d7:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:F1:40:3B:31:2F:BB:41:BD:9D:7F:6B:E8:6F:26:A9:D1:84:48
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:e6:1b:cb:8e:b4:af:59:73:4a:7f:4e:bf:7c:dd:16:1d:
         35:4b:07:fe:c0:e9:58:af:4e:cc:fb:7f:00:90:d6:37:49:1e:
         b2:e1:d6:9a:f1:be:f7:51:bc:d3:0f:36:63:39:94:1c:96:b4:
         41:ee:50:1d:64:0d:fa:b0:ee:4a:71:47:ca:6d:f8:31:cc:e5:
         d4:14:53:87:87:f8:46:16:38:1b:6d:ed:16:64:25:0e:51:63:
         13:eb:cc:d4:4b:d5:31:0f:34:b8:e0:00:ce:fe:b2:af:b8:fc:
         8c:b5:92:64:93:52:18:8d:85:75:95:ac:57:1d:e2:bf:2c:c3:
         00:14:f3:ae:2f:fa:8c:b7:be:27:b7:4a:3c:ee:22:03:ce:2f:
         fc:7e:b9:f0:15:4b:0f:5f:dc:26:fc:ef:be:2c:39:95:42:65:
         dd:5b:1a:41:41:1e:b9:97:26:74:61:91:da:ee:4a:90:d8:dd:
         d2:9c:c9:54:c1:ef:02:a3:36:a3:b8:9a:63:ef:24:82:3e:b3:
         c1:17:99:db:4e:ff:9c:7e:e9:63:86:35:9d:44:1b:cd:c1:1a:
         ad:a1:ce:f0:9c:d5:e5:55:89:22:97:66:b2:47:9a:df:e6:8b:
         46:24:e5:73:46:6e:30:eb:2e:2a:b7:d6:86:22:f7:04:6c:3f:
         97:64:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----