Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File:                     KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier:          pMJWNCgbVgyyyz4RoS0zD9nCdoDFlx3Oa8IVq4huubM=
Subject key identifier:   55:43:43:A2:DC:96:B2:63:10:BC:C0:63:CC:13:DA:93:05:A7:9A:41
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer:       /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial:       0194BC3BBDEF57CEE49A1598EA6E1C0D1233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:19 +0000
Files and hashes:         1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
                          2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: GxWQI+9LL5alParzgWDUz4fc36irtXHGJMuG23w5ot0=)
                          3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
                          4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
                          5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
                          6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
                          7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
                          8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
                          9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:bd:ef:57:ce:e4:9a:15:98:ea:6e:1c:0d:12:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
        Validity
            Not Before: Jan 31 12:00:19 2025 GMT
            Not After : Feb  1 12:00:19 2025 GMT
        Subject: CN=554343a2dc96b26310bcc063cc13da9305a79a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:ee:68:3e:0c:3c:68:04:d4:eb:2a:b0:c5:
                    42:98:35:13:79:1a:38:54:3d:5a:ed:aa:cd:c4:32:
                    19:6a:c8:88:b3:86:b2:64:7f:00:23:15:bd:e2:37:
                    5a:87:ac:1b:75:61:b8:34:4d:f4:9f:bd:27:cd:e0:
                    a9:1a:da:29:74:3e:77:58:4b:42:ba:dc:3f:06:bd:
                    33:e5:27:c4:80:39:b7:cd:c5:3e:64:5f:bc:9e:2b:
                    c2:d9:fb:3a:bb:e7:c0:d7:ad:b5:62:24:77:03:ba:
                    ea:01:17:b2:d5:a1:45:6c:9e:4f:52:46:9e:ed:e9:
                    8a:87:0e:2a:81:50:df:e5:6e:a4:d7:c5:bc:ef:4b:
                    6f:5e:41:46:da:7f:74:e0:a9:ac:ff:3f:15:65:66:
                    2c:b4:24:70:48:3c:54:bd:f4:f1:c1:b9:08:d2:b3:
                    cc:01:6b:d2:3d:3f:60:ae:b0:06:e8:8a:47:5b:59:
                    02:a6:14:98:2a:88:13:05:88:6d:2d:0e:71:73:4d:
                    d0:5a:3c:02:07:9e:db:a9:19:07:f6:c2:47:02:59:
                    80:1d:53:76:fb:75:9f:61:46:bb:dc:71:e1:45:0e:
                    8e:98:08:c7:bc:d4:76:41:5e:57:b3:cf:3b:37:b8:
                    4b:c9:55:68:87:04:a5:30:5f:a2:bb:8c:20:6b:49:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:43:A2:DC:96:B2:63:10:BC:C0:63:CC:13:DA:93:05:A7:9A:41
            X509v3 Authority Key Identifier:
                keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:aa:dc:61:95:72:30:17:97:de:9d:9c:95:d6:2f:68:0f:
         33:b4:88:82:30:d6:4e:e5:75:6b:f2:15:f0:6a:4c:25:39:7c:
         0d:34:29:ca:53:64:aa:95:c6:1f:8b:88:d4:f7:5e:42:68:47:
         c7:d7:cc:8d:52:5b:e9:e7:11:e6:02:79:69:52:11:a5:78:d9:
         ae:eb:79:d2:9c:bc:af:25:79:f8:69:ad:ae:cf:13:d5:76:96:
         a3:34:fe:a0:8a:0c:69:4d:02:d7:f5:1c:95:39:7f:67:f1:a9:
         1a:f7:3a:8f:14:08:ed:61:3b:66:64:d9:c1:f9:33:f4:93:81:
         ca:04:34:98:07:a6:58:20:cd:66:90:97:28:a5:d2:7f:1a:a7:
         71:35:63:eb:aa:d2:e2:72:1c:66:49:69:ce:89:a5:f5:e2:55:
         db:5b:a7:1d:fe:4b:ad:d6:47:f6:c9:f8:46:8b:0e:86:d7:35:
         23:57:84:6d:f8:16:3a:45:cb:45:20:37:5a:36:fa:a7:09:e4:
         dc:cf:c2:fd:08:ae:39:3e:69:ba:e9:0e:70:59:b1:1b:08:e1:
         b8:eb:a9:c8:93:97:d0:23:e1:3d:87:f8:52:b1:39:01:e5:9c:
         da:90:07:fb:6e:4d:1f:d8:b0:25:8d:24:09:1f:c0:d7:20:d5:
         ed:ba:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----