Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.mft
File:                     gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.mft (raw, json)
Hash identifier:          Pp3pfXuWYqMBi9f0g2aUGmEHeDMZKVgAlvSqVRgXBWw=
Subject key identifier:   B8:84:00:A3:62:C6:9E:9B:CB:C3:20:AA:96:E7:B8:2C:AB:C9:77:B6
Authority key identifier: 81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12
Certificate issuer:       /CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
Certificate serial:       0194C952909642BAE08FF2D1D08769E51608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.mft
Manifest number:          136A
Signing time:             Mon 03 Feb 2025 01:00:18 +0000
Manifest this update:     Mon 03 Feb 2025 01:00:18 +0000
Manifest next update:     Tue 04 Feb 2025 01:00:18 +0000
Files and hashes:         1: CeyVhKKlQizpmEMKZpkCphU-tKE.roa (hash: V7FK7ujI5WNh4G979EP6OplAMcKIGYG++g7Obm6Snq4=)
                          2: VynqkSnDPBsNdNudqCy92aMgNag.roa (hash: LAsXLj/Y+eY+499+1mNdPNcrHbyrUDFLVNdzWbSrbUs=)
                          3: gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl (hash: yJv+EWBFTRhPauCC5bzIEAfKaLRHe6An2m9pu0KgeAE=)
                          4: gjPbK8qBFyUiH19bo08SnDRUxjg.roa (hash: LWBjjXIcAMPcAzVK69qlFUGe3rWf5SEsfCR62XIYgYA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c9:52:90:96:42:ba:e0:8f:f2:d1:d0:87:69:e5:16:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81413f5afc6443e8d2343518ac0b19fd30ba3c12
        Validity
            Not Before: Feb  3 01:00:18 2025 GMT
            Not After : Feb  4 01:00:18 2025 GMT
        Subject: CN=b88400a362c69e9bcbc320aa96e7b82cabc977b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:fd:e9:e8:85:c1:dd:07:ef:a0:c8:37:4b:
                    54:57:19:75:8b:39:27:f1:22:b3:43:44:87:ce:a5:
                    33:88:c9:0e:2f:ea:1e:d1:44:e9:b8:52:bd:48:aa:
                    8a:d9:73:84:ee:b8:6a:47:5c:c8:ac:f3:f4:08:44:
                    0d:3e:3b:b0:cb:61:55:21:fe:c9:f9:8c:49:2c:e4:
                    08:c9:b8:ef:99:fa:c6:8a:6f:95:f6:db:96:23:a7:
                    d5:20:a0:54:e9:bd:ab:30:74:54:99:ee:87:c7:86:
                    db:b8:45:c6:e1:71:20:9d:df:02:e7:13:a2:af:d3:
                    35:63:67:c8:6b:7c:6b:c2:5c:7c:26:d4:5a:64:0a:
                    35:e3:56:4f:86:78:24:a7:a1:2e:35:bb:ef:fd:cf:
                    6b:bb:9c:5b:b4:81:69:5d:29:45:74:fc:37:03:51:
                    ce:4e:f9:86:4c:96:f6:d9:f6:b1:d0:7a:cb:6d:22:
                    96:8c:3d:05:c3:dc:3b:17:21:5c:a3:44:48:77:f5:
                    4d:f1:31:92:40:ad:7b:ba:63:d0:2f:5b:02:92:99:
                    4e:6f:01:de:b8:10:82:0e:e4:51:62:ec:18:91:72:
                    d6:aa:c4:66:ce:95:c9:8d:f6:d1:2e:13:ad:4e:50:
                    f1:3a:76:03:fe:fd:44:a4:6d:fb:69:4d:ef:0e:91:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:00:A3:62:C6:9E:9B:CB:C3:20:AA:96:E7:B8:2C:AB:C9:77:B6
            X509v3 Authority Key Identifier:
                keyid:81:41:3F:5A:FC:64:43:E8:D2:34:35:18:AC:0B:19:FD:30:BA:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/32491b-4fc6-4033-9bda-2510ad32c2b4/1/gUE_WvxkQ-jSNDUYrAsZ_TC6PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:72:43:ca:cd:96:51:9b:f4:73:bf:0a:4d:69:a4:b3:e9:21:
         b8:15:ed:79:d9:da:84:49:02:5c:b1:19:f9:f0:cc:28:0f:b0:
         84:73:2a:af:62:b1:9c:3e:54:82:21:41:2c:5b:21:0e:25:dc:
         8f:7c:bd:58:bf:27:2d:4b:63:90:a9:ee:79:97:2d:6a:2f:6b:
         57:71:55:5c:46:38:5f:60:bf:d7:82:39:d1:d0:b1:dc:9f:0c:
         16:97:8b:89:f4:86:83:1f:b9:f5:1e:15:96:16:64:b1:e7:bb:
         d9:33:62:0b:99:cb:1c:e9:14:2f:69:8c:f3:a0:38:c6:ea:a5:
         eb:34:95:17:62:dc:3b:e1:2d:ec:60:79:b9:23:a4:94:af:aa:
         5a:f1:32:40:d3:b7:42:96:d4:0d:3e:c5:a1:61:f1:ce:df:10:
         6b:65:ed:4f:00:0c:46:eb:82:7c:2e:5b:53:b9:b2:e3:84:4b:
         ea:76:7a:8e:57:5f:b4:72:88:7f:98:0f:49:1f:8c:4b:e5:1a:
         be:c8:a9:1c:f1:1e:09:bc:2c:a6:73:32:a0:3c:3d:6f:d5:d8:
         3c:f1:77:1e:3d:4e:16:a0:5c:1e:4f:7f:fa:f0:78:5f:14:36:
         2b:8b:5f:f1:3a:29:0f:4c:f0:0c:b2:d8:a4:45:50:f2:95:1e:
         16:66:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----