Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          yCrAOi0oUGYZV2aXLV7HCqXYaMHh0La4qPhc292v3+M=
Subject key identifier:   FF:A5:21:15:32:FF:AD:CD:7E:4C:C3:B5:C0:C7:B5:FF:65:30:5E:78
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       0194BD175EB5161F6954FCB997DFCFE20940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          13B2
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: CIVhC++Pd4Qae0a35mMIa4xtEKTt4CWS3Ng6TKJWI8o=)
                          3: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          4: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
                          5: xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa (hash: Q9qE4BIap4CmlXdBGmmHzRr3Ld+715v9q//ZgmRDsjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5e:b5:16:1f:69:54:fc:b9:97:df:cf:e2:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=ffa5211532ffadcd7e4cc3b5c0c7b5ff65305e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:15:be:72:f2:8a:49:3e:d6:c7:e7:27:ea:
                    e5:0d:4d:91:6e:c5:2a:e7:4d:c0:fc:80:f6:f1:9a:
                    b5:c7:67:c2:b4:74:5d:8e:d4:72:ef:e2:1f:9b:1b:
                    29:19:90:17:9f:72:b2:ff:3a:0e:22:6b:15:63:56:
                    f7:13:6f:c4:80:f3:ee:95:67:06:e0:54:a8:e2:62:
                    4b:31:77:ad:63:f8:77:e0:fe:0c:a4:58:38:fe:b3:
                    58:c3:76:48:6f:58:7d:4e:ca:00:d2:a2:19:0d:66:
                    69:10:b3:2f:eb:ee:1b:e0:4b:b0:f7:8d:26:c0:cd:
                    93:2b:a1:39:fa:61:a0:dc:00:d3:46:d7:76:fc:3b:
                    41:21:b9:5e:f2:ad:44:58:1a:ad:24:05:a3:d3:15:
                    4c:53:cb:7e:e6:75:6e:91:45:5e:8c:a3:92:cc:24:
                    d2:2a:2a:83:11:d7:3c:f8:83:7a:a7:b7:c9:ec:90:
                    16:91:11:a6:f5:46:58:6e:8c:4c:4a:d3:cb:fe:85:
                    25:39:ab:0a:42:42:d8:60:a7:e0:46:19:02:0c:bd:
                    a9:e4:97:30:4d:9f:2e:d2:7f:e2:36:87:2f:0b:b1:
                    9f:5b:f7:cc:ce:5c:f2:12:24:56:b7:81:57:9c:a8:
                    ce:84:62:98:3f:0a:73:94:92:f5:ea:d3:a9:65:95:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A5:21:15:32:FF:AD:CD:7E:4C:C3:B5:C0:C7:B5:FF:65:30:5E:78
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:91:64:e0:3c:9e:ce:df:c9:75:d2:4c:3d:66:dd:45:d3:a6:
         26:1b:06:51:e7:0b:ed:59:91:6f:30:fb:ea:cc:65:77:74:15:
         76:e0:20:37:d0:23:e5:ae:27:de:3d:3c:91:e2:72:d8:72:0d:
         d1:59:d0:ed:81:a9:7c:73:76:b2:a6:88:e2:10:33:d7:0b:b6:
         22:28:3b:2d:f3:56:32:00:31:f9:1f:d8:a4:df:a3:37:05:7f:
         c6:b8:30:17:a5:45:2f:a3:68:e7:d7:86:3b:4a:77:63:1b:3e:
         19:6a:88:46:be:87:90:98:c3:e2:b6:80:d5:80:9d:36:d7:57:
         65:33:2e:2c:a4:8f:f5:ac:34:43:bc:82:69:6b:c4:3b:e1:b9:
         e4:bb:e9:71:6f:99:46:77:81:49:c2:da:1b:7f:62:e4:03:8f:
         46:32:48:a1:37:41:49:f2:12:e7:14:1e:ed:5d:14:73:7c:7d:
         d1:85:35:fb:dc:a1:7a:bc:5c:2c:91:c1:65:8e:75:70:2c:c8:
         f2:c9:92:66:e9:e4:fd:ca:00:91:1f:bb:0d:db:9a:3f:75:75:
         3c:e6:26:eb:4a:fd:8b:16:cc:49:de:4a:dc:0d:80:c6:94:17:
         4d:2c:93:7c:91:e0:14:bc:b4:72:59:56:45:84:e9:a4:e0:cf:
         30:36:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----