Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File:                     KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier:          zS/30UqOPfpk5g87/nWHt9Lp5OYHNtwUhlzBCuVuKDU=
Subject key identifier:   A9:5B:E7:24:2E:97:AB:06:11:CA:EF:E4:78:B8:91:B4:D3:29:75:A5
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer:       /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial:       0194BCA98ADEB702C651F23207FD951971EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number:          116A
Signing time:             Fri 31 Jan 2025 14:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:15 +0000
Files and hashes:         1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
                          2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
                          3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: 1ZTtmHlm8Ja2PpgvnicOZv+4tWv+ffsET+NHvs/EbBo=)
                          4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
                          5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
                          6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:8a:de:b7:02:c6:51:f2:32:07:fd:95:19:71:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
        Validity
            Not Before: Jan 31 14:00:15 2025 GMT
            Not After : Feb  1 14:00:15 2025 GMT
        Subject: CN=a95be7242e97ab0611caefe478b891b4d32975a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:05:f3:c3:9a:8a:9f:b6:87:58:85:45:c1:
                    d1:54:c9:91:94:8c:3d:8e:d1:94:c3:99:db:85:9c:
                    b4:37:1e:08:38:b8:d5:a2:29:61:9c:e1:5e:42:50:
                    10:28:2a:b0:cc:32:83:7c:31:b5:24:70:1c:0a:d4:
                    a2:96:f5:91:39:e8:88:d4:ad:af:83:00:db:0d:9d:
                    c7:1e:df:89:13:5d:b6:b5:e0:f4:1d:57:c2:0d:60:
                    13:b2:23:61:2a:2e:61:b8:59:68:2f:75:d1:9c:78:
                    c6:46:bd:a5:1e:32:7b:9f:06:6e:91:a1:b3:ee:fb:
                    49:d8:1f:bd:c7:c1:e5:ee:58:97:28:8a:3b:19:5b:
                    bc:7a:fc:7e:b9:2d:5f:3c:aa:98:f0:c0:8f:1e:db:
                    5c:b4:7c:e2:1c:c2:23:ba:c3:43:9a:83:4f:1d:25:
                    86:59:55:ce:f9:3f:34:9e:0a:24:b1:84:8a:fc:f5:
                    8d:f6:dc:74:c0:37:ef:90:f2:b0:f0:fe:74:09:59:
                    06:08:8b:b1:5f:d9:c6:cc:47:87:15:91:9e:d4:29:
                    ea:64:f6:2c:79:9b:d7:c6:af:15:74:11:13:37:2c:
                    4a:26:7b:38:96:16:70:26:c8:1e:e9:33:36:23:f0:
                    fc:c0:78:77:47:2a:a8:10:d5:17:e4:e9:25:90:70:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:E7:24:2E:97:AB:06:11:CA:EF:E4:78:B8:91:B4:D3:29:75:A5
            X509v3 Authority Key Identifier:
                keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:77:52:41:1b:db:e9:b9:e6:64:44:c2:2f:3b:1b:55:62:05:
         6d:64:92:48:85:be:6f:11:32:d9:e7:ec:8c:1d:c4:91:a3:71:
         71:eb:03:06:30:a4:34:ec:2e:df:88:90:bb:bc:ce:f8:ee:2f:
         e8:0a:db:2b:e3:0d:34:2b:41:82:93:26:9d:c2:d1:0d:c5:c8:
         f1:04:94:3f:01:2c:b6:ca:1f:29:0a:22:65:dc:88:34:d3:6f:
         fb:ba:95:55:9f:1e:2d:f2:94:fd:70:fd:e9:f1:d5:c8:69:4c:
         ea:47:73:94:fb:36:87:99:7c:d6:6c:52:9d:05:ad:fc:74:72:
         04:3d:58:7d:e5:3e:b6:4c:17:9d:c6:88:8e:24:de:6b:c2:83:
         7e:d5:74:22:05:4f:c6:4e:76:cc:ca:b0:13:aa:3a:88:8b:ff:
         22:b3:d7:75:f1:99:ba:44:9c:18:cd:ca:02:85:4c:38:34:34:
         fa:7a:1e:43:3f:a7:1b:60:d7:95:b0:48:b5:77:a1:59:24:dc:
         76:fa:63:59:50:05:20:ac:87:44:9a:7b:7f:2b:3b:39:3a:46:
         75:cf:b2:f4:44:8c:7d:6f:0c:f5:e9:47:c8:4b:df:8c:87:65:
         79:d8:e0:e8:14:8e:29:9e:5a:1c:40:a6:9f:7e:d6:2d:1f:93:
         cd:b7:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----