Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File:                     CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier:          THQetPGX5MaVf5NLy/xEMlZ0mlgsjwceV/HDNtvS1ec=
Subject key identifier:   A4:D3:81:E6:D5:CD:EC:39:31:07:E3:71:33:7A:EC:97:B5:CC:11:04
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer:       /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial:       0194BBCDC97619C6840777645420EDA53169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number:          1118
Signing time:             Fri 31 Jan 2025 10:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:13 +0000
Files and hashes:         1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
                          2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: Nbm0eFrf3krQzRzJArZBvTtD3lGVOZ60b3GtnMASMbg=)
                          3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
                          4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
                          5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
                          6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
                          7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
                          8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c9:76:19:c6:84:07:77:64:54:20:ed:a5:31:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
        Validity
            Not Before: Jan 31 10:00:13 2025 GMT
            Not After : Feb  1 10:00:13 2025 GMT
        Subject: CN=a4d381e6d5cdec393107e371337aec97b5cc1104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:5b:be:20:aa:13:36:2b:d2:8a:8c:26:ef:
                    ec:73:73:55:e0:2e:ff:b3:67:4f:34:b5:95:e4:c8:
                    42:40:57:df:78:ba:60:87:bd:ed:5d:f6:f5:05:b6:
                    69:41:0e:c2:4c:bc:b8:b0:f3:54:99:9e:7a:d4:cc:
                    52:6e:1f:df:98:bf:b7:41:1a:e2:e9:41:3b:92:3c:
                    7c:4d:0d:8c:ee:b0:18:2c:88:5c:2a:29:77:0f:e6:
                    f5:90:46:46:70:1e:32:ce:01:6a:e0:ed:db:5b:79:
                    f5:21:58:7e:c4:d4:c1:92:d4:84:e5:80:d7:ce:d1:
                    61:08:6f:a0:66:69:96:a8:42:0f:08:f9:bc:31:f3:
                    aa:eb:49:cc:bf:36:9b:62:39:d5:99:8e:b9:5b:3a:
                    cb:3c:fa:47:c0:5a:35:b0:60:81:94:ac:da:49:6c:
                    1c:b1:77:f3:1b:38:20:e9:dd:38:08:cd:b0:cf:ed:
                    80:d6:52:d2:b2:e1:84:5a:b9:ac:f9:82:e3:68:36:
                    40:5b:1a:33:ab:d1:e2:03:45:bf:50:c7:91:d2:aa:
                    07:66:56:cd:6f:ee:62:bf:c5:2f:21:b3:dc:7a:89:
                    8e:e1:d9:43:8c:88:e0:cc:9d:57:18:89:f7:b5:49:
                    d1:1e:f0:d5:f0:87:03:59:07:7f:14:20:5c:2b:d6:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:81:E6:D5:CD:EC:39:31:07:E3:71:33:7A:EC:97:B5:CC:11:04
            X509v3 Authority Key Identifier:
                keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:54:b2:8a:a2:a8:76:3d:54:b9:9b:5c:7e:2f:fa:6f:14:79:
         19:57:f3:26:76:9c:a3:a2:a2:6d:af:76:e5:c7:9f:1a:31:99:
         fb:0d:a2:d1:ed:91:40:77:0d:7d:23:8c:c1:4e:a3:d6:00:ab:
         42:b8:a5:70:de:dc:b2:1c:0d:fc:e9:f7:42:89:2b:6b:7a:9a:
         1f:67:a6:6d:a6:16:e2:16:8d:a9:16:ef:ff:d4:8b:91:58:50:
         d0:7f:0b:d1:80:8c:fd:c9:80:60:36:fe:66:5d:39:ec:17:2c:
         92:53:1c:92:2b:ad:10:c0:3d:58:6d:36:cd:4c:da:2a:7f:6e:
         7c:4b:cd:12:9f:a9:27:f3:c3:87:69:a8:04:23:19:08:8c:2f:
         4e:15:a2:0c:67:a9:d7:8d:56:e7:fd:24:5c:ea:21:ed:db:62:
         6b:56:b5:0f:91:03:43:e0:8a:0e:77:8b:c0:a3:f8:be:a5:48:
         f1:72:8f:50:35:70:44:19:c1:4d:a5:47:04:da:0c:60:95:0f:
         cb:f3:1b:d2:30:bb:43:16:76:af:72:5b:32:c8:02:fa:a8:f7:
         15:c6:ab:ee:c6:a6:ed:4e:da:07:ec:45:aa:a8:2f:3e:0d:84:
         52:65:82:b9:d6:af:63:e7:9f:f9:47:09:6b:fe:c3:72:a0:46:
         dd:94:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----