Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          6QJvoRLYjmUJRd3WufLOHqT3cuUoDGCiabsIwDxU3lM=
Subject key identifier:   9F:D3:AC:6D:48:06:E0:FD:A2:D3:AD:A8:E7:E0:06:1D:0F:8E:50:1E
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       0194BC72A771B09DB547E1B12FF721EE835F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 13:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:17 +0000
Files and hashes:         1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: 40e7+zZ6NWX7d0oI0/JfSowPe+T9mbdtw9yGGV+NKJ0=)
                          3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
                          4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a7:71:b0:9d:b5:47:e1:b1:2f:f7:21:ee:83:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Jan 31 13:00:17 2025 GMT
            Not After : Feb  1 13:00:17 2025 GMT
        Subject: CN=9fd3ac6d4806e0fda2d3ada8e7e0061d0f8e501e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:41:dd:14:c2:51:8c:52:72:c5:1c:f7:4d:
                    20:ba:d8:28:2a:88:7e:27:16:c2:f4:bf:bd:97:79:
                    7f:71:17:11:9a:06:ff:a0:77:5d:77:35:3f:60:d0:
                    2f:1a:ee:da:44:f1:7d:b2:0b:74:e7:70:cc:00:b0:
                    aa:65:c2:3a:31:1a:3d:0d:2f:12:0b:33:c6:8f:3e:
                    c4:37:39:59:f7:54:da:39:9d:c5:a9:f7:e3:bd:1a:
                    dd:bc:94:68:fe:b9:72:2b:b4:b3:1a:bc:e6:19:f4:
                    e4:2a:ff:4c:be:e3:ae:ab:f8:0d:d4:a6:86:ab:a4:
                    ad:65:75:fd:54:55:9f:80:05:95:4e:d7:5d:35:0b:
                    20:39:9f:a3:8e:cb:0c:52:8d:69:57:83:d6:d2:9d:
                    0e:ef:79:fd:8a:c2:77:2f:fb:fd:e8:ad:31:66:39:
                    d2:df:ac:06:42:e7:52:af:d8:09:1f:ce:0c:cb:8e:
                    61:3f:29:bb:a3:e7:bc:17:9a:75:a7:b3:6c:36:32:
                    4a:1e:cc:ca:4d:d1:e5:0b:b9:09:ff:eb:7d:31:bc:
                    b2:c6:cd:3e:24:50:6c:dd:15:9f:5f:dc:a7:46:1b:
                    6d:92:24:23:58:d1:55:d9:4e:86:fb:b9:ae:5b:e1:
                    ec:44:3d:f0:24:9a:ac:d5:41:89:a4:ad:bd:df:84:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:AC:6D:48:06:E0:FD:A2:D3:AD:A8:E7:E0:06:1D:0F:8E:50:1E
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:9a:f4:a9:00:6f:5a:3b:7e:70:20:5b:12:17:f7:03:98:
         e0:cb:f7:10:4a:e7:e2:da:5b:82:f9:62:a7:f5:d2:07:65:08:
         c2:6a:07:58:18:47:45:bc:16:c7:2f:1c:c9:20:54:18:7e:f0:
         20:f6:d4:09:02:76:40:f4:69:41:b1:9d:ef:6c:30:22:39:ac:
         a8:16:74:99:e0:64:41:2d:5f:0c:67:4c:c4:de:f2:85:25:cd:
         c7:d7:8c:ed:f5:24:20:8f:d8:03:a9:5d:68:2b:e9:1d:4a:30:
         30:7a:8a:d3:b5:03:bf:3a:93:53:e7:21:ce:bf:bf:cb:1b:3a:
         69:c2:6a:54:42:8d:f9:a9:21:5f:00:db:a0:70:c1:e8:35:74:
         6c:ce:86:2a:96:a3:0e:ba:64:f8:76:d3:f9:43:da:11:73:73:
         41:c5:13:0a:cb:7d:28:c4:e1:fe:df:05:e9:08:76:f1:ad:81:
         fb:ba:13:69:37:fb:7a:d4:97:de:b5:1f:72:77:6e:7e:f6:57:
         78:47:4d:e4:86:13:d4:58:18:35:e0:52:05:c4:ab:67:4a:f7:
         8e:42:7c:20:5d:cd:f2:21:3c:2c:e7:c3:4e:64:37:cb:da:5e:
         fa:17:30:ef:df:d2:50:42:48:03:9f:6e:91:70:fd:bf:2d:39:
         e8:b7:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----