Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          a4q4X9+Ke53CI4jHynm9KxmnMnS9r7TpYdXOHvcdQCM=
Subject key identifier:   86:7F:14:27:BF:A8:4F:05:91:35:FE:2A:26:7A:A0:CF:C3:0C:D4:EB
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       0194BD85ABA94D035657E4D06855FBDB93B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          1445
Signing time:             Fri 31 Jan 2025 18:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:41 +0000
Files and hashes:         1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
                          2: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
                          3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
                          4: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
                          5: eyUo66luB5QRDX6w7YyJ7pXY5Hg.roa (hash: 2hmFNfoArlOZk2oHOZuni7YNp6ha/UAEA8AYiguMdtc=)
                          6: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: PU8rmHo0qOUO8DTcuCO5DXuNJdffCkeoEgSqgxMuLmU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:ab:a9:4d:03:56:57:e4:d0:68:55:fb:db:93:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Jan 31 18:00:41 2025 GMT
            Not After : Feb  1 18:00:41 2025 GMT
        Subject: CN=867f1427bfa84f059135fe2a267aa0cfc30cd4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:cc:75:ed:2b:3d:8e:b8:f7:a6:33:fd:2d:
                    91:31:14:2c:9e:9b:74:58:58:f2:29:3a:64:79:de:
                    e6:a3:68:cd:d3:13:25:79:3d:6e:f4:aa:2c:12:1b:
                    99:32:2e:b4:59:4e:40:56:3b:9a:b0:75:57:74:44:
                    c3:88:2c:07:ac:4d:f8:84:67:d9:55:3b:79:50:58:
                    f2:86:71:52:34:48:ff:39:5e:84:a9:65:95:de:f9:
                    48:d8:98:08:89:7d:9b:de:27:13:13:a8:a2:93:76:
                    d0:c6:0a:dc:a4:8a:90:67:0d:a4:3f:ff:46:85:c3:
                    b5:fe:e6:87:c8:11:99:d0:5c:60:5f:b2:40:00:9c:
                    06:d8:f6:9b:20:47:d3:38:8f:e5:2d:6b:a4:81:42:
                    e9:66:53:d3:b5:0d:bc:90:b6:51:41:29:06:bc:a2:
                    c7:21:90:31:cd:41:9f:66:dd:c6:33:8b:48:d8:c6:
                    a4:ba:1e:b0:a6:5e:f6:b7:cf:2f:15:7b:f3:b3:5d:
                    40:25:f2:d2:be:60:99:43:22:18:8c:14:70:0f:05:
                    d0:a7:d4:fc:21:e6:a0:da:29:bc:33:fe:ec:94:1d:
                    60:e7:7a:fa:73:c0:88:44:96:db:e6:77:8d:ae:6e:
                    a6:18:f0:b5:65:4a:91:49:65:80:f9:67:f1:d3:b0:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7F:14:27:BF:A8:4F:05:91:35:FE:2A:26:7A:A0:CF:C3:0C:D4:EB
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7c:aa:ce:db:6a:1a:83:fc:0a:ff:ae:69:0e:32:41:a2:7b:
         6c:23:a2:11:16:e5:58:77:af:f1:5e:9b:70:7f:e3:84:99:3b:
         c4:d5:44:a3:d6:ca:38:ef:52:6b:71:24:07:2d:08:b1:44:0e:
         a3:37:5c:42:37:b8:fc:62:90:f4:33:8a:9c:1f:3f:f5:8a:70:
         58:24:92:88:75:25:71:5c:8c:84:74:85:79:47:84:7b:5e:b6:
         9f:e0:96:76:5f:38:be:1b:0a:b4:4d:b2:c9:13:e2:6f:34:4e:
         df:9e:fa:d6:0d:2e:c5:45:4f:6c:5e:c8:f9:e4:c2:49:28:e8:
         4d:45:65:a7:98:2b:24:f1:d3:ac:f7:db:c3:13:66:e7:7e:2b:
         d3:f2:6b:b8:82:97:94:f5:6e:f3:3a:98:90:a4:b7:ea:3b:54:
         90:f1:7a:0d:d1:32:4d:8c:82:4b:a9:10:58:fd:9a:90:98:4a:
         f4:54:9d:72:26:75:68:68:5c:61:4d:6d:41:2d:75:69:05:29:
         7f:e5:1e:18:d3:3c:eb:c9:32:87:35:1d:3d:97:9a:8f:b0:27:
         83:2f:dd:27:19:8c:05:88:c3:54:1c:84:42:d8:9d:eb:0c:59:
         e5:7f:c3:af:1a:01:8f:3f:af:23:02:1a:c0:a7:d0:8b:61:1f:
         98:10:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----