Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          FkNAaP5JbrWI8RukzDjYKAWXtEylinmSZQeEGY9p1SY=
Subject key identifier:   1D:9D:BC:35:FC:DF:56:12:9C:B4:56:B3:80:9C:8F:39:BB:59:B2:AB
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       0194BC3C1164B8D37344DD14B70CB094172F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          0F2E
Signing time:             Fri 31 Jan 2025 12:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:40 +0000
Files and hashes:         1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=)
                          2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=)
                          3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=)
                          4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=)
                          5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: /HT71xvt57tD/U4gLLsw8IDb5Zqmq8hndqX4UlFHNxc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:11:64:b8:d3:73:44:dd:14:b7:0c:b0:94:17:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Jan 31 12:00:40 2025 GMT
            Not After : Feb  1 12:00:40 2025 GMT
        Subject: CN=1d9dbc35fcdf56129cb456b3809c8f39bb59b2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:4a:cd:33:c7:44:26:5c:67:f2:59:05:11:
                    d4:64:60:1e:bb:cb:fc:31:9f:f4:90:3f:ce:f5:ce:
                    b7:f8:1a:21:c9:a4:04:ba:d8:31:41:99:9a:81:4f:
                    10:66:78:a3:39:9f:71:45:9b:64:08:ff:f9:e8:39:
                    77:62:58:bf:77:9e:a5:90:b8:80:56:c4:61:e1:29:
                    39:14:98:c4:8e:ad:0e:8f:c9:ee:99:d4:7c:8d:82:
                    60:eb:aa:be:68:e4:55:aa:42:69:ac:0e:38:df:d4:
                    05:32:ea:83:36:e9:7b:e5:55:96:bf:ac:40:0b:bd:
                    86:fa:f6:8f:08:75:c6:08:7a:0e:75:e3:65:03:56:
                    38:e5:82:7a:c8:bd:06:2a:f1:e5:7c:d0:13:24:4b:
                    19:da:bf:d3:5b:89:b4:7d:db:35:09:59:62:b6:43:
                    09:e6:33:1b:5e:30:87:c7:4d:8c:92:e6:18:af:54:
                    5b:a3:59:8a:30:7e:4f:9f:5e:92:5d:cc:a9:c5:ee:
                    bc:db:67:36:8e:93:07:4a:e5:80:94:2c:a0:69:c4:
                    eb:b6:c9:5f:74:03:a8:e5:96:fd:ac:65:38:79:61:
                    9b:fe:0e:22:ed:0d:c5:e0:c2:d8:9c:0c:2c:92:45:
                    96:0f:c7:3d:d4:ec:2e:89:ff:18:0e:fc:cd:91:d9:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:BC:35:FC:DF:56:12:9C:B4:56:B3:80:9C:8F:39:BB:59:B2:AB
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:fe:b0:04:12:da:bd:32:fd:97:43:0b:4c:9f:4d:8d:a8:
         23:8f:14:db:eb:ae:50:3f:09:05:18:ff:8c:76:94:84:32:65:
         29:ce:1f:fd:14:c1:9b:2e:74:cd:66:33:95:0b:10:d6:40:2a:
         a7:6f:62:16:a9:e4:e4:58:aa:1b:89:5b:1a:d4:e8:80:6a:2b:
         90:be:2d:94:44:f3:77:f8:da:18:29:0b:34:74:94:6d:63:c2:
         a4:f3:73:97:06:b2:df:c7:c8:8c:05:e3:0b:f1:91:33:85:10:
         a1:de:df:86:18:59:a5:7b:ae:2e:b9:c5:35:49:ca:7c:ad:f2:
         4c:16:15:36:17:c9:8b:97:5e:e4:05:9f:bf:ed:bf:65:b3:26:
         11:ed:bf:55:a3:5f:e7:d1:ca:c6:45:b9:2f:7c:fc:61:63:9e:
         d9:4e:41:52:28:ed:f7:15:91:a9:e9:b5:3c:e9:e5:cd:86:f2:
         02:5e:88:2f:c6:02:0d:42:ba:61:bd:eb:8a:22:fb:6d:39:b5:
         5c:f4:d5:fa:7d:47:eb:47:34:ef:d0:94:65:94:d6:c9:ca:20:
         0d:c2:5e:f5:b9:13:ad:42:32:89:0d:b7:88:f7:78:15:32:f1:
         bb:e6:88:c0:c2:5b:b2:d6:b0:c2:de:d6:ab:78:9a:a8:6c:20:
         7c:cd:16:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----