Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          SR+aNfNL+ho+7ADXuhvLryyjq6FR85/ln//rxSeZayc=
Subject key identifier:   2F:15:15:29:F2:F2:21:A8:B8:F7:CD:B4:A6:84:C6:56:9D:58:A3:60
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       0194BCE07DF08FD81840E7B7E13E0592E872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0B7C
Signing time:             Fri 31 Jan 2025 15:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:16 +0000
Files and hashes:         1: 6FBdm52HrIwxns50lJrMCqThYUM.roa (hash: Fb4owa3jjdnAYqjY2HP/KocZ2u55DXUdS4g1VNhxtCk=)
                          2: 8V29SLLHHHPak0CW_pb1i9F5mpI.roa (hash: hNuKjceR9DAU4JupE05WFNYQ/cRQ1qbfm397GXwMfeU=)
                          3: NuaYdI8PAUdP5rZIDe_aHIxvDG0.roa (hash: 9p6cAT0+JvuwI2Q0k7hF6wK1Ly//dC0ShsZ9CdG4PCA=)
                          4: Y51duMvjV_OQZmOCJBSIZCmhcrk.roa (hash: Q0RhIzzfhASN7KdMAgmx0KpJTYttwJFhhPb1OGIDnNA=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: vGicWzZaKy9R4XFVmAb4wo/8nVzn+6KXXZPK3cSIDnU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:7d:f0:8f:d8:18:40:e7:b7:e1:3e:05:92:e8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Jan 31 15:00:16 2025 GMT
            Not After : Feb  1 15:00:16 2025 GMT
        Subject: CN=2f151529f2f221a8b8f7cdb4a684c6569d58a360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:bb:0d:dc:b4:e6:e9:55:c4:07:7f:61:18:
                    76:a9:0f:a6:f8:a2:81:42:4b:c4:9a:b6:1f:fd:aa:
                    e8:77:25:25:ce:d6:0a:d3:df:a9:c7:24:32:2c:e4:
                    60:21:6d:ad:18:6f:fa:a8:4c:30:4b:3c:93:b4:8f:
                    61:54:a6:10:d5:84:81:4d:e4:6b:d3:22:bd:05:72:
                    07:51:94:8f:7f:7f:7a:e7:15:f1:34:cd:7b:a9:6c:
                    ca:d6:8e:4b:c0:08:db:35:31:a9:1f:b5:35:91:ec:
                    96:69:25:74:cf:5c:fb:fc:4e:f4:c0:d9:cd:4f:63:
                    16:fa:02:5e:ac:9a:57:ff:31:55:3a:4c:59:5c:c1:
                    dd:ec:fd:68:6f:8a:21:44:5c:10:02:09:03:d4:4a:
                    45:55:be:cc:06:d3:bb:ba:76:09:8c:94:ee:a0:bd:
                    71:08:21:b9:a2:cf:75:dd:df:f9:f7:e0:64:0e:e0:
                    cb:e4:e8:7d:f9:1c:10:8f:91:6e:12:04:7a:3c:7e:
                    a0:f4:ad:3c:af:b5:7f:1b:f0:0c:10:81:bb:2f:c3:
                    c9:00:58:3d:ac:9b:19:20:e6:c9:88:e4:7b:69:80:
                    c9:cf:a1:95:86:45:ee:80:d2:74:11:b9:74:50:66:
                    3b:a4:23:a6:b3:53:9e:2b:10:57:0e:b3:ef:b0:1c:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:15:15:29:F2:F2:21:A8:B8:F7:CD:B4:A6:84:C6:56:9D:58:A3:60
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:54:e1:22:41:41:b0:e9:ec:43:fd:3d:3e:71:4b:e4:41:
         ec:0a:5d:7c:b0:49:ea:12:06:55:5f:37:2c:78:3f:d2:85:e8:
         67:40:ac:14:37:84:78:87:a1:a2:2f:00:a6:e1:24:bb:ae:7e:
         62:b2:2d:b7:36:fd:c1:72:f0:39:a1:74:96:53:26:9b:85:d6:
         6a:aa:0a:5b:51:1a:91:57:f0:40:f6:a1:c5:0a:f1:2e:bc:fa:
         0d:61:1c:f1:c5:3d:34:8a:11:e7:23:c9:fb:36:71:3a:36:cc:
         a8:8a:45:3f:68:ba:48:5b:8d:c2:a7:b9:6c:9b:6a:fe:79:04:
         f5:87:0b:96:3a:a8:42:5b:29:a2:8f:c5:4a:94:74:fd:3f:8b:
         92:09:59:88:45:55:4d:28:b7:0e:71:57:e5:c1:1d:fe:f9:8c:
         45:88:4d:23:cc:25:c0:dd:84:8a:dd:ab:20:0d:7d:ab:b2:b8:
         a3:1f:68:83:35:00:51:2d:48:b3:75:9c:55:e6:e9:a0:02:51:
         c1:82:7b:58:94:07:5d:f2:37:78:ef:ee:7f:f7:d7:5d:da:ce:
         a0:ad:3c:ab:6f:5a:5c:25:12:cd:f4:ff:aa:de:82:71:51:3f:
         69:1b:72:c9:41:39:cf:bf:2f:e7:3e:eb:5c:99:30:81:db:52:
         4b:a1:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----