Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          CH4Bv3Ee0NLlQ36M2Cp2d3aj1dI/z8taieOHHz50GE4=
Subject key identifier:   F3:50:2C:6D:66:9C:96:DF:AD:75:3A:AE:F9:67:F3:35:25:CC:0A:58
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       0194BCE0E869152F1584469DA8B57D6B53F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          0C23
Signing time:             Fri 31 Jan 2025 15:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:43 +0000
Files and hashes:         1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=)
                          2: 84g9kcbpLMOYWyAe0WNiCfk8rQ0.roa (hash: Op4AJknS0Y4sLCSDEIKA+ch9xkPiEHCr8XwgBypEB5o=)
                          3: ImRadYww2A6Dq-tSYC17eeyNy-g.roa (hash: N+zi0bvehSZ414gXmh5UuaJfZjfWCNT2T2LvtSDCQO0=)
                          4: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: /pJaAv9FWCeV31UuA5E+mIvo49gHhzTN0GXn+5CRFIs=)
                          5: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=)
                          6: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=)
                          7: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=)
                          8: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e8:69:15:2f:15:84:46:9d:a8:b5:7d:6b:53:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Jan 31 15:00:43 2025 GMT
            Not After : Feb  1 15:00:43 2025 GMT
        Subject: CN=f3502c6d669c96dfad753aaef967f33525cc0a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:a1:13:a9:78:a9:93:d1:ac:30:bb:d8:d3:
                    c2:05:bc:e3:ea:a8:50:83:75:ae:d9:e6:0a:6e:83:
                    82:76:4b:bf:57:e5:f2:a7:57:db:61:16:6e:7d:19:
                    67:a5:13:eb:a7:8d:47:72:d0:38:b1:b1:02:b4:61:
                    cb:4e:68:a5:63:ff:81:12:b6:ac:3b:fa:f5:9d:61:
                    d2:30:7b:e1:7e:32:65:9b:db:9b:46:78:a2:b3:c9:
                    49:b1:df:34:d3:25:e5:71:33:4b:d5:d9:09:53:27:
                    20:aa:f3:e5:c5:4a:cb:11:e6:48:2a:6e:e4:9f:39:
                    7b:1c:bd:72:4f:ad:26:f5:77:f2:6b:8a:e2:78:a6:
                    4d:3c:3d:c3:6e:1a:07:df:63:8c:74:44:9e:94:70:
                    0a:7d:77:cb:86:f4:a1:ea:8e:b5:09:c2:b9:66:52:
                    d5:f1:94:ca:16:62:16:b1:a9:fe:30:ac:bc:83:e2:
                    aa:8c:33:e8:7e:ad:29:ce:61:24:31:f9:9c:b9:26:
                    09:ff:f2:97:13:fb:ad:25:f8:88:fa:68:54:68:a9:
                    0c:01:fc:77:86:c6:fb:46:0f:b6:4e:6f:5d:5d:d7:
                    c9:1f:3a:00:47:40:72:da:7d:10:59:c7:29:6a:b5:
                    76:89:57:c8:b6:18:47:b5:1b:62:30:2c:bd:1d:9a:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:2C:6D:66:9C:96:DF:AD:75:3A:AE:F9:67:F3:35:25:CC:0A:58
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:ff:fb:73:72:6d:d4:18:77:9c:11:34:36:18:97:cc:57:
         f4:af:7b:37:91:f7:7d:cd:33:96:cc:af:7b:f4:12:62:e5:19:
         c7:77:98:ab:49:dc:bc:fd:42:a4:c9:82:4f:a9:73:65:49:b7:
         17:3b:7a:7c:49:da:c1:5e:7f:73:19:e2:1e:b4:3c:c0:6c:9a:
         38:f6:a5:fd:1d:a7:1c:bc:58:1d:43:a8:0e:ed:5a:1c:f2:89:
         f1:8c:1a:65:72:c1:f7:3c:e1:a3:4f:64:83:47:80:36:51:bd:
         da:36:d3:b3:e5:b2:71:11:5f:51:99:9c:fb:d1:a0:7e:a2:cf:
         a4:1b:27:f5:06:24:29:29:67:4e:a0:b5:87:fa:33:37:4f:50:
         6f:1a:06:5e:56:fd:ac:63:aa:39:d9:4b:e6:c7:14:19:68:dc:
         82:2f:21:f3:fb:fa:32:5f:23:92:4a:4e:26:50:66:64:e4:97:
         3e:3a:cb:1f:55:0f:33:fd:f1:fd:3c:ef:38:bb:64:e8:fd:94:
         c9:7c:fb:7e:6d:29:0b:01:ec:af:26:53:81:bc:1c:31:51:50:
         00:ae:ad:26:9a:ae:0b:54:0b:85:82:62:0f:f7:c2:16:af:3a:
         a2:b3:03:c9:8f:3e:7f:fa:28:66:95:97:54:07:f4:61:0e:84:
         9f:2c:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----