Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File:                     KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier:          kiJBSRvn5bJU3z0UFX7UE1R7I8MBPmwc//7tVMftzds=
Subject key identifier:   EE:0E:C7:6F:F1:6A:C8:1A:2B:91:5E:7C:45:69:6F:A2:E2:0E:6B:3E
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer:       /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial:       0194BD8567E82DE14395AFE9E65A482BE602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number:          0B53
Signing time:             Fri 31 Jan 2025 18:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:23 +0000
Files and hashes:         1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
                          2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
                          3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: k7JAbEV4WGRWvTPowqmmY7ojIx3Wyt++W9cmAaWpO/8=)
                          4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:67:e8:2d:e1:43:95:af:e9:e6:5a:48:2b:e6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
        Validity
            Not Before: Jan 31 18:00:23 2025 GMT
            Not After : Feb  1 18:00:23 2025 GMT
        Subject: CN=ee0ec76ff16ac81a2b915e7c45696fa2e20e6b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:30:2a:66:ac:27:c7:32:73:df:3c:68:29:
                    d8:bd:f2:6d:c8:74:61:2c:da:07:63:d9:4c:29:a3:
                    d5:d6:c2:a0:96:f9:18:85:94:c3:f4:c1:d6:1a:a5:
                    7e:ac:4c:7a:e7:70:aa:91:ce:e9:54:c8:b0:75:11:
                    0f:0c:6f:b6:39:4a:36:3b:c9:4d:bf:79:4f:e0:56:
                    16:03:9f:77:12:8b:51:82:fa:2b:aa:4e:92:d3:8e:
                    46:3c:31:4e:af:b4:b3:5e:77:25:85:a5:17:f4:bd:
                    40:be:2c:8a:6a:bd:67:56:51:77:b2:63:24:8a:43:
                    05:18:66:fb:bd:70:2a:44:bd:34:f1:d2:6b:23:f4:
                    37:86:38:30:5d:0d:b4:a5:1d:99:ef:67:3c:a6:4a:
                    d8:2b:26:f3:37:8f:b6:b9:7b:d6:03:3f:af:40:bd:
                    8a:f1:04:4c:ef:34:b3:0e:f5:77:69:d4:d0:07:17:
                    be:15:d4:5b:fd:93:74:cc:a9:c4:77:e9:87:8a:c9:
                    18:f1:01:a1:fe:12:0e:9a:5e:c9:5b:60:d7:4c:99:
                    35:71:75:ad:e4:80:d7:96:02:89:f3:d5:e7:d9:a7:
                    1b:cf:a2:ea:a0:d2:2e:e3:bc:f8:f3:75:81:15:e4:
                    16:31:72:c2:ba:fe:70:93:95:7f:18:b8:e7:c3:91:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0E:C7:6F:F1:6A:C8:1A:2B:91:5E:7C:45:69:6F:A2:E2:0E:6B:3E
            X509v3 Authority Key Identifier:
                keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d1:99:dd:6b:86:d9:d8:15:9a:d8:11:25:62:a3:95:85:c2:
         5a:f0:d6:18:af:44:03:62:5d:11:51:73:97:4d:c0:55:32:15:
         e1:78:16:74:33:9d:a3:2b:00:38:39:87:0f:67:33:60:73:92:
         b3:3f:21:d3:70:df:27:a1:8a:27:d3:88:02:d1:20:bb:49:27:
         6d:15:c0:8f:87:3f:fe:45:12:23:3b:4f:fd:73:20:78:26:90:
         07:1a:0c:69:73:9c:48:14:a8:5b:2c:2b:a8:85:9a:46:ce:2a:
         a3:e7:d0:7c:0b:d6:aa:46:87:ea:06:b3:31:e9:6f:72:96:8d:
         63:0d:76:e7:5b:6f:6e:08:aa:29:7d:fd:28:b8:52:a9:10:03:
         11:ff:4b:19:6b:9b:a0:f8:e1:e9:37:9a:54:6c:c5:f0:1d:1d:
         b6:47:55:24:80:3c:cd:8b:b2:e4:8d:b9:c4:9e:c1:c6:3b:4b:
         88:49:52:f2:9b:4b:4d:06:1f:c7:fd:3e:91:ac:73:1c:58:f5:
         63:b6:cd:34:5c:42:61:3b:79:73:8e:2f:68:b9:5e:e9:9c:65:
         19:d8:7e:6b:2d:05:f3:2a:36:fa:1f:fc:ce:f2:61:25:a3:0f:
         44:42:f8:55:23:e3:27:9c:82:4b:07:cb:24:86:32:b4:90:b7:
         87:35:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----