Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          OfOa71nEDB41fRKMgiww0ImOoUM7DvsJ3gOxcKw2QDU=
Subject key identifier:   FD:B9:57:F4:23:9F:4E:81:A5:AB:AD:DB:1D:3B:D6:4A:A0:92:DE:62
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       0194BD852BBA800C2471F78A620DA453EAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          0584
Signing time:             Fri 31 Jan 2025 18:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:08 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: KZxT3UoHwZjoqepBLiTiJie3/S7NOFxfxkR7DnqDCpI=)
                          2: MzxQnXbI2W7tTUv9-GpYRiwer6Y.roa (hash: ShncGR7jcZH4xdPF/fjNQO1+bVZJWb8hKZoGUpL2aXI=)
                          3: NsSedmTQW8OnTTsqv3X8CBZy-xU.roa (hash: WFkKh3bAC4MDDNtqyFfpo7GUVyreugPfu/r7LcM/fN4=)
                          4: TeB088r0q83Xt0BxDsUFRJ09n_w.roa (hash: G48KXbKrX68pg0VWA7DNE58/xU413WQGSqX5xHVo4rY=)
                          5: eZ1oRKw2ZmvD0_NWa-kdmh2g-eo.roa (hash: 2jAE9EFeYAI0mBmHLdLHHE90HLI9cIG+7iKSbXwklN4=)
                          6: l5LQQJ1hscP11M9PGOZJoYipJjA.roa (hash: 1Qefj38Zjj0ROOLLrKtBW86/Osz3b9lr4tBY77Lptdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:2b:ba:80:0c:24:71:f7:8a:62:0d:a4:53:ea:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Jan 31 18:00:08 2025 GMT
            Not After : Feb  1 18:00:08 2025 GMT
        Subject: CN=fdb957f4239f4e81a5abaddb1d3bd64aa092de62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:45:50:f2:67:2a:b4:74:b9:97:04:8a:28:
                    b5:20:d1:54:40:2f:93:b8:61:26:88:6b:27:f1:b8:
                    fe:bc:45:51:2f:9c:70:7f:97:9c:6d:7c:6a:c6:5a:
                    71:08:2a:eb:68:8f:01:8a:d1:d5:3b:bc:de:c9:e5:
                    bc:50:62:43:17:47:df:e1:fc:32:0c:0c:ae:51:b1:
                    42:3f:66:57:a5:66:46:fd:05:3c:ea:1c:55:9b:3d:
                    1e:c9:ae:85:53:19:c2:d9:81:3d:8c:cc:d9:ca:39:
                    82:46:9f:1a:af:df:4f:06:84:71:cf:d5:bc:e5:43:
                    b0:9c:c9:45:3b:33:3a:c2:51:c1:fe:db:fc:91:ac:
                    87:77:ee:58:6a:b8:55:92:9c:d4:fa:64:44:35:2b:
                    93:4a:03:e7:f7:91:4d:e6:e3:02:89:37:61:b9:4d:
                    1a:41:04:35:54:02:45:1e:b7:73:ce:22:0c:6c:a3:
                    d1:be:68:d6:89:ef:cd:98:80:02:a9:54:2a:c6:7d:
                    d8:e0:46:22:97:11:01:7b:e1:6c:1e:78:37:6d:20:
                    e8:a8:f5:87:9c:1b:07:17:d0:ae:42:c6:cf:94:0e:
                    25:17:6c:99:a6:34:fd:2d:e1:3e:d9:c4:9d:98:00:
                    c2:a1:34:28:72:fb:e0:99:45:5d:ba:98:85:af:26:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:57:F4:23:9F:4E:81:A5:AB:AD:DB:1D:3B:D6:4A:A0:92:DE:62
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:64:79:02:0e:3a:e0:a0:37:24:12:c3:40:db:82:1c:df:
         9c:5a:17:41:df:41:cb:0e:df:99:03:77:55:dc:29:b0:a8:40:
         de:35:ea:96:4b:5b:ec:2e:fa:47:66:bb:67:13:28:fb:fa:6a:
         bd:8f:31:b8:88:e7:6e:fe:ae:7e:be:1a:97:d3:a9:fe:15:f9:
         de:bd:c0:dc:ae:e0:59:2c:42:fb:05:97:3e:5d:5b:5c:40:97:
         83:18:c5:62:87:22:15:7f:47:b1:1b:87:3d:ef:ad:d6:65:9c:
         f9:be:8a:34:f3:7f:c0:ba:fd:0d:e2:81:07:23:f6:a4:17:f4:
         82:fe:06:9a:d3:ab:3f:fd:6b:5d:b9:b8:5f:0d:1e:07:5c:3e:
         10:ad:50:25:0a:3b:77:aa:5d:a9:a4:d9:4b:a3:62:73:c5:6a:
         3c:2a:0d:cd:71:21:8f:c0:39:f2:61:16:06:c9:f7:08:d3:2c:
         67:0f:10:8f:26:06:7e:bc:a1:7e:88:b1:8e:93:c4:c8:f2:ef:
         01:23:ce:2e:08:d9:ed:d6:e3:af:12:f8:b6:4b:24:1d:64:7c:
         90:c3:92:6c:f0:af:aa:c4:3b:9f:be:01:21:26:80:a4:8c:e0:
         a9:f8:48:f0:43:e4:7e:22:39:89:07:12:2e:e6:64:e0:b2:00:
         e3:e2:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----