Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          HhvfcBSktQ8Q+oGigv4UJA2Ug/h6b49WX4JU5+4imKc=
Subject key identifier:   CC:90:49:15:EB:C6:6A:52:9E:26:59:8C:96:38:29:89:0D:E2:91:35
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       0194BCA97B289154B6713C8ACA1C837E4537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          11E8
Signing time:             Fri 31 Jan 2025 14:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:11 +0000
Files and hashes:         1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
                          2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
                          3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: /obZLPueJbYra3Hgv/3ES9UTPA7/owE33ApDVxXkgxo=)
                          4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
                          5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7b:28:91:54:b6:71:3c:8a:ca:1c:83:7e:45:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jan 31 14:00:11 2025 GMT
            Not After : Feb  1 14:00:11 2025 GMT
        Subject: CN=cc904915ebc66a529e26598c963829890de29135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:f4:cd:ba:9a:9c:e2:11:46:19:11:87:9c:
                    71:28:a2:c3:4b:fa:4d:b4:4b:19:88:77:9c:38:ac:
                    c9:a3:8d:80:97:d8:e5:f8:d9:9a:f6:a7:58:fb:7b:
                    75:f4:2d:3d:e7:6c:be:e9:72:f3:c6:38:0a:ec:d8:
                    51:0a:40:b6:63:5b:75:08:85:fd:a8:3d:8f:ed:1c:
                    69:d5:b8:36:4e:05:1d:fe:8f:5a:ed:7f:27:25:86:
                    eb:3b:54:ea:6e:62:23:1a:03:94:fe:d3:7f:be:bc:
                    4e:60:69:6c:0d:2d:29:73:75:c2:6a:f4:d1:8d:93:
                    b3:8f:ee:cd:fc:08:19:71:f2:a0:7b:c7:b3:d9:a9:
                    40:86:1f:08:ee:6f:a0:e1:65:da:48:35:1c:ac:3a:
                    b5:54:e5:1e:f2:42:a5:8f:86:67:f0:98:74:0b:e5:
                    33:95:ec:db:ca:ef:ed:7c:75:26:10:c3:ee:4e:2f:
                    44:a0:58:43:a4:26:1a:77:cb:e7:49:e3:82:83:a7:
                    21:04:92:1b:be:b0:7f:02:8e:fb:3a:93:ea:93:c3:
                    23:49:2d:fa:78:78:70:c2:47:32:83:ea:86:a8:76:
                    25:2f:7b:70:96:bf:14:e8:d8:50:78:8b:c4:75:ce:
                    61:f6:be:a4:04:b4:ef:a0:b6:8a:f2:fe:d1:b7:34:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:90:49:15:EB:C6:6A:52:9E:26:59:8C:96:38:29:89:0D:E2:91:35
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:88:4f:19:72:54:90:75:ca:45:e2:09:a9:d9:4f:b1:0a:9b:
         37:1a:7f:f2:8a:f9:d4:34:6d:66:3e:74:aa:1e:76:37:66:3b:
         e4:0e:d1:11:a6:c7:c5:01:3e:7c:ac:6d:4d:89:29:47:be:f3:
         28:5b:3c:fe:2e:24:15:17:e2:b1:23:68:d2:74:f7:3b:dd:88:
         ae:9b:95:f0:a3:ef:18:14:9a:a7:4f:3d:7f:86:25:70:1e:17:
         3f:4f:82:58:3b:3c:28:2e:ce:4d:64:2b:e5:bc:e3:bb:20:38:
         da:f0:a8:b8:14:e3:e2:dc:6a:a2:c1:8a:cc:ad:64:58:86:51:
         96:bc:bc:0e:fa:8e:83:54:c1:ac:0c:27:8b:98:e0:9c:68:d3:
         47:51:03:36:68:84:02:e9:9b:47:54:fd:66:a7:7b:9f:d5:81:
         fd:dc:c3:36:43:81:44:8f:1c:ef:60:e8:86:93:e1:cb:6d:ae:
         7f:cb:41:37:0b:8e:d3:ec:74:17:30:a0:50:86:8b:b5:4b:7f:
         00:54:da:4b:37:71:28:a5:89:c4:6a:f1:44:11:79:dc:05:8a:
         c2:8c:b4:05:0a:bd:1c:b9:28:1a:53:05:02:40:01:70:77:bd:
         92:7c:78:e0:d6:1d:a9:a0:26:b0:3f:42:2c:b0:42:0f:90:14:
         df:7b:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----