Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File:                     9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier:          IEVx2b0PZdYcqBwy7X1wgbXKPMBRLVZ/jWdcvosUET0=
Subject key identifier:   F9:7D:5D:06:F4:50:DF:AF:DB:6E:E4:3E:93:31:2B:85:C2:11:E6:07
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       0194BC3BF1B587C2E08DB99FD85B39ECCDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 12:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:32 +0000
Files and hashes:         1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=)
                          2: 3mDkk34bJb4gY0sfEjaxzHdFLc8.roa (hash: 5VHWD5VB51eHKwZNQXM0xdI8gW8CMenbRBsvmiBljiA=)
                          3: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=)
                          4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: 0lB2A9x9OwVSnC2tUNBPCgC5rpfFMU0RTVvHjaeiw90=)
                          5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=)
                          6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f1:b5:87:c2:e0:8d:b9:9f:d8:5b:39:ec:cd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Jan 31 12:00:32 2025 GMT
            Not After : Feb  1 12:00:32 2025 GMT
        Subject: CN=f97d5d06f450dfafdb6ee43e93312b85c211e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:dc:66:cb:54:49:ad:6a:72:99:a5:28:5d:
                    7e:0c:0a:61:5a:58:62:45:5d:43:4f:8e:26:d6:53:
                    d4:10:5c:bd:d0:ef:f2:05:b1:98:5c:98:3c:3c:8c:
                    ff:52:63:13:a6:c2:6f:d1:af:c6:49:11:10:b2:21:
                    8f:2f:bb:79:d8:5e:36:d0:b1:04:26:c5:65:98:2d:
                    87:00:ab:b7:6e:ef:d9:e3:68:14:49:9c:49:57:03:
                    64:2c:92:98:72:cb:a1:6e:2e:d1:e6:12:5e:00:c7:
                    19:9e:0e:bf:54:89:62:ec:55:43:fa:38:e4:8d:fd:
                    9d:d3:91:ff:e6:ae:69:f2:35:30:af:f0:41:5e:ff:
                    e5:f3:2c:96:26:b4:9d:5d:75:f7:64:81:03:a4:ec:
                    fe:77:5a:89:1a:7e:e4:29:ff:79:1e:a3:66:24:77:
                    cc:90:6e:e8:f8:dc:71:c4:6f:4e:3b:b9:30:f9:22:
                    1c:05:70:9b:ef:dd:26:83:ae:5e:78:74:48:68:82:
                    86:cf:79:d7:85:3f:e4:c4:18:97:6e:c4:67:b6:f7:
                    1a:57:68:f0:e3:fd:a1:c7:83:df:71:1c:d3:b8:24:
                    35:67:56:ef:a7:fe:ab:6d:f7:b6:b8:98:e7:b8:75:
                    92:6b:58:7d:ac:d2:d0:87:1b:86:be:27:5a:2e:8d:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7D:5D:06:F4:50:DF:AF:DB:6E:E4:3E:93:31:2B:85:C2:11:E6:07
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:58:02:78:e9:21:2f:30:fb:10:49:54:27:24:d1:f8:8b:
         1b:f3:e3:5e:79:bd:2d:b0:a9:02:77:49:a6:87:d5:af:65:d1:
         68:e1:db:3c:f8:3b:a8:8b:fa:d3:14:f1:82:2e:d7:b5:52:79:
         cb:e1:65:1b:73:0c:12:b0:f9:d9:69:f4:f7:a5:c2:16:a3:93:
         18:86:07:ef:57:c8:af:16:74:68:04:7e:89:d9:97:b6:9d:d2:
         28:ab:7b:b7:55:47:89:52:89:c8:b9:04:cd:0c:86:ba:9a:85:
         bd:f6:94:40:49:83:fc:ff:2d:ae:00:17:3c:64:3e:8f:5c:35:
         9e:7a:78:63:ab:28:de:ff:74:c6:9f:d5:61:58:c1:63:da:e4:
         4f:4a:0d:17:b8:c3:28:c8:5a:b8:64:d1:96:0d:e7:31:3d:7d:
         67:7c:cd:6e:3b:99:cc:93:01:a3:fa:14:1c:bd:e9:db:1c:f6:
         dc:ce:c0:89:41:9d:6b:38:34:c2:88:25:61:f9:58:03:4e:8d:
         46:20:bf:4a:09:eb:48:74:fd:9e:19:2c:79:79:b8:39:84:f8:
         6c:69:b7:1b:1a:db:e6:75:aa:ba:1d:d1:29:6b:43:98:62:9a:
         d9:0b:f5:89:29:b7:e6:59:16:d3:01:c8:09:6c:4c:b2:41:3c:
         87:5e:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----