Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          NbIByM/Pg9OExY2qW7rPxVe9iY2d0eIaxXtlbIzqoGg=
Subject key identifier:   12:78:4F:9F:4E:85:8C:99:32:6D:BF:4C:8C:01:E5:CA:CD:9D:CA:5B
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       0194BC3C8777CBB34788C55ABDCA3048F298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          0EE9
Signing time:             Fri 31 Jan 2025 12:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:10 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: 7HfeH3iynem8rWRLh/S4JvPVvmGGBdLReEhIbtkRiZM=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:87:77:cb:b3:47:88:c5:5a:bd:ca:30:48:f2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Jan 31 12:01:10 2025 GMT
            Not After : Feb  1 12:01:10 2025 GMT
        Subject: CN=12784f9f4e858c99326dbf4c8c01e5cacd9dca5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:a4:15:cb:d3:46:ec:24:b7:d7:6d:2a:10:
                    5c:de:14:45:f2:b6:88:d1:2b:54:e1:35:19:a0:a2:
                    84:7d:dd:4d:19:04:2b:e0:de:9e:9f:e7:ac:45:9e:
                    07:c5:46:82:e1:66:e5:80:76:6c:72:65:11:a6:53:
                    30:d7:ee:70:f7:39:53:b7:dc:1f:41:6c:2b:59:28:
                    48:13:27:1c:75:b8:7b:bc:5e:1a:2c:04:8e:ed:32:
                    8c:de:c4:a7:fd:94:4a:8c:ae:ed:f9:a6:ea:bc:41:
                    d7:e2:d2:69:8b:aa:6c:ea:04:a6:53:85:13:ce:17:
                    59:dd:a1:3c:be:d1:d2:a5:56:d6:81:f9:86:48:66:
                    f0:38:bb:4e:63:6e:97:e9:53:9f:bd:a3:09:a7:25:
                    e6:5e:8d:16:aa:7c:83:bd:1f:f2:bb:39:29:ed:8d:
                    b8:99:b4:c6:c8:10:c3:0f:4f:00:30:ab:59:57:75:
                    1d:df:1a:6d:f4:98:e4:aa:cc:01:3d:48:c0:66:d8:
                    d6:71:6b:e4:1f:e8:59:d1:34:d6:08:0a:46:c0:83:
                    30:87:f3:db:25:a4:69:34:36:db:f2:92:cb:80:d5:
                    1c:ce:8e:22:d1:60:00:6d:79:d1:67:53:dc:22:b5:
                    81:8f:f2:cf:cc:12:10:18:26:8c:eb:cf:33:1b:93:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:4F:9F:4E:85:8C:99:32:6D:BF:4C:8C:01:E5:CA:CD:9D:CA:5B
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:05:e7:18:7c:cc:82:70:81:a4:fb:07:54:1a:50:e4:f3:1a:
         ec:70:c7:fe:05:15:a7:16:8d:86:ea:0a:c7:c6:6e:20:b6:42:
         6b:33:e6:61:e4:58:b2:a8:ad:8a:64:f5:84:b8:a6:58:0f:f1:
         1e:1c:f8:5b:e1:a7:d8:9d:34:96:01:bc:71:23:ee:5a:9a:23:
         33:69:d0:d3:f9:be:59:ae:46:74:c9:b6:56:5b:21:41:4d:2a:
         7a:2c:39:7e:88:f1:49:ca:41:b4:53:25:8f:48:d1:53:5f:80:
         c0:4c:8c:7c:91:94:21:e1:d4:af:c7:d0:57:79:1f:56:a8:94:
         cd:7c:c0:1a:c9:90:c1:f1:f8:6a:f0:bb:c1:88:85:97:3b:45:
         39:df:3b:f6:03:76:e3:06:ac:80:4c:b5:16:cd:f2:90:b5:84:
         83:ae:20:da:7b:8a:a1:55:98:5d:b4:94:b6:56:39:ae:1a:c3:
         60:5e:88:a3:58:0b:44:79:ba:dc:f3:ba:90:f4:6c:83:53:0a:
         ea:04:52:84:96:81:fc:ac:71:01:a5:1a:b1:b2:21:61:0a:36:
         e5:96:56:69:6a:b9:06:6e:d5:ec:af:b5:55:23:f2:cd:92:55:
         3f:38:1a:ed:07:c6:40:b1:0d:73:a9:7e:04:42:63:d7:59:f5:
         3b:f1:55:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----