Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          NswCbQ9ojJKfga0fKiEeDf+zE3uYQZEGNM1bIO0WioA=
Subject key identifier:   2C:7C:51:30:B6:8F:0C:49:5A:94:6C:D6:C1:20:B3:22:87:1B:34:AC
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       0194BC7309AF2896D8EB1C9A620D520484FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          06BC
Signing time:             Fri 31 Jan 2025 13:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:43 +0000
Files and hashes:         1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: acC8GntlzFXVjQUHMTY4SCejs0MKlB5j/LY4pOO8sO4=)
                          2: empt_DtsxXPAB8Pr68RMQjz57Hk.roa (hash: NP64KpVgnNbjP2xtIMghVQIieRDbN+Hw1J+jKW8Qdjw=)
                          3: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
                          4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
                          5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:09:af:28:96:d8:eb:1c:9a:62:0d:52:04:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: Jan 31 13:00:43 2025 GMT
            Not After : Feb  1 13:00:43 2025 GMT
        Subject: CN=2c7c5130b68f0c495a946cd6c120b322871b34ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:22:34:fb:28:67:ae:11:75:53:8a:a0:d9:
                    36:2c:ff:5e:13:ae:d5:c8:ac:96:9b:24:49:43:33:
                    82:b6:90:df:fd:d4:58:2c:30:7b:a9:a0:f6:92:92:
                    f9:9f:4e:6c:0c:c0:80:3a:5e:ac:8c:97:ed:bb:06:
                    b4:df:a8:d3:8e:b9:9e:89:85:15:9d:d7:95:f3:22:
                    d9:ed:4e:cf:e3:60:56:fb:4a:0f:d5:89:8f:5c:c3:
                    e6:93:94:ca:36:81:8d:a7:0e:1d:fd:af:b0:2b:bc:
                    0b:e6:99:1d:22:a9:b3:f1:c1:e3:39:5e:24:fd:e9:
                    7a:cf:0d:00:ee:9c:51:9c:23:a0:1c:a8:ad:cb:33:
                    79:7d:03:81:06:9c:74:4e:22:00:19:07:c8:23:c2:
                    7b:70:11:d1:28:00:ef:be:a6:1a:50:af:b2:a1:9b:
                    da:be:fe:1a:45:bf:b5:84:6e:7a:f6:d6:1d:20:c4:
                    93:a6:e3:a6:f1:fa:8a:cc:4e:1d:a5:e4:52:81:e7:
                    cd:5a:03:e4:42:75:ab:11:a5:8f:27:be:d6:84:ba:
                    31:a9:0c:5b:44:54:a4:e9:a2:72:86:63:f1:3f:13:
                    af:2a:87:22:c8:69:7f:45:de:fd:c7:9e:dd:9c:bf:
                    04:3a:59:f9:38:e2:5c:6c:28:b7:db:88:53:0e:0a:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:51:30:B6:8F:0C:49:5A:94:6C:D6:C1:20:B3:22:87:1B:34:AC
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:e0:eb:ae:dc:c5:60:51:54:8b:e5:b3:f8:61:1e:a2:33:
         e9:6f:7a:9c:64:18:d5:36:ed:d0:df:2f:6c:d4:1d:7e:41:f3:
         8d:50:ca:73:c6:63:b1:1b:76:50:db:2b:6f:32:86:33:75:c4:
         f2:d6:58:aa:63:99:97:a2:ca:ff:81:c0:9f:a2:ac:bf:f2:2a:
         09:a1:26:69:8c:f1:5c:9a:70:0f:fc:7a:92:90:7d:77:69:a3:
         bd:25:0a:b0:23:eb:fd:e6:89:70:ea:e0:cf:c0:a8:a9:cf:eb:
         7d:5b:5a:ac:83:67:a0:41:b8:d5:33:7c:4b:c0:f8:af:e3:66:
         9b:c8:8e:ba:31:26:56:7e:82:35:ff:6c:6c:b9:54:12:5f:5e:
         b5:8a:af:74:18:d1:87:43:85:20:ee:51:07:86:fc:dc:35:07:
         48:62:55:b4:dc:60:bc:b3:f7:e5:e1:68:72:dc:79:09:29:05:
         be:53:2c:1d:95:a7:a5:ab:81:ec:98:18:82:0f:69:99:21:9a:
         ca:79:6f:25:2e:d1:75:0f:a9:5c:ac:ca:46:7c:19:6c:b2:32:
         2c:87:c0:fd:a3:aa:06:b9:47:ae:2d:27:76:9c:f0:25:16:b5:
         b0:d5:fe:f8:1b:96:75:d6:41:f6:d8:ff:18:26:69:a9:af:48:
         e3:07:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----