Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File:                     Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier:          +LraAfBIvYuumUSb4seT8/YXvPC9n5xOy1E0xsAdRFA=
Subject key identifier:   D8:05:B0:2A:4F:6B:93:13:EF:F9:92:D1:96:67:6E:E8:28:90:0A:8A
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer:       /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial:       0194BBCE833FA875DD7C30D0CA9C1B8EDED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:00 +0000
Files and hashes:         1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=)
                          2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: Ks+X/PpGZ5QiBQkQMB19c8HhC9/fv47w0IARcdHYoIQ=)
                          3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=)
                          4: pLsgoPgZwon5ItvVTFUsJaF7654.roa (hash: GzKHsFlhzzykyT0JK5oyDh4dgIyu8uoam0jj3L6SzGg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:83:3f:a8:75:dd:7c:30:d0:ca:9c:1b:8e:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
        Validity
            Not Before: Jan 31 10:01:00 2025 GMT
            Not After : Feb  1 10:01:00 2025 GMT
        Subject: CN=d805b02a4f6b9313eff992d196676ee828900a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:00:91:f1:a8:7a:5a:39:e2:a7:df:05:25:
                    4f:08:78:94:29:01:d4:cd:7a:fe:ae:1d:c4:58:50:
                    ec:72:b4:43:94:db:69:ab:ba:e4:4f:2f:87:4f:34:
                    6b:97:53:a2:0c:88:6e:77:3a:39:e9:b6:af:b8:39:
                    ff:ea:a4:5a:ac:b0:fc:b4:1a:aa:69:ed:13:f1:ac:
                    51:47:e6:7f:87:a7:17:33:60:c1:97:cb:0d:83:21:
                    8f:32:08:13:ab:dd:d7:c7:79:1a:a3:e5:59:7e:92:
                    7d:d0:95:3a:43:d5:21:87:90:35:14:29:2a:8c:aa:
                    41:6a:72:68:53:39:8c:51:a1:cb:bd:f2:1b:60:2e:
                    4d:75:64:1a:90:bb:81:b2:b8:c8:be:ab:f7:3e:89:
                    cd:9c:80:1a:7d:58:8d:08:0b:ce:1c:90:d6:b7:f7:
                    47:f8:a5:61:a6:5b:28:69:d1:d3:0e:13:ea:a1:b1:
                    2a:ba:b7:a0:fe:cd:45:99:6e:be:92:df:56:60:93:
                    67:0f:89:6c:68:2b:d5:ec:6f:66:1a:b1:67:44:08:
                    07:2c:31:78:a7:97:a2:6e:88:2e:9c:6c:f0:8a:8e:
                    38:82:0f:61:e9:5c:4f:33:d0:02:6d:43:ac:25:c7:
                    7e:8e:59:aa:ab:47:e3:70:5e:ed:e7:a6:1d:60:d7:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:B0:2A:4F:6B:93:13:EF:F9:92:D1:96:67:6E:E8:28:90:0A:8A
            X509v3 Authority Key Identifier:
                keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:69:cf:a4:5b:18:7c:54:23:2f:39:5d:34:f6:d8:47:5b:9f:
         46:cb:d9:e3:24:d0:c6:e6:f4:ee:b8:fa:69:39:df:19:8e:33:
         52:b5:e0:d9:18:c8:e2:90:17:6c:e8:d4:4a:73:be:a1:ae:7a:
         2a:17:e7:21:c2:4a:a6:8e:2e:4f:62:74:51:c5:66:68:4b:d3:
         69:e0:d7:7d:5d:c7:66:06:35:91:9a:6e:dc:c2:f3:88:ed:77:
         40:d0:fd:af:90:a2:dd:12:5c:de:a5:ff:75:f4:95:da:8a:e7:
         78:07:9d:ae:9d:c0:75:82:e5:45:eb:04:82:cf:8f:4a:d7:4e:
         c0:c9:c8:7b:ba:5d:94:82:f2:73:2f:59:59:e1:69:5a:41:ba:
         fa:7f:98:75:ee:75:a7:f3:f6:7f:0a:1b:f2:eb:d8:4d:e9:0f:
         02:17:fd:87:d5:a6:b5:cf:10:d3:ed:2e:17:c0:06:aa:92:b8:
         53:86:40:13:9e:e2:20:b2:d9:42:5c:82:04:da:0f:f8:2e:6c:
         4f:b0:a9:00:8b:f4:b3:3c:e9:b7:08:c1:71:7f:36:bd:8e:83:
         0c:07:e4:fa:33:6a:01:39:b4:0f:7f:d4:28:94:f7:1e:74:1a:
         4a:31:2b:ba:24:3e:ef:0a:36:f3:cd:c7:ae:1e:a8:04:7b:a3:
         5f:65:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----