Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          AkHZdJZzEQd6qv47UbEVFbxMfeVp7KcMund1U2VU0lI=
Subject key identifier:   67:9A:89:67:3B:72:4D:C0:46:35:A2:83:AF:5D:95:DB:CC:63:07:18
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       0194BD4E79F7998B9CE0C464C6CAE515BC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          10A8
Signing time:             Fri 31 Jan 2025 17:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:24 +0000
Files and hashes:         1: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=)
                          2: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: Ycw+qfEYlZUtJYydvKnMtBrIFB1j2XxxFFtkr+CItDI=)
                          3: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=)
                          4: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=)
                          5: ZDKDg4HFcSNfLpw6YVzqBi5flLk.roa (hash: jSZeiBuoK8ADYzLZiSxc+qPAfYnt2JDSl0vT1WsgWF0=)
                          6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=)
                          7: vggv843RlgzOIU6OLJSOkEbsxTk.roa (hash: jGPW2okv2tihhwD48EwaBYFC3Ri36sTwg5tS2im5hAU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:79:f7:99:8b:9c:e0:c4:64:c6:ca:e5:15:bc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Jan 31 17:00:24 2025 GMT
            Not After : Feb  1 17:00:24 2025 GMT
        Subject: CN=679a89673b724dc04635a283af5d95dbcc630718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:c9:2a:36:88:2a:0b:66:9a:bc:20:da:64:
                    78:67:82:85:83:cd:18:8f:00:67:c9:1c:91:e1:e5:
                    75:dd:7d:e2:5f:e5:e3:7f:94:0f:09:d3:06:1a:65:
                    2a:c0:e6:b2:58:8e:af:57:3a:36:09:e0:a8:9d:d3:
                    f4:3b:2b:79:d8:ee:3e:a3:64:21:39:96:55:39:00:
                    7f:1f:0b:93:e9:f7:5f:d1:f9:da:53:07:a9:ec:68:
                    7a:de:e3:9d:1e:82:01:4a:8e:4b:8d:7e:5f:bd:b0:
                    e0:70:28:af:83:c5:5c:f4:3b:a9:6f:10:91:2a:f7:
                    68:a5:55:04:f9:83:6f:15:08:40:39:cd:39:30:c0:
                    b1:6a:b4:31:10:1f:f8:f9:ab:ca:50:ee:d4:08:b7:
                    cd:e6:97:79:46:88:5e:16:9b:6b:1a:4e:42:aa:ce:
                    22:f8:aa:d7:04:ee:5c:69:35:23:fc:24:26:75:d9:
                    bb:72:2b:0e:8f:6e:9c:83:35:74:38:3a:24:24:bb:
                    88:0b:ea:52:95:1e:50:98:40:be:13:ac:64:84:99:
                    43:a5:fa:b3:d9:89:7e:3d:73:80:ff:ed:03:77:c7:
                    3a:da:f7:36:34:5f:b2:6b:08:02:ed:9f:9f:7d:35:
                    f2:50:1e:d7:0f:4c:16:59:2a:7e:5e:9b:a4:d6:71:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9A:89:67:3B:72:4D:C0:46:35:A2:83:AF:5D:95:DB:CC:63:07:18
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:ba:6f:8b:5d:15:27:dd:89:2a:91:cc:bd:85:41:f7:be:
         5e:92:41:2c:2d:5b:14:fa:df:e2:c0:d5:83:76:74:db:1d:47:
         f7:67:b8:08:59:56:7e:81:42:1f:1e:c8:6c:bb:a6:27:ec:e3:
         93:6c:12:a5:4d:f9:c2:cb:fd:fb:09:5a:ca:3a:fe:03:cb:fc:
         ee:4c:8b:f1:d7:0b:42:91:e9:5b:85:46:3d:e7:c4:e4:0a:95:
         72:71:a7:78:b8:5b:21:fd:0e:19:e8:95:50:00:56:99:98:9c:
         1d:ca:99:81:1f:58:4c:7e:05:e2:1e:ee:28:e1:45:95:f4:8e:
         7b:b4:3d:d0:b3:32:ec:3e:ba:c8:e3:14:23:2c:20:9f:42:23:
         1c:aa:df:18:a7:8a:50:ff:ef:02:cc:d1:22:b9:4b:86:a8:2a:
         17:c8:34:52:9f:7c:7d:1d:d6:83:7a:8c:a8:ab:0d:b4:6f:62:
         b4:24:bd:f8:6f:35:62:72:bc:6a:15:44:1a:b1:1e:b8:ed:4a:
         bf:75:ae:00:e4:31:05:6a:bb:07:be:1d:b5:7f:ca:92:f9:aa:
         c1:1e:d5:25:95:9a:1d:8e:e6:e3:1f:41:13:59:e5:13:fc:1f:
         a9:e5:e8:32:e1:a0:81:01:4f:fc:3a:1a:ae:c7:7a:3e:be:dc:
         e6:3a:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----