Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
File:                     tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json)
Hash identifier:          hT4MONneLYgbo/xM1/YZPztRK35hjBGXuV7J/Z0nFUo=
Subject key identifier:   99:D5:87:06:69:BE:31:0E:55:6A:80:21:C6:84:B2:56:C2:7F:52:0D
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Certificate issuer:       /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial:       0194BC04A3D98995119428392CCDDDFB012D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 11:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:08 +0000
Files and hashes:         1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=)
                          2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=)
                          3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=)
                          4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=)
                          5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=)
                          6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=)
                          7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=)
                          8: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=)
                          9: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=)
                          10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: INc5jq0frD2D5En7hs9kKsj9YDgZ9CphEJ6yKSiHb1Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:a3:d9:89:95:11:94:28:39:2c:cd:dd:fb:01:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
        Validity
            Not Before: Jan 31 11:00:08 2025 GMT
            Not After : Feb  1 11:00:08 2025 GMT
        Subject: CN=99d5870669be310e556a8021c684b256c27f520d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:d5:af:45:c5:15:9f:df:e6:55:68:b5:de:
                    da:3f:f0:d5:35:db:e6:58:30:f7:3c:c2:c1:35:16:
                    1c:d1:36:9e:8e:3c:33:3d:a2:89:e0:9a:19:f5:fd:
                    a7:ed:6f:79:2b:2d:a8:e5:7d:2b:ea:3b:6e:f6:a1:
                    22:46:ff:93:95:0a:ed:4f:ba:3e:a8:0b:ab:d6:1b:
                    03:91:9f:50:df:89:1f:dc:15:f8:ff:aa:ac:51:d7:
                    e2:2b:ef:b3:c5:21:94:fb:50:2f:2a:f1:31:bd:6c:
                    08:be:54:c6:1b:81:1c:ae:60:88:1b:ba:1d:86:86:
                    30:33:d4:b4:5f:fb:64:67:ed:4c:ef:30:44:68:94:
                    e2:57:b0:d4:ad:b9:fe:2c:f2:a4:b2:8c:dd:60:90:
                    29:0e:18:21:9d:b0:a9:1d:8d:ae:45:c2:af:a3:c1:
                    3f:bd:4d:d4:81:43:79:5b:d1:d1:97:dd:8d:2e:58:
                    12:97:d4:83:bc:10:0b:ad:08:b5:e0:34:b5:63:74:
                    ea:9b:18:67:c2:74:78:8d:21:a8:e7:68:8f:7d:85:
                    48:e8:23:54:a4:18:28:1e:bd:7e:18:7f:23:87:c1:
                    aa:fb:3f:5a:8e:f5:0d:ca:16:69:a2:b2:34:2e:44:
                    a1:5e:42:73:94:d7:29:da:6d:76:da:c3:55:82:ba:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D5:87:06:69:BE:31:0E:55:6A:80:21:C6:84:B2:56:C2:7F:52:0D
            X509v3 Authority Key Identifier:
                keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:45:ac:b2:f6:a4:0d:47:da:b8:99:1b:b2:33:c0:16:b7:
         c9:91:53:cd:a6:09:f5:70:4c:3d:16:36:d6:39:be:c3:38:1f:
         35:85:e9:a7:5c:61:51:af:b7:a6:3b:3b:44:2f:5c:6f:25:b7:
         0a:f7:11:3c:03:ea:d6:e7:23:43:93:fe:e6:49:55:e4:7d:54:
         a6:40:eb:75:c8:09:f5:3a:3e:7e:4e:ce:66:6d:4d:ee:62:42:
         05:83:61:f0:e7:59:c3:fc:62:68:24:8a:11:cf:3c:74:5a:65:
         c3:aa:75:2a:92:fa:11:e1:af:53:26:80:7a:34:f8:4c:53:cd:
         f0:66:0a:30:83:dd:bb:53:1b:90:48:f4:f5:a8:55:ef:5b:64:
         03:24:07:e1:03:4e:99:75:33:61:25:0b:79:f0:14:98:88:12:
         bb:a0:a5:7a:12:44:f4:13:a1:fa:f8:09:4d:53:5c:5b:db:00:
         ab:25:9c:9e:8e:9a:36:95:0c:dd:b5:9d:93:ef:c2:8c:d8:1f:
         a4:6a:8d:f3:44:44:ca:85:05:96:5d:97:13:0d:23:03:b9:41:
         40:32:ce:e8:bf:84:ed:0e:0a:fd:37:66:82:a5:fb:38:39:a2:
         3e:51:da:32:64:5c:39:df:9f:32:84:d6:ff:b6:d8:ac:18:80:
         c8:b7:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----