Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File:                     2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier:          c1Br77/iXOtVks4O1VxSEHXiH3bDC3FXSgIhT7dZq1Y=
Subject key identifier:   AB:18:F9:47:5B:90:49:39:EB:DE:5E:4F:A5:E4:BF:A6:69:ED:AC:DA
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer:       /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial:       0194BD4E7EE3F9B2131B7CC633E4C5AFA097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number:          0389
Signing time:             Fri 31 Jan 2025 17:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:25 +0000
Files and hashes:         1: 2uqD5zGZ2YzBCLr29oUkHyxLaOg.roa (hash: Rlx38ri/UsUpqTWWjiQxvpWbwT4B1nvpj+Qj3oYHyJI=)
                          2: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: /F2Dm4LNZqSbcgsKlcPzwU6YrwcruWht3r6/bKAzuRY=)
                          3: 8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa (hash: oJIUnSFr4nxPfIklC3jgxHnAbm0kguG5fFIKoWMYD0A=)
                          4: VjqdrxGTRj_HInStkdep02mDb9Q.roa (hash: FNpVRLOkWoRmhAFzENCKzeCXF5FLB71OdgzjA3hm4XA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:7e:e3:f9:b2:13:1b:7c:c6:33:e4:c5:af:a0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
        Validity
            Not Before: Jan 31 17:00:25 2025 GMT
            Not After : Feb  1 17:00:25 2025 GMT
        Subject: CN=ab18f9475b904939ebde5e4fa5e4bfa669edacda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:66:3a:af:68:6b:ba:2a:67:48:02:f6:20:dd:
                    42:89:ee:2c:31:f2:d8:21:d3:fc:ae:93:e0:e8:92:
                    95:27:ae:84:ae:d5:e0:0d:e5:f0:c3:43:74:ae:10:
                    85:fd:a7:a9:2e:e3:b1:3a:5c:bc:0c:dc:db:3e:20:
                    5a:76:4f:d0:81:58:ff:a6:50:2e:1b:30:7c:5c:af:
                    d9:9f:92:44:2d:59:65:5d:52:73:3c:29:23:b9:e9:
                    bd:e8:85:83:0c:38:79:0e:f4:33:4c:d5:83:0c:4d:
                    d0:a4:07:d7:c4:fc:a4:73:72:f6:29:1e:b2:65:87:
                    a8:2e:b0:a0:02:9f:cd:47:1c:ea:7c:a4:90:86:59:
                    3f:eb:f0:5c:91:e3:3a:db:41:9e:a4:44:78:5c:eb:
                    1a:52:6b:68:bb:ce:a7:89:7f:88:93:ce:d4:cf:2e:
                    0a:57:1b:75:c4:d1:36:71:b1:8d:c8:78:d3:49:2a:
                    e6:cd:30:7c:73:b6:0c:e9:a4:03:6c:97:21:ab:5e:
                    81:b5:af:9a:07:6f:82:8c:53:68:9d:6c:69:c9:bb:
                    c0:e6:2f:81:fd:72:f3:64:8a:ba:b5:b0:af:fe:4e:
                    f4:0d:20:78:13:ec:3f:76:ca:3e:78:1b:ec:5d:b6:
                    f2:6a:46:08:83:74:21:60:fe:f7:91:96:af:ea:b5:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:F9:47:5B:90:49:39:EB:DE:5E:4F:A5:E4:BF:A6:69:ED:AC:DA
            X509v3 Authority Key Identifier:
                keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:24:96:d4:5b:40:e2:d9:1e:7f:c9:60:3f:6d:41:3f:07:70:
         f2:31:3e:47:c9:4b:f5:6b:cd:d8:da:29:ef:b9:cf:0b:85:87:
         e6:7d:6b:0c:7a:ed:b3:00:da:42:25:b6:3c:a9:0b:39:a2:ba:
         41:12:6c:65:18:ad:9d:55:d7:53:bc:44:8c:45:b8:fd:75:f6:
         2a:08:32:9b:2b:5c:02:3c:ee:bb:d8:82:60:e3:3b:a8:3c:ab:
         19:d1:7f:06:db:70:42:1c:c2:12:77:50:aa:8b:ca:88:c4:ba:
         1c:e9:03:b3:6b:07:01:3b:60:19:79:33:c4:8d:b2:9b:d8:8e:
         77:26:03:e6:e5:ac:df:25:f3:7a:85:7b:f3:02:17:8c:71:c9:
         2a:2d:f5:d7:8a:0d:e0:f6:b0:ea:9f:9d:f9:2e:cf:32:aa:c4:
         c3:22:14:f1:24:42:75:41:54:37:db:d9:a9:c6:f9:04:7c:8a:
         1d:04:79:ee:b8:70:0f:48:6f:e8:06:eb:fa:18:13:5d:6e:fb:
         49:60:07:09:9e:5a:6e:ac:9e:bc:e5:b7:4b:1f:f6:fc:12:4b:
         e1:53:74:e6:d9:c5:c9:9e:ce:4d:7c:e7:3f:61:11:72:0a:90:
         a8:fe:e7:7e:ce:3e:11:32:ff:3d:93:e3:8f:b2:45:84:f1:ad:
         eb:cb:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----