Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          Jm+UiG6hE6ugnzlSApk+hZhNC2WZX+QTSjkoO0ruaj8=
Subject key identifier:   73:83:48:DE:EA:D7:39:CF:19:7C:11:F6:13:48:79:F1:8D:5B:E7:9E
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       0194BD4E533E200D9795DF6EBFFBC2BE3AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          0452
Signing time:             Fri 31 Jan 2025 17:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:14 +0000
Files and hashes:         1: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=)
                          2: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=)
                          3: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=)
                          4: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: L3Do+QmWA54bRK5l32tQL8Y0ZRh13YrK6skwOojgLZI=)
                          5: hd3ZVIz5JB5ylKvLTjhvv1m_fhc.roa (hash: yo9HOjwucPNzGs0db7QVJJrPlFhOqDL3pOtNSeZbIfE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:53:3e:20:0d:97:95:df:6e:bf:fb:c2:be:3a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Jan 31 17:00:14 2025 GMT
            Not After : Feb  1 17:00:14 2025 GMT
        Subject: CN=738348deead739cf197c11f6134879f18d5be79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:5b:4e:c8:99:a9:0c:32:f0:a5:60:b5:e2:
                    d2:1b:a8:21:90:cc:98:24:88:12:9a:0a:d2:7f:57:
                    34:70:19:c5:d9:fc:7d:d6:0b:1d:00:34:49:5c:d0:
                    39:01:f6:db:f6:7a:b0:22:92:3e:f5:a7:ee:3a:39:
                    be:eb:59:1f:57:90:b8:f0:09:5e:e2:a6:3f:f3:7c:
                    75:ec:99:43:50:58:77:2f:b4:52:02:d0:da:e8:82:
                    7b:4d:33:77:7a:ed:40:c9:3b:f7:25:34:74:a9:b0:
                    aa:78:fd:8d:4f:bf:d9:5a:94:ed:50:1f:69:0f:6e:
                    e9:65:71:7a:da:2c:b8:0d:ad:61:28:d9:d3:33:4b:
                    21:66:5b:af:2b:0b:d7:61:90:74:f1:a5:ec:4f:a9:
                    3c:f5:77:ab:f3:d6:f2:c5:a7:a5:e0:82:6d:a3:bd:
                    7d:4d:11:5b:80:f4:ee:ce:24:e1:88:30:25:4a:65:
                    cf:c7:16:29:27:db:63:64:c6:5b:6a:b0:ca:84:17:
                    60:fc:d3:da:60:84:59:20:54:fc:ee:54:f5:23:2c:
                    22:d0:37:ef:87:ed:b3:50:6d:ad:5b:6c:48:3d:f3:
                    58:b1:13:0e:ef:fb:4e:3e:7b:70:d9:e6:fb:4d:02:
                    41:3a:71:9d:bd:28:45:c6:61:33:62:98:ea:74:05:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:48:DE:EA:D7:39:CF:19:7C:11:F6:13:48:79:F1:8D:5B:E7:9E
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:9f:85:f8:15:e6:38:1d:cd:c7:da:58:c0:81:06:c5:c0:
         e0:30:e4:5f:40:04:67:05:89:12:48:95:1b:db:6b:eb:fb:a0:
         38:f5:0b:dd:8d:44:09:29:7c:4f:ba:2f:39:cd:cc:78:34:a4:
         68:e0:a7:02:bc:9e:06:cb:7b:a8:25:f5:6c:d1:75:71:fe:1b:
         92:54:4f:b8:fa:7f:e9:0a:20:fc:ec:25:7f:f3:db:18:b4:c3:
         34:0b:a4:67:3e:12:34:fe:f8:5f:a1:47:7c:11:21:c4:c8:da:
         0f:8e:e6:36:82:3d:2a:d9:44:fa:44:c0:94:f2:31:e8:de:90:
         59:47:c2:13:b6:cf:bf:dd:25:b4:41:a7:f7:9d:7e:26:aa:2c:
         5f:e5:5d:ec:e5:82:2d:e3:a9:e9:aa:d0:e9:0a:e1:65:c4:aa:
         86:93:53:9a:c2:48:39:2b:bd:1e:d2:69:93:f4:f1:93:1e:eb:
         19:f2:10:b9:12:a0:0a:e7:9e:38:79:15:6c:14:d6:21:55:ed:
         a3:d6:f0:f7:41:41:73:12:d2:4b:cf:37:6e:76:32:79:9c:7c:
         89:88:83:9e:a4:69:0b:42:16:6e:79:62:a5:98:21:dd:68:e7:
         b0:82:92:17:63:fd:1a:38:a8:60:bf:87:f2:6c:d5:ab:58:74:
         57:0d:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----