Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          AbsLlG8R7PYtgXeT9IXk5NyYRqO4EYzJ2LOyIoBMvnM=
Subject key identifier:   2B:F1:F6:1C:16:21:09:BF:B9:31:ED:59:D2:92:05:F7:BA:D1:41:6B
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       0194BBCE2435F3849736DA032C82A7097DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          0BF6
Signing time:             Fri 31 Jan 2025 10:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:36 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: 3Mgh/Qvc2lrvLR8ETU80vwxG9e64AouG0uyQpFF0YbU=)
                          2: 3KNWi4PLke2pc0vhx5QOX6ZuOCA.roa (hash: tpM6u4qaCB/SIK4Ynv1MNnqK+07Rhub80n1mFXvkjwo=)
                          3: 8jp9A2yp5Ctl0aMaJZj7S5h9uCE.roa (hash: WHkL8yvON59diJqVD7F/Lsgn1viIvZplizI2VcPWz8c=)
                          4: o0naTY2lU_XCKHCOD4HRfjiAS20.roa (hash: ctUbEkyNdhuq/LnXlhlDp6xaZ2CRNDEI5dgg4y7saV4=)
                          5: q2PhtlxaWPMFB5GcAwVXc_wKZRg.roa (hash: 7exTPbh4OHsbAofG4+Te19GLuWs10iEQg0/XWCeBGJg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:24:35:f3:84:97:36:da:03:2c:82:a7:09:7d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Jan 31 10:00:36 2025 GMT
            Not After : Feb  1 10:00:36 2025 GMT
        Subject: CN=2bf1f61c162109bfb931ed59d29205f7bad1416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:ae:6a:73:1d:4a:8b:7f:5a:aa:17:ef:4a:
                    62:da:98:e0:10:ce:69:b9:57:db:9e:d1:00:0a:a9:
                    0f:c7:59:f8:2d:30:b4:01:74:48:91:86:4b:b4:df:
                    65:8a:bc:27:ef:e0:93:51:22:ea:3a:36:66:97:f4:
                    8e:e1:02:39:d0:ed:ff:85:9c:90:bd:9f:32:d0:27:
                    e2:35:d8:e9:19:49:15:49:5e:89:51:a5:3e:c9:84:
                    76:89:6d:f3:30:9f:d2:a0:67:ae:b9:de:fb:e6:51:
                    f4:23:e4:41:eb:dd:7f:92:1a:5b:78:af:51:4c:f8:
                    50:14:32:f1:38:d3:ec:14:4f:fe:fe:bf:c5:06:bb:
                    2a:c3:36:ee:42:b2:ed:51:8d:7c:d9:10:62:33:84:
                    31:bc:72:f8:ac:44:6a:62:7d:0e:08:41:66:14:24:
                    c5:6e:bb:1b:98:f7:96:b9:f8:52:b5:70:92:49:3e:
                    ba:44:36:ba:e0:2b:4f:a7:b5:27:34:a7:8d:72:0d:
                    d4:b6:e5:10:49:9a:aa:1c:d0:92:f6:8b:bd:64:d5:
                    bc:34:7d:1f:ce:98:17:19:87:65:65:39:67:32:72:
                    5b:69:0d:6c:18:ba:e1:7b:5c:31:e1:24:1b:08:bc:
                    ca:4d:12:27:bb:e4:f6:a5:ee:ab:fb:9f:1e:3b:8d:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F1:F6:1C:16:21:09:BF:B9:31:ED:59:D2:92:05:F7:BA:D1:41:6B
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:37:bf:b6:ea:d8:8b:80:44:87:49:a6:8c:c5:df:fa:6f:f6:
         a0:58:45:c9:91:02:9f:b5:19:b1:12:9c:99:32:e8:7a:52:3e:
         c2:d9:f0:a0:ec:0e:98:65:75:0c:d5:20:a0:88:b9:50:d8:23:
         aa:1e:e2:eb:e6:3c:da:71:89:a8:05:e9:3c:56:b3:0f:89:0f:
         8e:1d:8e:b9:76:b1:30:a9:05:14:ae:28:cd:a7:b8:5e:65:a1:
         27:c6:c9:37:7c:53:1e:79:d9:03:3f:1b:a7:09:9b:21:d1:af:
         75:d2:4e:9f:c1:9d:54:59:56:eb:20:5e:6f:33:69:62:71:f4:
         34:53:f1:ec:9a:95:f2:36:3e:e7:32:4d:fb:69:88:42:76:d8:
         cc:09:03:ec:85:cf:21:08:fb:11:5a:38:3b:73:6f:69:a1:18:
         f4:4c:c8:cc:ee:b2:63:f0:f9:4f:e3:40:dc:da:00:e2:01:31:
         74:26:b0:4b:8d:8c:c7:b4:50:e0:91:d8:9e:93:4e:50:f3:40:
         6f:c5:83:99:c0:71:a9:d0:b7:27:1e:49:d9:c7:42:65:09:78:
         0a:b9:11:d1:22:fb:17:b5:10:ed:7e:4e:a4:2f:07:a1:b6:43:
         48:10:0d:92:b3:12:22:21:97:df:b7:6a:d8:54:f0:2e:32:97:
         90:35:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----