Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
File:                     kdDHjDCaPpncmrdPLNwEhIWedTA.mft (raw, json)
Hash identifier:          SEE+TWqc4NYCbY6bzGpFK014yeA5JBukBWBLrWMWNBs=
Subject key identifier:   47:88:38:EC:E9:68:66:64:D7:3F:26:20:8F:47:B7:53:43:C6:F4:62
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Certificate issuer:       /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial:       0194BD4E474451AA40565D7520242A56C578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
Manifest number:          0F40
Signing time:             Fri 31 Jan 2025 17:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:11 +0000
Files and hashes:         1: 1-W_ixXGYX8sPaJagj-AVwFiwChc.roa (hash: L0D3lIfkN9efhBw5T+b3u9NkdIMxDqZ5UXxZUhgRWOs=)
                          2: 7W9sev3L-VQWc6oeKqV7bwg_M78.roa (hash: iACOPZzpZ14qCk65ni/pYA1L4ve/ow82nu3m+eaX/rg=)
                          3: D9OViOUA1-461O4zttxUuu7lHv0.roa (hash: 2itBNaHzhENVRyOefdMh6N1RENcyUMqY/eAvQKNqorQ=)
                          4: b_UNR9Xj_ycfuOSMA48F_QSRqts.roa (hash: V/FK04zH2Za3Nwu+0PjyuAuPUrWk9vHEnkwAOnyhoAs=)
                          5: gLTw3SxVghFrqUXLXX9aVQWSJyY.roa (hash: X6SiVIHlGA+Slf3SaSpTUzg9Mrw9ENcILtCCgSUB+W0=)
                          6: kdDHjDCaPpncmrdPLNwEhIWedTA.crl (hash: 30TONMZDYi6FNGo2ncktLPqGhTIIzUsOBrFUBaRJSGY=)
                          7: vUVcdpzXr2JQGsu1xtXoOvW_LHU.roa (hash: 2iN03nQJUllsMqRJ1fP7+P4h4U6MeEk1ERszIuxQ8MY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:47:44:51:aa:40:56:5d:75:20:24:2a:56:c5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
        Validity
            Not Before: Jan 31 17:00:11 2025 GMT
            Not After : Feb  1 17:00:11 2025 GMT
        Subject: CN=478838ece9686664d73f26208f47b75343c6f462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:04:17:ef:74:a1:21:25:5b:7c:3c:30:7f:
                    a0:2c:ca:2c:80:a8:7f:6f:8b:f5:9c:31:01:c7:6b:
                    bf:42:24:75:5f:d7:85:f8:26:97:10:47:8e:94:54:
                    82:69:18:24:e1:44:cf:fb:4d:48:42:08:e7:01:36:
                    f5:92:ce:25:22:fd:b4:87:8d:5c:62:16:03:c7:ce:
                    f3:33:53:41:64:c9:6c:41:e1:b6:91:12:e1:89:92:
                    1e:74:a7:72:89:2e:4c:87:ab:73:b8:77:b2:69:ec:
                    9f:16:b4:ee:f7:0c:34:8d:74:82:4f:2b:b2:df:bd:
                    5e:93:cd:7a:81:28:3d:ea:6c:e9:94:ac:f6:06:5d:
                    95:e9:da:78:e9:8d:fb:dc:c6:5a:51:0a:cd:0d:3d:
                    aa:8b:96:d9:af:9a:ce:4f:05:64:09:b2:80:d7:34:
                    54:11:69:aa:66:f0:18:2a:13:fd:dd:32:14:5f:9e:
                    7e:d8:d0:d5:8c:08:de:dd:52:ed:7f:8d:87:0a:29:
                    50:56:6f:a6:3f:27:01:71:05:fd:e1:fd:03:ea:15:
                    cb:65:5a:df:79:aa:f4:2b:70:bf:63:2f:fd:a6:5b:
                    d3:3f:30:6f:3a:f9:19:85:7e:7d:75:60:fd:78:28:
                    e5:e6:75:01:d9:a4:f5:7b:2a:54:85:18:6d:92:32:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:88:38:EC:E9:68:66:64:D7:3F:26:20:8F:47:B7:53:43:C6:F4:62
            X509v3 Authority Key Identifier:
                keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a0:f9:9e:cf:cd:b9:b3:63:2a:cf:8f:00:55:1b:9f:37:6a:
         fa:67:2c:f2:62:80:5a:86:df:a2:a5:5a:a5:12:e6:d4:31:10:
         a3:a0:41:7c:f0:24:e4:dc:d5:6a:b5:95:0c:b8:e4:0b:fe:07:
         37:f2:f0:4d:a3:a4:0a:a4:94:b5:5d:35:14:f7:30:cc:ff:27:
         1e:3c:69:7c:30:89:e0:50:77:f5:63:9b:de:80:c1:f5:f3:a4:
         d9:94:8b:76:f1:c3:34:32:71:8f:17:7e:e5:fb:8a:c4:b1:ce:
         4f:5e:85:1d:a2:a4:35:7a:89:f3:8b:24:9e:b8:13:5c:f0:37:
         40:81:fb:18:7e:9d:fa:90:0d:6e:42:6c:8a:74:61:23:dc:d4:
         68:66:71:b0:e6:48:58:80:71:5d:0f:e7:b9:df:c4:01:2b:09:
         2b:d3:e3:42:f3:3a:41:c5:79:5f:e5:8d:02:be:75:18:dd:6d:
         ec:e2:53:25:59:87:fa:4f:e7:b0:17:45:ce:f8:f1:8d:0d:71:
         f0:2f:b6:1f:a7:0a:10:44:5b:12:1f:55:2f:eb:0f:ff:7f:27:
         7d:ef:ef:4f:2e:a6:bb:fc:1b:c4:df:3e:8f:6e:bd:5e:ba:b8:
         ae:f9:93:72:b8:28:b5:4f:59:ba:fd:65:54:d4:f6:d7:15:1e:
         20:97:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----