Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File:                     NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier:          xPIJpU3ZDZM+UuFbLeBTPiwc+KF1njFevWQZb8vNFho=
Subject key identifier:   D3:54:79:11:58:F5:77:64:C2:46:E2:69:97:AF:B6:C8:7A:47:8A:87
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer:       /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial:       0194BBCEE15257B6209ED4985044265898AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number:          082D
Signing time:             Fri 31 Jan 2025 10:01:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:24 +0000
Files and hashes:         1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=)
                          2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=)
                          3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=)
                          4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: gw5eq2bXgCgjFTC3UiUjYIf1f3F6TrX0apLwOzhqfh0=)
                          5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e1:52:57:b6:20:9e:d4:98:50:44:26:58:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
        Validity
            Not Before: Jan 31 10:01:24 2025 GMT
            Not After : Feb  1 10:01:24 2025 GMT
        Subject: CN=d354791158f57764c246e26997afb6c87a478a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:c8:29:1e:93:6b:0d:f8:bb:3a:80:60:fb:
                    7d:bf:50:6a:35:ef:7f:5c:6f:44:a9:a0:e1:1b:61:
                    84:5b:f9:2d:1b:07:ff:7d:89:6c:6d:62:7d:d8:cc:
                    e4:69:bb:2e:1f:db:7f:91:a3:5a:a7:fa:a2:1c:b9:
                    10:95:5b:ca:88:5d:27:e6:5e:d5:d0:0b:12:fa:3d:
                    bf:3f:9b:03:67:a2:e3:d3:0c:75:a1:66:d9:bd:17:
                    06:5b:f7:1c:cb:d5:cc:c7:90:49:48:c3:fb:ed:48:
                    2b:11:a1:e1:11:9a:c6:c7:f3:3d:d8:ad:db:3c:b2:
                    29:5d:1e:eb:a5:73:f5:6c:f4:c5:47:94:c5:07:14:
                    b3:ab:10:8a:89:b0:b3:fe:22:e1:75:84:74:d0:fb:
                    ac:11:a3:be:0b:ed:a4:c6:28:56:93:23:bd:0e:c5:
                    8b:a6:2b:c1:dd:da:a7:36:a1:cd:ef:c4:47:64:30:
                    16:f9:fa:b9:a2:80:51:b9:88:f1:ca:b1:01:69:53:
                    a8:c0:b9:9c:d8:7f:30:ad:a0:69:19:70:6a:c3:bf:
                    a5:56:fd:e2:67:5d:85:e1:a6:c1:11:a2:7f:66:9c:
                    89:ca:e1:a3:30:dd:c5:8e:25:28:25:1c:fa:c5:58:
                    81:ab:25:5e:29:37:06:5a:c8:73:3b:8a:ee:24:82:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:54:79:11:58:F5:77:64:C2:46:E2:69:97:AF:B6:C8:7A:47:8A:87
            X509v3 Authority Key Identifier:
                keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:5f:e1:23:08:b0:c7:3f:f0:73:7c:db:f5:7a:8e:cb:cc:
         b1:d7:9b:08:08:92:bb:8d:e8:4d:0b:a2:38:e6:30:74:d1:76:
         30:09:3c:00:96:34:8a:2b:c2:3c:5d:ea:28:65:5a:6f:e4:12:
         83:cf:34:01:53:e1:e0:a8:ec:c7:f9:dd:b0:14:6d:aa:f0:d8:
         ea:31:38:ce:de:a3:49:e9:a4:86:05:96:bc:96:f7:49:93:77:
         c4:5f:1f:9c:5f:3c:b5:f2:5f:8b:c7:33:85:e5:5f:28:04:4f:
         4b:66:1f:f9:ac:d0:41:47:8d:77:1d:6a:54:5a:41:85:07:f6:
         92:81:05:a6:94:83:7c:73:10:8a:4f:f2:1d:b1:84:c0:b6:35:
         01:0d:ac:29:41:79:c6:eb:fa:b9:fd:ea:ef:e1:c8:a3:23:67:
         74:a0:90:5a:c3:a3:b4:e8:d9:00:1a:8a:1c:c0:98:2c:45:a1:
         5b:de:f9:c9:df:00:22:86:7c:a0:de:e6:e6:99:ae:17:be:ad:
         8d:02:45:14:3e:e3:87:b8:87:42:8f:5a:b3:fb:b3:bd:44:44:
         aa:0d:41:20:bd:2b:ef:52:4b:e4:9d:97:6f:9d:eb:8c:5a:21:
         a3:ae:a0:52:be:73:08:33:38:d4:21:12:0e:41:74:4d:ae:85:
         1d:23:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----