Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          YqHX4kaghDfBqbGB+emY3j8+byZycNJpw7XLbS04dFo=
Subject key identifier:   B5:4B:6D:7A:2C:48:23:5E:FB:84:16:52:F6:A7:57:C4:AE:77:EA:EB
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       0194BC72F0BDCA4A3D5E351A67AD5C7DC706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0E73
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: svC3bRXFOIn9JucJDNl5+PXppn8SIp5eP0Bb4JaBLGU=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f0:bd:ca:4a:3d:5e:35:1a:67:ad:5c:7d:c7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=b54b6d7a2c48235efb841652f6a757c4ae77eaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:00:92:42:90:f8:de:8d:95:3f:4c:15:a1:
                    e1:5a:0b:c6:c6:4d:8a:4a:27:6a:33:64:bd:13:06:
                    f4:7c:24:55:6e:e3:60:2a:aa:48:2d:d7:3e:7e:ea:
                    d7:6a:26:09:70:c8:c0:ef:28:1d:82:02:96:aa:e5:
                    89:ff:4e:00:e8:a8:8a:be:66:03:2f:0c:b2:14:f9:
                    ff:0c:a3:b8:f5:45:ef:23:b3:09:38:38:9a:9d:8c:
                    d7:06:0a:66:1e:4d:5a:02:f4:01:50:4e:02:5b:bd:
                    8a:86:62:57:4f:ae:a3:6e:39:99:29:b5:3d:ef:74:
                    20:0c:d6:02:12:be:90:c3:ab:80:99:b9:c2:5b:3b:
                    91:a2:2a:04:f8:19:ed:43:4a:03:1f:d5:d3:1d:ca:
                    ff:4d:0b:f4:17:b6:9d:70:24:af:14:4c:16:3b:5f:
                    24:ed:cd:7f:c6:5f:bb:cc:26:82:4c:d9:15:2d:88:
                    e4:4f:c3:8e:b1:4b:2f:21:87:5e:1a:6d:f9:e6:e3:
                    75:ea:2c:5d:2a:01:4d:7e:05:75:71:a4:e2:c4:26:
                    68:d2:a9:89:48:99:00:16:9e:e0:7f:c6:77:dc:ca:
                    d3:68:12:21:75:7e:b3:39:1c:7e:b8:50:9a:fb:8a:
                    03:be:b3:66:6e:f3:4b:39:ea:59:d3:d7:42:24:ab:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:6D:7A:2C:48:23:5E:FB:84:16:52:F6:A7:57:C4:AE:77:EA:EB
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:b4:7f:f1:3e:44:23:99:0b:5e:59:05:8b:e7:24:a4:8b:
         0c:77:47:97:2f:c4:27:44:40:b7:5f:f4:79:17:8e:ec:57:d3:
         d0:0b:03:3a:1c:77:ea:fa:d0:c6:e3:ee:77:8f:98:64:31:ea:
         ce:3d:2a:cf:22:96:d9:02:ea:bf:40:22:e3:72:c8:45:c3:8d:
         46:4f:b1:d8:8e:40:db:d4:c4:85:19:f0:69:50:4c:9b:a2:2b:
         cb:66:bd:d9:e9:af:99:35:81:69:e2:9b:92:75:10:01:8a:8c:
         4d:b0:d4:51:97:d4:a3:20:57:03:6a:fc:55:15:09:32:8e:91:
         79:ee:af:0d:c7:cc:bf:4d:fe:8e:23:a7:bb:1e:d3:4c:6f:09:
         b9:bb:1c:e0:07:7f:74:c4:b4:31:56:e0:a9:68:77:c6:d4:35:
         b5:8c:27:dc:9f:c2:d2:f0:1e:17:72:b5:23:4f:e3:bf:46:c4:
         0b:7d:e4:0b:f4:51:5f:26:bb:70:27:c9:ba:7a:3d:4a:6c:b1:
         91:a1:2d:ec:33:1a:ec:71:ca:ce:4b:78:e1:74:51:f5:0f:77:
         8f:66:01:2b:87:34:89:fd:91:72:b8:81:4e:af:58:53:b4:d3:
         47:63:d5:4e:18:00:83:60:e2:b4:ee:2a:10:3d:68:a8:56:f0:
         09:88:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----