Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File:                     _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier:          5RuXibIVso5YMCFIev9RR4YNrMaIqwXs0kuSv0XjQhU=
Subject key identifier:   A1:97:7A:9A:3B:EC:9D:D5:1E:73:7F:A9:26:5A:FB:CF:0E:A2:06:2F
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer:       /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial:       0194BD855A1F992D8A6A40F211247FC33C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number:          0C3A
Signing time:             Fri 31 Jan 2025 18:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:20 +0000
Files and hashes:         1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=)
                          2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=)
                          3: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=)
                          4: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: RPz/KWw/Z4jiLUCRuM6O8WOXcdYQ56NbTB+MWSgKKw4=)
                          5: jb02JJwx14XsSOk0aF2b5W_k8F0.roa (hash: HLiB+5ejtHpR2cP+DAT03qLHsRzQuMv58Rd2KwDkmmM=)
                          6: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=)
                          7: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=)
                          8: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:5a:1f:99:2d:8a:6a:40:f2:11:24:7f:c3:3c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
        Validity
            Not Before: Jan 31 18:00:20 2025 GMT
            Not After : Feb  1 18:00:20 2025 GMT
        Subject: CN=a1977a9a3bec9dd51e737fa9265afbcf0ea2062f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:60:1f:83:e7:77:59:6a:7a:4e:76:cb:e8:
                    ad:48:32:6d:75:96:1c:d5:0d:1e:2c:a8:4d:17:e2:
                    08:90:6e:a6:e2:63:03:a8:ca:08:95:62:b5:ef:a0:
                    b9:c8:82:2a:f8:4f:b8:7a:bf:d9:c1:80:a7:e1:d5:
                    19:4d:9a:a6:29:de:bb:1b:2b:8d:c1:0f:59:33:a6:
                    5e:b9:39:7c:25:c4:cb:25:39:31:75:dd:fc:c5:57:
                    23:f4:0e:d4:7e:d7:90:9e:56:3e:e3:a9:68:e2:e4:
                    68:00:57:85:1f:19:e8:51:6f:43:17:7a:0c:45:8a:
                    d5:dc:65:4b:f3:59:83:bb:ea:3c:99:5d:d5:1f:ba:
                    96:70:21:75:23:d5:96:26:7b:20:ad:c4:4e:99:d5:
                    ba:c9:73:c0:a5:63:81:cc:c3:7f:4d:9a:5e:6c:e2:
                    96:ec:f9:6f:8f:6f:49:32:ed:f7:c7:76:10:a5:6a:
                    ca:ce:d6:fa:51:77:cf:e4:ca:8f:ac:08:5e:f9:c3:
                    42:92:ab:b8:ea:f4:19:d5:2e:7c:78:56:f1:68:7a:
                    4d:6c:28:f0:b0:df:17:5d:c2:ee:9a:d9:02:04:3a:
                    bf:bc:b6:97:c7:5d:d5:99:28:0b:98:1e:68:09:cc:
                    07:28:84:85:13:b2:9a:a5:91:26:f6:02:c4:d2:68:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:7A:9A:3B:EC:9D:D5:1E:73:7F:A9:26:5A:FB:CF:0E:A2:06:2F
            X509v3 Authority Key Identifier:
                keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:c4:40:85:cf:b5:14:98:53:ca:e7:d8:0d:c0:76:ab:a8:
         36:48:2e:2c:e7:35:37:fe:9b:a3:7c:48:a4:20:be:ea:f8:b3:
         01:8f:56:d0:4f:0e:4e:28:2c:8b:71:60:e9:9d:3b:51:86:2a:
         2f:91:76:87:17:85:97:59:cd:e9:eb:50:71:ba:77:c7:2a:41:
         2a:ec:a8:df:f5:c8:b2:06:a3:fb:80:45:dc:3b:a2:f9:b2:09:
         d4:fb:2a:94:9d:10:e1:1a:08:48:a4:c3:28:28:95:e1:95:78:
         0b:18:d4:08:57:7e:34:39:32:85:cb:87:55:79:bf:db:c8:21:
         9e:89:ab:58:b8:e0:de:1c:38:3d:5c:bc:ad:e5:ec:89:64:e4:
         c0:92:de:6c:9e:7d:ac:5b:24:62:9f:92:a2:a7:3b:06:92:e1:
         34:a1:1a:ee:77:e2:69:86:a5:7b:d5:a1:71:f6:49:54:ec:13:
         42:1f:4b:d2:b9:3e:e3:1c:2f:78:a2:5a:6f:0b:b0:23:24:9e:
         9b:d8:52:c4:0d:65:4c:06:10:a1:0d:64:aa:7b:14:58:f3:bb:
         dd:50:b2:29:1a:a1:f5:3d:5d:1f:77:c2:27:b1:5e:9b:e4:7f:
         cc:00:83:56:40:37:4c:46:e6:08:68:f1:9f:97:d6:50:ff:f8:
         b0:58:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----