Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          2GIUBQ3OPnXnQ5mMTEYV4Diuk175fjut3YYJN8WU+HY=
Subject key identifier:   2D:C4:22:05:6B:2A:90:EB:E2:1D:5B:F3:3A:8B:AC:10:D0:53:50:4F
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       0194BCE0B40C22465DE7F9374B5F50418960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1405
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: 1-L2iUJjeoTf_ph-MVPEwqI-zSWY.roa (hash: ZkGbAV0LuYcgIIPlX7PUDAf4X3H5foWfL0e6qLCIZsQ=)
                          3: EcfJ1jayPFQ3t0p16goPKaqtjcU.roa (hash: a5FoEd1+215WBmQs6vvzPYdx4+KFtw5yrsSUYmblCm4=)
                          4: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: +8FCNC7mt+lfHqrRa77PJgjvWtLZ2PxR2PgPyELm/Pk=)
                          5: scHcnv6TrwaRFnxyoieAy0wdLy0.roa (hash: KW0/f/Bc0ZybPczgbDkkTfSw75mnRXJrQAuIsFRlAcY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b4:0c:22:46:5d:e7:f9:37:4b:5f:50:41:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=2dc422056b2a90ebe21d5bf33a8bac10d053504f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:79:9d:91:19:4c:ae:db:37:3c:8c:f8:dd:
                    6e:9b:70:fb:e8:13:0b:cf:ec:ce:e1:24:ab:14:c0:
                    8e:7c:3c:78:25:ae:63:ce:9e:63:0d:79:68:66:fb:
                    3b:7e:55:da:30:6d:19:50:a2:6c:42:b2:e2:d0:2c:
                    17:51:b3:e7:65:d9:76:fd:de:46:94:e1:be:44:16:
                    66:0d:9d:53:b8:d0:e2:1f:a6:75:02:cd:42:ef:1f:
                    44:25:83:75:27:4d:32:28:5d:81:57:f4:9b:15:48:
                    89:d5:79:34:8c:65:c8:54:80:96:27:4d:87:8a:d9:
                    a6:f7:b1:1e:12:1e:16:79:df:f4:b4:3e:a4:5c:f6:
                    01:e5:f4:1c:c0:d4:d3:78:10:98:c2:fd:c2:fe:3d:
                    20:3b:9e:30:69:a4:ee:fb:10:79:ed:1e:2c:1e:63:
                    e0:0f:32:4d:15:d8:60:f0:df:d9:86:28:e6:00:30:
                    86:ad:fb:66:97:2d:1b:b9:26:13:2f:0e:cb:15:19:
                    91:0d:f9:af:45:66:69:21:32:fb:be:98:86:b9:70:
                    f4:d4:8b:d7:54:fa:0c:08:97:dc:5d:d0:c1:73:e5:
                    c5:f5:a7:28:de:c7:4b:42:8e:b9:a4:70:ce:a1:26:
                    76:1b:e7:09:ba:62:67:9e:61:7f:c6:7e:37:0f:17:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C4:22:05:6B:2A:90:EB:E2:1D:5B:F3:3A:8B:AC:10:D0:53:50:4F
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:4b:21:96:88:dc:0c:73:1d:9c:4d:43:25:a0:fa:43:92:
         2b:c5:ba:3b:a8:8e:63:7e:b4:c4:56:48:3e:72:8f:aa:03:2c:
         d1:64:bf:6b:60:b0:57:bb:3a:f8:20:6b:20:88:b1:d4:02:4a:
         90:54:9b:1f:2e:5a:12:cd:64:d9:c2:9a:bd:9b:04:2e:49:bd:
         40:08:d9:0a:6e:09:ae:3b:25:bc:2c:b3:e3:5c:a7:a4:e4:db:
         16:74:96:25:86:b6:9d:3a:22:77:f3:b4:06:9a:9f:6a:34:e5:
         81:d1:79:0e:42:60:c4:87:1a:68:20:14:82:da:63:cd:0f:4a:
         d3:eb:26:7e:fb:b9:2b:31:2a:c0:c0:b8:ac:30:8a:0d:fb:bd:
         cc:54:2a:c7:f0:e4:f6:05:c2:dd:78:d4:e8:ca:75:08:82:88:
         b2:02:b7:f8:3e:b4:fb:27:7d:3f:4c:0c:25:fb:8f:44:e0:04:
         7c:0d:a6:d6:8d:a3:6d:82:17:f1:34:2a:9a:80:a9:91:ec:51:
         e7:d9:ab:39:4e:03:3f:9b:f8:ec:22:63:48:1e:a4:b6:0a:2c:
         09:33:0c:5c:f9:1a:e7:eb:f2:1d:6e:3c:dc:ab:03:3a:f0:bd:
         de:66:a5:a8:4d:b0:20:c5:af:50:a2:11:a5:35:81:72:1e:0c:
         2a:ff:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----