Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          4kZkkcHy37/mF1f3bfCXlfmiUgV4efzm6P2NjZZDkuQ=
Subject key identifier:   48:DF:B7:B8:34:1C:7B:99:8A:EA:D3:12:7E:C4:D9:B1:16:82:3A:92
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       0194BD4E971A6BC3F599C2AF28CF3977CDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 17:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:31 +0000
Files and hashes:         1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
                          2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
                          3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
                          4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: ttWukX4z+0eOcxGTUdO8uxcSzqQpzzJrp8Z+OYPYPTk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:97:1a:6b:c3:f5:99:c2:af:28:cf:39:77:cd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Jan 31 17:00:31 2025 GMT
            Not After : Feb  1 17:00:31 2025 GMT
        Subject: CN=48dfb7b8341c7b998aead3127ec4d9b116823a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:48:c0:aa:02:14:53:39:8b:e8:d5:fa:61:
                    70:ef:4c:84:ab:c6:2f:d8:94:49:e4:69:9c:47:ea:
                    52:b2:1b:53:86:53:f3:08:be:76:bc:6e:ed:3e:38:
                    f6:37:86:c3:aa:ea:3c:2a:25:22:6d:d5:0a:ca:e2:
                    3d:23:1e:d4:1e:00:f8:fb:2c:e1:c5:4f:19:d7:74:
                    df:06:27:e3:61:0f:e3:34:b4:7c:d8:e0:f1:04:04:
                    f2:74:8b:9c:b4:8f:63:1f:26:bb:05:4f:93:09:ad:
                    32:d4:d4:75:ec:fe:2e:85:57:fb:de:3e:92:53:e5:
                    2b:92:c9:3e:32:cc:2e:d0:48:d2:ce:29:53:2a:b5:
                    89:00:94:74:d2:4a:8a:59:a4:f7:cf:ca:72:0d:17:
                    f2:80:4c:b4:2b:f2:c2:78:cf:d6:07:48:9a:d4:d7:
                    a8:69:c0:5a:8f:40:7d:38:da:89:c8:65:70:49:76:
                    d6:8b:a1:0c:ce:b2:a0:f1:d6:0f:cb:e5:a6:60:f1:
                    56:c9:4c:cb:d0:98:80:51:02:1c:7b:58:93:6a:d5:
                    68:8d:39:4c:08:2d:2b:30:fe:ae:88:cc:5f:bc:55:
                    f0:67:48:49:9b:5a:af:47:ff:94:5a:07:ca:10:0e:
                    eb:e2:20:5e:49:52:b1:4c:97:1c:12:81:d3:52:e9:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DF:B7:B8:34:1C:7B:99:8A:EA:D3:12:7E:C4:D9:B1:16:82:3A:92
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8c:81:a9:f3:c2:20:8d:3a:58:f5:6e:de:25:87:7c:e1:ee:
         57:dc:67:85:c6:18:75:9b:d2:7e:ec:a6:aa:47:4b:b1:ed:0d:
         0f:0a:71:ef:5a:a8:64:52:f1:8c:6f:94:a5:8f:c4:b1:44:b3:
         cb:e7:d5:76:10:4b:01:bd:de:32:27:72:25:08:42:42:3e:66:
         91:a6:7a:73:34:51:de:47:85:b3:34:db:fa:41:2d:23:ca:4a:
         3e:b6:14:5e:db:8a:b3:bf:33:50:8e:44:47:92:0d:ec:91:5a:
         d6:8b:a0:6c:28:e3:3d:78:26:85:9b:8f:8e:2a:53:ab:66:60:
         63:d9:dd:a9:c8:8b:14:71:19:6b:83:e4:40:f3:c7:19:76:9b:
         0f:ec:34:30:a2:a6:7f:6a:fb:90:3a:35:5d:2d:ea:20:18:74:
         89:5e:d9:42:3d:6f:0e:46:50:a5:58:d2:99:01:74:19:91:ae:
         5f:39:ce:5d:6d:61:f1:8d:e3:12:59:9e:14:7d:87:39:c1:0f:
         16:17:02:ee:e3:e4:6b:55:10:22:cf:da:6f:f5:1c:ee:3a:b5:
         0d:42:82:9f:a2:4b:4a:5a:aa:3e:c6:0e:32:30:18:85:ac:e3:
         56:10:63:49:fc:b9:71:a6:3f:e8:4c:52:66:a6:a9:de:3f:03:
         28:57:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----