Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          M8XGTbwlBo1Dcu4AALCuSTf0Lbq6/KX8QVW84NcBMGI=
Subject key identifier:   09:C0:27:EA:84:EA:D2:C8:6C:51:4A:EE:AE:FF:C9:EB:60:6A:B2:4D
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       0194BCE097F3AB14218DF82B2DA5E57AF378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          1188
Signing time:             Fri 31 Jan 2025 15:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:23 +0000
Files and hashes:         1: 1-ecgLM9Ei9k4oVFiF4_4nYtHj5o.roa (hash: WRYcSDPy+48O3h5FVEkLg3Iy70hWglPF/KiTfUTP0D0=)
                          2: 4TAvnt0eG7JuKsSMWZUEgsGMvao.roa (hash: n2Kdbh6aM1gzVM7r4e4o1E7EcRngRjFAuhxJZjUQisg=)
                          3: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=)
                          4: I5vHd7lVuPhXCFCVsngGzRiZCQ8.roa (hash: w6dB9/2/3Ylmx4FqH2XdUEpGWNbQcgKGdMRT0Ysa7sA=)
                          5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: dfQKyHvSERVrSLciJ46XPtfyisaoNFLS6VucUaoo9Wo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:97:f3:ab:14:21:8d:f8:2b:2d:a5:e5:7a:f3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jan 31 15:00:23 2025 GMT
            Not After : Feb  1 15:00:23 2025 GMT
        Subject: CN=09c027ea84ead2c86c514aeeaeffc9eb606ab24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:f3:70:8b:11:c2:63:14:46:ec:c2:16:90:
                    2d:51:46:83:1b:f9:e6:4b:4a:25:cc:5f:a3:12:c4:
                    24:ac:25:02:ad:88:eb:e5:7a:83:00:1b:69:18:f7:
                    38:c3:ab:d6:90:2c:bc:9d:b1:81:41:29:01:45:71:
                    5f:bb:12:e0:31:1d:54:61:9c:d4:27:39:ad:0d:39:
                    1b:ea:a4:c7:e7:6d:06:c7:16:7a:a0:85:a0:c8:b9:
                    e8:53:c4:02:d9:80:b5:2b:1c:c7:0d:ef:33:61:ca:
                    4d:c8:37:14:d5:dd:49:92:d0:e4:fb:f8:09:80:a9:
                    80:03:0e:a0:b6:7d:16:85:21:81:b6:48:67:fd:00:
                    7b:65:e7:23:e2:35:05:85:15:3b:c5:31:00:26:82:
                    91:87:5c:28:ac:ea:3a:99:0b:59:0f:20:6b:9f:4d:
                    8c:f2:52:4a:80:a7:ab:52:f4:bc:c0:1b:a6:8e:98:
                    70:d3:b6:4b:97:85:3e:e1:05:89:69:c0:62:df:02:
                    f5:78:e0:23:27:bb:af:23:5a:69:79:56:d5:a3:ff:
                    33:65:ff:7c:b2:f7:30:a9:86:26:9c:81:48:d8:fb:
                    0d:46:14:d6:ed:7b:69:16:85:b9:5c:5c:5f:37:b7:
                    75:1f:be:2a:1d:b4:95:3d:ad:99:7b:dd:6b:ca:30:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:27:EA:84:EA:D2:C8:6C:51:4A:EE:AE:FF:C9:EB:60:6A:B2:4D
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a7:bf:7e:72:1e:22:53:75:f7:10:bf:ff:65:24:a1:69:9a:
         e9:13:4a:4e:4f:a9:df:71:89:93:59:70:02:e4:b2:64:4b:cd:
         71:0a:27:65:db:22:b1:b4:08:bc:64:6c:cf:64:7a:b8:09:e1:
         7c:99:57:6a:06:7a:e4:a1:ed:b1:78:00:6b:e1:be:61:f3:24:
         7e:29:a8:2b:6d:bd:2b:a3:f0:86:97:bb:48:42:a5:d9:a2:4d:
         c6:ee:84:4e:b1:dd:9c:be:24:ef:3a:f4:e6:66:1e:26:f5:d2:
         36:58:3a:3a:78:09:ef:93:83:da:79:74:cf:8c:f7:77:b8:a1:
         64:0a:9e:80:7b:53:a7:8b:f4:79:0e:b4:9f:81:66:43:db:19:
         a7:cc:21:bc:3c:bc:04:4a:8f:42:aa:a7:08:6b:fd:2e:37:71:
         b8:6e:cd:9a:64:bf:9b:43:2d:c5:bb:db:fe:ab:f0:13:54:b1:
         49:7d:82:ff:49:3a:b6:f2:db:24:ac:0e:cf:dd:be:35:5c:d8:
         73:11:b6:b3:22:30:24:89:7c:08:e5:6a:54:9e:fc:3f:a0:56:
         8a:8e:8c:e4:97:ca:55:b7:bb:8e:25:c0:5f:29:36:c9:f9:15:
         52:cb:24:45:08:32:bd:96:9f:cf:18:c8:18:fa:2e:16:c2:d4:
         34:44:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----