Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          aTtz225eAtsgOodZX1Y86SRn43kFZ6mjRb1gBRUXQVw=
Subject key identifier:   82:71:D7:D3:8F:B7:1A:D3:8B:1C:C9:34:0E:1E:99:B5:0C:CE:B2:E3
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       0194BCAA150F031026F205318D62F13B2172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          071C
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=)
                          2: Y_bp31HDq8uAy4l6THmKPbLCNsI.roa (hash: 9XEelD2ZciA/ZipA/uoYFFsArdGQrDybFJa5ScNreOg=)
                          3: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=)
                          4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: 7JAZoaK1Coc9N23JE42WkcAEctWiMMus04345dzzDlc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:15:0f:03:10:26:f2:05:31:8d:62:f1:3b:21:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=8271d7d38fb71ad38b1cc9340e1e99b50cceb2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:90:e4:d9:19:ca:4a:02:97:38:a2:a8:2a:
                    c0:df:16:0e:fc:8b:6c:2a:5f:5b:e6:8e:e8:09:af:
                    a4:28:23:f3:e1:a1:78:32:5e:6b:04:ae:d5:e8:7b:
                    01:2c:b9:01:52:f1:e2:bd:0f:be:54:11:21:45:3f:
                    f1:c6:ac:f1:e0:cb:78:ed:00:ec:9e:b2:47:b4:2e:
                    6a:11:ae:92:83:19:56:8a:7d:22:0e:70:2a:05:5c:
                    07:8b:6e:c7:e8:52:50:e5:91:ef:85:6d:3d:e7:e5:
                    b2:1a:3d:b0:37:00:34:12:bb:73:dc:d2:c1:8d:7f:
                    6d:55:f2:52:80:d7:31:78:3d:2e:75:d9:df:7f:e2:
                    f7:f0:16:4a:41:21:a8:74:a8:12:de:b9:2a:7d:38:
                    f4:ff:e6:d0:2c:c2:4c:56:e1:53:f7:5d:fb:94:46:
                    ef:19:7a:1e:aa:ff:16:1a:06:f7:50:66:a0:9a:d2:
                    5d:88:99:1c:41:71:46:3b:65:47:3c:65:a6:12:ee:
                    3f:37:fe:3d:9a:66:f9:db:79:64:17:2e:cb:e1:45:
                    f1:e9:41:3f:fb:8f:51:74:d4:59:7d:2c:88:8b:70:
                    9b:fd:a7:c4:c8:43:64:28:51:d3:e7:88:cb:eb:ce:
                    ec:c5:08:64:65:cc:54:57:c3:c9:99:45:90:7b:31:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:71:D7:D3:8F:B7:1A:D3:8B:1C:C9:34:0E:1E:99:B5:0C:CE:B2:E3
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:ea:2f:75:41:cd:bd:9d:97:53:5b:b1:6f:fc:5b:61:c6:
         14:59:cb:5d:41:66:c5:42:c2:d8:d9:03:1b:12:7e:09:42:63:
         2f:53:98:27:6b:82:42:9a:19:31:7a:59:5c:8e:8e:68:c4:97:
         b0:71:a6:c2:4a:cf:bc:c9:d7:98:10:32:0b:f9:18:a3:94:67:
         30:4c:64:3e:84:66:d9:94:95:1c:99:af:37:9e:b6:eb:50:89:
         7e:82:c8:11:3d:04:a3:d8:0c:a9:54:f7:98:35:36:96:39:39:
         94:b7:f6:d4:61:f2:7a:51:62:2e:19:98:1e:7b:60:c3:cb:22:
         5d:71:39:f9:4f:ab:63:2a:ec:46:10:3a:d7:04:20:69:71:14:
         ef:7b:c0:72:8e:fb:bd:69:61:dc:68:56:46:0d:62:08:2e:d8:
         ea:97:53:1c:dd:69:fe:96:55:76:7b:e7:c9:b7:46:29:56:b4:
         30:03:63:bb:a2:64:11:1c:e4:26:f4:8e:84:0c:4f:a8:1c:97:
         f2:cc:34:f5:7a:99:92:aa:f1:30:e1:6d:8d:cf:ad:f6:ad:d3:
         ef:cf:34:5e:e0:ad:a4:9d:cf:f8:2f:0e:ac:5d:eb:e6:f6:2b:
         16:ef:dd:b3:bd:ad:41:ee:1b:9d:c5:df:96:67:ef:2d:d1:ad:
         1b:91:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----