Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File:                     ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier:          e3CLibHCJ736g0IY83545tT286qe8Xl3/1Hi7qUHf3Y=
Subject key identifier:   D8:F9:B9:F9:3B:8E:DE:0D:4B:0A:14:5A:23:77:46:76:A6:E3:8D:6D
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer:       /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial:       0194BCA97D4DF977F342AD8A4E917E25C243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 14:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:11 +0000
Files and hashes:         1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
                          2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
                          3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
                          4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: e0/dG8+8EWd7x2/p8rATsPqg+niDDtiT48Jk2w0ruUE=)
                          5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
                          6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
                          7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
                          8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7d:4d:f9:77:f3:42:ad:8a:4e:91:7e:25:c2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
        Validity
            Not Before: Jan 31 14:00:11 2025 GMT
            Not After : Feb  1 14:00:11 2025 GMT
        Subject: CN=d8f9b9f93b8ede0d4b0a145a23774676a6e38d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:ce:68:8d:98:85:62:79:67:19:9e:10:56:
                    4c:72:a2:54:f6:dd:5e:47:68:db:17:4a:14:73:51:
                    c8:85:1b:bb:db:c1:ff:3f:66:ca:32:31:98:87:c3:
                    d8:6d:46:5b:6c:ab:26:8b:71:fc:b6:40:d8:99:e5:
                    4f:bb:17:86:df:fc:83:59:d7:7c:5b:4c:44:26:3f:
                    60:d8:df:c1:cc:34:14:41:48:45:e3:50:41:61:c8:
                    4d:53:03:f7:1f:3e:52:29:cc:bd:b9:7c:9b:29:5c:
                    59:a9:b4:35:7a:92:ef:d6:88:13:84:d2:01:2f:64:
                    51:9e:a0:78:6c:4a:00:60:0b:68:ec:2d:b8:9a:13:
                    bb:11:f9:4c:03:2e:ee:95:61:b5:65:44:f9:dd:b2:
                    a6:17:61:2d:30:e3:2d:d3:08:fe:63:15:ea:88:ec:
                    49:20:2f:e5:c5:c4:02:fa:b4:ee:25:2e:cb:88:bd:
                    15:13:15:b7:ef:59:4c:4a:4b:dc:00:27:4a:63:d0:
                    68:b7:2a:42:22:b9:c0:ae:16:36:62:ed:45:63:e5:
                    13:45:d2:06:90:6b:14:96:cf:b8:98:26:77:60:f6:
                    bb:31:6c:9a:bb:48:a7:a5:d0:2c:e9:65:c0:17:cd:
                    23:1a:df:cf:53:6c:af:2a:7c:f2:2e:63:37:a3:e5:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:B9:F9:3B:8E:DE:0D:4B:0A:14:5A:23:77:46:76:A6:E3:8D:6D
            X509v3 Authority Key Identifier:
                keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:15:e0:de:19:03:69:ce:5f:dd:ac:a0:a4:6b:97:1f:c6:f5:
         24:e0:97:94:e4:28:c8:59:37:d7:1d:c6:94:d8:cb:5d:e8:2a:
         45:e8:f7:f9:13:6e:d0:51:fe:82:36:f5:26:71:45:c5:1a:88:
         4e:b2:c3:0d:ee:2c:a7:6f:c7:3c:1d:9b:42:d1:70:16:9f:a7:
         2c:4d:4b:e1:1c:da:df:cd:5b:24:ba:04:6b:94:59:2e:59:82:
         8e:ec:9d:12:df:33:d5:86:a7:6e:1c:56:a8:f0:b9:06:ce:ae:
         b0:05:3c:a2:fd:94:ac:61:1e:5b:f5:c4:7d:2c:5d:df:eb:d3:
         ee:39:a0:31:c2:b9:02:84:19:31:a3:ed:3d:19:b0:1f:24:07:
         04:24:6c:0b:e4:a4:9a:36:ba:43:fd:bb:1f:5f:c9:3c:c0:ae:
         26:46:73:a1:ce:49:20:ba:6d:1b:15:fd:0d:cb:ac:46:de:1c:
         7b:73:57:85:0e:fd:4d:46:7c:ae:a1:4a:eb:a8:14:15:d9:c8:
         02:5e:eb:72:3b:b1:1b:24:55:2d:83:76:c4:49:40:16:1a:78:
         4b:cb:72:ab:20:91:20:09:62:54:52:b7:ed:6d:92:48:9a:e1:
         a4:be:97:35:7b:e0:de:d1:84:0f:cd:e0:b0:2a:fb:de:89:cb:
         fc:84:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----