Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          znwssVK/3BUEyJ4Bof7mPBVL2A0tZmVE2AgE5S36AbA=
Subject key identifier:   99:67:1C:E4:57:77:4A:80:61:AA:41:99:05:A3:10:EB:1B:BE:6D:9D
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       0194BD4E42FC2EFAA147F742ED0B51A7B5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          13E4
Signing time:             Fri 31 Jan 2025 17:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:09 +0000
Files and hashes:         1: 1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa (hash: xlDzBukhszCg1ynm8q0OHDdDRpBK+e0yk8+3eMgwkrM=)
                          2: 93UGFc64uRQkHnuwjGVRkE-7nLc.roa (hash: JoPSDG20LOgAFve7ujNULDp4vxcvcqgzA3E4aGViMYs=)
                          3: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          4: Z2mexHtMcdthgKG9aSJsNeohI4w.roa (hash: m0OcAXOPeYDed+OvgfUkVLJfkMlAG78Dgwf4DizGZQ8=)
                          5: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          6: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          7: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: bNCKEZ14n4QC0R7SA7qxI8zvVqgsZnshyG7GGukpWAw=)
                          8: ufB1VtYNkzT-0-xHX2uT0LrMt1M.roa (hash: jafWeeBsmaDNc7YUsc2uWUY1AyuQRlnCqgbtql9Mmvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:42:fc:2e:fa:a1:47:f7:42:ed:0b:51:a7:b5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Jan 31 17:00:09 2025 GMT
            Not After : Feb  1 17:00:09 2025 GMT
        Subject: CN=99671ce457774a8061aa419905a310eb1bbe6d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:d5:df:34:9f:3c:7b:1c:e1:c8:39:1a:e6:
                    ed:ed:cc:9c:42:d2:8c:7e:b4:4d:b8:93:8d:3e:85:
                    00:e3:0d:03:85:61:20:fb:55:b3:5c:8a:10:d2:f2:
                    72:71:2e:9f:49:98:41:e8:dd:f0:14:4b:cc:08:7b:
                    a1:2d:c6:c5:80:e6:cf:54:ac:a0:dd:ba:6f:f6:26:
                    64:24:9b:b4:bb:21:a3:b9:39:d3:46:2d:9b:74:f1:
                    40:12:aa:ad:03:0a:d6:68:c1:04:dc:a1:35:57:f8:
                    c8:d5:88:70:7f:a2:b2:f2:b3:35:da:07:a1:0b:1f:
                    5e:b5:be:df:5b:99:f5:6c:d1:d0:a8:ff:a2:1b:16:
                    80:62:4d:73:12:81:06:2b:58:cd:9e:4d:d4:4b:a1:
                    51:48:1c:b5:ca:5c:9b:33:d6:3c:66:9d:7d:a2:76:
                    f7:0c:5b:b8:5a:cc:44:1a:12:53:7c:38:f2:62:6f:
                    d9:0b:16:84:1c:08:6b:bd:8d:86:b2:34:84:d7:38:
                    b8:cd:e4:fc:0f:a8:05:98:e4:28:f8:1a:5e:a1:17:
                    fc:51:ca:00:76:b5:fb:cf:7b:66:eb:50:cf:a0:17:
                    9e:a3:91:b0:de:d9:a3:ec:23:bf:26:b5:61:d8:c4:
                    d5:92:bf:ad:8d:1f:34:b7:d9:3a:9f:89:0e:b9:33:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:1C:E4:57:77:4A:80:61:AA:41:99:05:A3:10:EB:1B:BE:6D:9D
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bd:a5:12:c2:c2:6e:03:70:0c:e9:27:3c:53:82:7e:ba:b2:
         a6:c5:f2:ee:74:5e:4b:48:39:2f:c5:48:7f:6f:77:55:17:23:
         b9:30:b8:7e:00:af:0d:aa:40:6e:1a:2f:01:b8:f3:95:34:1b:
         e0:f5:29:73:73:ad:56:b7:c6:e0:a5:ef:46:5c:03:b3:cb:b7:
         e4:39:be:b6:1e:43:51:e5:70:62:95:cf:dd:93:1f:e6:a8:13:
         fc:d4:f7:08:7e:38:7a:f5:68:fd:8f:71:d7:b7:9d:0e:55:f7:
         39:76:80:6a:be:09:16:7a:bc:ab:80:49:0e:a4:a1:ec:d8:f4:
         bb:b7:59:17:c0:c7:41:9b:79:10:04:2f:1e:7d:af:3c:24:1a:
         88:df:88:7f:2c:09:0d:29:82:d4:36:df:ed:c0:1b:c5:a3:cf:
         69:2c:a0:b6:9f:52:af:b6:b1:d9:07:e5:af:fc:0b:28:16:4e:
         71:d3:9f:3b:d8:78:ff:cd:98:f3:b8:a2:1d:50:1f:0e:a1:44:
         e1:57:4e:96:73:1d:d6:97:c7:8a:29:21:ae:96:0c:28:ac:92:
         b3:10:12:83:65:21:a9:3e:cd:f8:6c:19:77:f9:15:fd:a7:84:
         80:b5:c9:7f:eb:20:d9:4c:95:59:fe:27:d4:7b:c5:97:0a:63:
         94:bc:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----