Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          bE+HgkoIBE38Q4rhs0ZdaizBopfndd3znaS9NFgnNfk=
Subject key identifier:   63:8D:76:4B:D3:42:65:D1:EB:95:66:68:61:1D:B1:71:DA:B2:9A:75
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       0194BC052EA085010283D4FA781F3A7A99DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          07C6
Signing time:             Fri 31 Jan 2025 11:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:43 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: a-uHBOpyzdK3zVYDOg8UIHN03yU.roa (hash: H9wzL/UUxJZ81Fk0wfS9+Uygz3BeNpB4M/N5om2Y4dg=)
                          4: avjbPkAlTTUDqNOv2jIGjLOGScM.roa (hash: NoYFGDs45doeFAf2D++JjK94J0re2CVTVqEaqoaVcGU=)
                          5: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          6: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: kUBnnhQstD3kPT97CrXjDpqotBG0iKKM1W6QnEtHBuE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:2e:a0:85:01:02:83:d4:fa:78:1f:3a:7a:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Jan 31 11:00:43 2025 GMT
            Not After : Feb  1 11:00:43 2025 GMT
        Subject: CN=638d764bd34265d1eb956668611db171dab29a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:97:94:eb:83:cd:d9:4a:e9:d3:9e:0c:32:
                    64:ac:00:b7:97:54:7e:56:fe:1a:92:74:37:58:96:
                    e6:67:32:28:ab:47:c8:d9:12:91:d2:ce:3b:5c:d9:
                    ed:6d:2d:98:f0:3f:10:57:b1:5b:e3:0a:14:7a:3d:
                    dc:94:44:53:73:c0:fb:42:57:ce:e0:ff:98:0b:e3:
                    48:ca:fc:8b:e6:7e:0b:d0:60:67:d1:25:52:6d:f0:
                    97:52:70:86:64:06:b6:c0:f9:97:2c:f8:99:d9:e5:
                    da:ff:11:6b:66:20:38:ab:51:62:79:18:4a:74:0d:
                    91:ae:d1:35:da:ce:d0:0d:69:0e:bd:33:4a:dd:44:
                    be:7a:cd:15:93:71:8e:da:ae:7f:63:d8:8e:6f:43:
                    ae:c1:5d:9e:7d:c3:ca:74:17:89:16:a3:df:88:b1:
                    40:02:8d:32:20:8b:e0:1e:7b:31:ee:e0:f4:74:82:
                    ae:6e:75:f2:6c:50:ad:e8:22:82:7a:ec:d7:e0:47:
                    dc:eb:3f:62:a2:2d:6c:90:ea:c7:e5:20:11:a9:82:
                    04:a4:f8:98:89:4a:16:d7:f2:ae:96:e0:6c:01:7b:
                    a2:7b:c9:08:ec:63:61:23:3b:41:64:d3:c7:91:7b:
                    97:87:36:80:91:1d:af:99:99:63:e4:92:0a:a4:24:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8D:76:4B:D3:42:65:D1:EB:95:66:68:61:1D:B1:71:DA:B2:9A:75
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:58:74:ad:52:72:5b:a4:5b:9d:7b:db:57:20:2e:45:ae:
         d8:f1:05:9b:89:6b:50:7c:d7:21:31:62:4a:64:6e:c0:70:ef:
         d0:dc:06:60:5c:76:31:d5:64:39:b7:dd:9f:67:96:50:cf:a6:
         5c:c6:7d:96:a4:38:0a:41:c5:df:47:6f:67:36:b8:38:d4:3f:
         13:12:17:76:86:28:1b:99:4b:39:6b:a5:97:42:4e:4f:55:11:
         d7:43:2d:f5:11:49:04:f0:bc:15:4f:f1:66:5c:36:9c:64:8b:
         5a:d8:27:70:3b:6f:13:8e:50:14:08:6f:69:c7:fe:4d:ae:e4:
         01:2b:5f:d0:73:6d:f0:7c:5a:0d:42:c9:54:9c:8d:5c:e2:82:
         cb:f3:ba:83:d7:06:29:5f:7d:9d:d6:ee:24:03:e2:8d:29:3e:
         86:1b:81:21:21:02:df:b2:72:bd:b9:5c:b0:0f:bd:27:db:07:
         55:bf:7a:e5:77:2b:6c:12:9e:26:91:cc:7b:91:59:42:86:0f:
         c9:dd:fe:7e:3e:ec:1a:fb:51:82:4b:f8:3a:db:a7:4a:31:58:
         34:43:3b:ee:fb:ba:d4:e5:08:69:13:b8:f3:44:b3:52:f9:4f:
         e9:7d:5f:ce:55:a2:4e:f4:fa:de:93:7a:5a:62:c7:31:c6:41:
         2c:67:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----