Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
File:                     9Z1WxSx3M_g753SvpHu9VdKHl6w.mft (raw, json)
Hash identifier:          pvcLaP4o0L9kjjFqkAKqHc1tSmlR6ieri0EwDtHBey8=
Subject key identifier:   AB:B3:A4:B2:0D:57:CB:5C:3C:F6:D3:1D:92:82:FD:8B:5D:67:B4:35
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Certificate issuer:       /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial:       0194BCA9BB4D31F62AD4CC65A40EA5D8815A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft
Manifest number:          13B8
Signing time:             Fri 31 Jan 2025 14:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:27 +0000
Files and hashes:         1: 9Z1WxSx3M_g753SvpHu9VdKHl6w.crl (hash: 04+Yrcfq2pkQcaQww/bQS0Abs/Y1jLXP1q1CBS5f33g=)
                          2: LiwZdmL5RU2B6zVphh68eF-_QCM.roa (hash: 12dQ0T9H1SC1JmN6bqW5YJuYyqtLY06teqdtY4jNB1w=)
                          3: bpOMGbazzT-BkrDmumTqfQYBlb0.roa (hash: l6XZ6lFWNL3LE9dGosqgBQ/Pd0UpxiEBjNXYRa8ne5I=)
                          4: tt4fD2Y3ZwUbIvtBwlNhZEkz_s0.roa (hash: +3QbGwJKO1wVzcZZV/GJcxqJzgKbCl/1gOdPe63EVdE=)
                          5: yX7sG3wpFe9yZYaNAimw1pZQPYs.roa (hash: QivAR9rkVn6zuWjKGwBCmHSlxo+GMM5mhMT5ya37DwQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:bb:4d:31:f6:2a:d4:cc:65:a4:0e:a5:d8:81:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
        Validity
            Not Before: Jan 31 14:00:27 2025 GMT
            Not After : Feb  1 14:00:27 2025 GMT
        Subject: CN=abb3a4b20d57cb5c3cf6d31d9282fd8b5d67b435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:bb:ea:ff:f0:05:72:37:83:55:83:26:8e:
                    75:f7:d9:09:70:81:59:37:9e:79:85:2b:4f:c7:98:
                    52:85:6b:38:19:e1:17:d2:95:74:73:a3:f2:95:dd:
                    f4:61:ad:94:b0:6b:65:f0:cc:8b:96:4a:7b:07:24:
                    e7:e2:d8:63:ed:4d:15:99:ac:25:a0:27:f1:56:dd:
                    f9:33:fb:53:34:ec:be:c6:54:0a:e3:62:e4:6c:0f:
                    b0:8e:5f:1d:63:aa:66:99:cc:fb:f1:6e:34:ad:1e:
                    6d:9b:02:9f:7f:20:67:f5:6f:08:37:c9:e3:9b:27:
                    6f:82:7c:83:b2:d5:f0:e3:f3:5c:1e:4b:90:8f:01:
                    b9:19:ad:cf:e0:af:f3:dc:10:c9:4c:66:2a:73:09:
                    4b:08:ff:d0:07:bd:96:90:6f:bb:fc:18:46:e6:41:
                    a5:11:c4:a9:b5:aa:d7:b6:bb:61:f1:d5:1f:d3:de:
                    d3:8e:7e:b1:df:2f:75:98:49:20:7e:6c:81:b1:dd:
                    9e:a8:51:32:c1:c2:09:70:74:b8:53:3d:3a:59:e3:
                    54:9f:2c:b7:ac:d1:d7:1d:2f:34:2e:70:f6:b7:3a:
                    31:84:91:37:56:e8:64:05:1c:e6:b7:0d:6c:92:89:
                    17:40:3c:e6:0f:55:50:5b:9e:0b:23:9c:75:e8:df:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B3:A4:B2:0D:57:CB:5C:3C:F6:D3:1D:92:82:FD:8B:5D:67:B4:35
            X509v3 Authority Key Identifier:
                keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2f:de:53:0c:64:4f:4b:99:1c:44:27:a3:98:6b:ec:d9:36:
         a5:1e:ac:5d:e0:e3:ef:1a:4c:dc:83:a7:3c:91:0c:01:a0:d0:
         f0:77:7d:5f:fd:8f:c2:c6:45:64:3a:fe:f7:fe:a2:c4:b4:33:
         40:ee:cd:64:2f:ea:0f:51:ed:33:ae:63:2a:1b:d0:16:45:ae:
         47:8b:34:96:96:c9:e8:72:6e:be:ed:0e:d3:65:d7:72:15:cd:
         d7:62:13:60:1c:1b:20:e3:51:16:e8:44:10:fe:33:78:47:b4:
         34:57:82:1e:7f:70:53:34:15:57:5a:af:70:3f:64:8c:1e:5c:
         d4:11:99:d4:c8:5b:cc:07:a9:8f:32:8a:65:5d:53:16:3f:9f:
         4b:6e:76:96:2c:c6:13:f1:f8:71:db:e2:f1:b2:8a:49:b9:df:
         21:9c:84:39:2f:e1:8a:3a:c2:b5:04:21:ba:46:3e:d2:ff:ee:
         50:78:10:2c:32:85:62:b7:12:41:e6:a0:b2:fe:da:e0:18:a7:
         53:73:09:3f:83:36:a6:5e:5b:6f:ff:52:fb:03:ab:71:1b:a8:
         f0:9c:b6:0b:21:5d:8d:b0:63:02:2c:cb:d2:a2:f1:8d:e1:d7:
         65:a3:19:84:2c:d5:2a:24:a6:35:c1:20:74:48:bc:1a:f0:08:
         8b:17:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----