Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File:                     lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier:          wMJdxOlUFx9pyh+x9SBAxhcfM9aRUsPvZmcrTr+twkU=
Subject key identifier:   62:18:ED:B7:B2:BF:E0:BB:73:B9:BE:29:ED:D4:2A:AB:E2:CD:AA:15
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       0194BC73102ADEDAE41E9FBC9C28EDC0F587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number:          14D7
Signing time:             Fri 31 Jan 2025 13:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:44 +0000
Files and hashes:         1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
                          2: DrZpY6t_Z34aPnka8mlfxbcLul4.roa (hash: ArUDkHPBl4MihbzSvZGcRbPkxSIlgTU5MGX9tL6hwUo=)
                          3: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
                          4: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
                          5: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: YYnYNB5GapA8pBloxpwV7VkI5wgUw/enLnJYmFO8B90=)
                          6: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
                          7: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:10:2a:de:da:e4:1e:9f:bc:9c:28:ed:c0:f5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: Jan 31 13:00:44 2025 GMT
            Not After : Feb  1 13:00:44 2025 GMT
        Subject: CN=6218edb7b2bfe0bb73b9be29edd42aabe2cdaa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:07:ee:99:24:cf:5a:42:6f:c3:ab:e7:3e:
                    43:57:a5:09:0f:cc:96:cb:ad:b4:25:e0:fd:db:4a:
                    25:27:7d:ab:1b:f8:1f:4c:b7:6c:33:7e:b6:69:7d:
                    18:05:79:e3:bb:be:75:50:73:fd:81:eb:8c:fe:0c:
                    1e:e2:26:9c:57:21:70:5e:82:35:bc:4e:ba:52:df:
                    f7:fb:a9:03:67:9e:fe:b2:cc:ca:ca:1d:0c:73:2d:
                    e1:cd:3e:72:05:81:14:fb:0d:ac:62:f2:80:aa:aa:
                    b2:88:91:3f:de:5e:a0:d9:35:94:fa:b5:46:b4:3b:
                    d5:60:23:70:23:e9:06:92:1b:47:c9:3a:0b:60:19:
                    7b:d1:3d:3f:90:2c:33:33:89:ae:6a:ee:a1:f3:34:
                    40:26:55:41:44:73:2d:14:3e:d3:8d:da:d8:50:81:
                    67:51:af:2e:23:2d:a4:ea:57:06:af:eb:71:bd:69:
                    d8:d6:70:7d:6c:32:f2:59:8c:7e:9b:ae:20:4d:69:
                    7f:3c:48:de:1c:dd:68:7d:00:06:93:d9:6f:1f:8a:
                    5b:dc:4c:f8:0d:89:b5:72:4c:87:03:3c:fd:01:22:
                    ff:be:b9:f0:56:39:e4:75:7a:0c:4c:94:f7:70:a6:
                    2e:2f:5f:71:8a:5f:c7:ed:4b:85:14:1b:dc:8e:aa:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:18:ED:B7:B2:BF:E0:BB:73:B9:BE:29:ED:D4:2A:AB:E2:CD:AA:15
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:61:7b:2f:fe:5f:19:f8:be:61:3f:cf:cb:d5:0c:8f:88:4c:
         3e:18:32:02:57:5f:00:f8:28:bc:84:a3:f6:30:95:c8:f0:b4:
         62:10:04:66:52:67:f7:a1:b4:e8:7c:4e:05:69:90:90:a3:2a:
         9f:b9:5e:f7:08:a4:a0:1e:c0:0c:22:0f:18:91:ce:33:c7:53:
         d2:e4:e5:da:3f:ce:0a:91:e3:0d:1a:6a:9d:c1:3a:3a:0b:55:
         ff:c9:3c:8e:9d:3e:cc:eb:1f:ff:74:56:59:f9:f0:17:f1:03:
         7f:6c:9e:c4:36:dd:f2:0c:f9:58:9c:a8:85:6f:4c:7a:3c:21:
         6d:1e:e4:71:65:46:0b:a9:c1:80:37:ba:c6:e6:54:1d:c0:df:
         d3:59:b6:76:b0:9d:af:ea:85:4d:77:f4:73:49:e0:de:1f:54:
         5c:0f:66:09:c4:04:6a:91:b8:0b:53:77:02:d0:6c:77:32:0d:
         64:09:cb:8f:a7:83:29:66:ce:9a:d9:df:4c:7c:db:a3:29:bf:
         be:ff:5a:43:02:0c:b7:d3:f7:99:3c:49:8c:50:90:61:22:df:
         c3:46:f9:3c:ea:29:d3:20:57:3e:6a:df:82:f7:bc:fa:7b:f9:
         5f:70:c4:a4:02:f7:18:b4:51:b2:64:8e:bb:91:8c:32:8a:84:
         94:b5:86:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----