Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File:                     DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier:          gDmyAUuIWwCoyDtCnlu1LdUR9cxY5I4DYH2Py5Pm2Ys=
Subject key identifier:   69:45:78:4A:6D:E2:83:30:48:C5:61:8C:A8:7C:F3:CC:E5:82:F9:08
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer:       /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial:       0194BC72DFD291BBCDDD6DD8841CB049E104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number:          13BE
Signing time:             Fri 31 Jan 2025 13:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:32 +0000
Files and hashes:         1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: Y0GJMTIpb0VRM6czd7xHROBYLF/2MrtToFn7jlJVeRQ=)
                          2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
                          3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
                          4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:df:d2:91:bb:cd:dd:6d:d8:84:1c:b0:49:e1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
        Validity
            Not Before: Jan 31 13:00:32 2025 GMT
            Not After : Feb  1 13:00:32 2025 GMT
        Subject: CN=6945784a6de2833048c5618ca87cf3cce582f908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:25:91:46:3e:81:c0:0a:91:e0:7a:7a:c1:
                    d2:3c:e8:be:e2:2a:c1:2c:e2:82:39:f2:36:45:af:
                    f8:36:7b:f1:12:53:71:c8:3d:1a:50:60:37:61:7a:
                    8f:c3:ea:86:94:8e:d7:10:e0:5d:b6:6a:a3:5c:60:
                    bb:74:68:d7:32:fe:30:23:bd:ab:35:2d:dd:52:a1:
                    8c:f3:06:37:c5:47:74:ac:e9:6d:f1:d4:fd:c2:5e:
                    de:df:b8:5e:82:e9:94:0b:18:d6:bb:9d:c4:36:49:
                    52:b6:91:71:92:2f:70:2b:00:d9:56:3d:fb:75:e4:
                    d9:99:e0:d8:fa:ab:36:6f:8a:94:81:c0:3e:b4:87:
                    37:f6:f3:13:64:54:b6:19:81:b6:b2:68:84:35:59:
                    e5:a5:4d:bf:69:35:92:66:64:c9:7b:43:5e:57:01:
                    bc:3a:cd:98:84:98:fe:f3:95:4b:52:aa:95:12:82:
                    b5:90:2a:d4:40:8d:48:ee:76:a8:28:38:89:2c:9e:
                    97:01:8d:ef:ac:28:ae:87:ac:2d:4b:30:30:cf:b0:
                    5a:98:15:73:25:7b:d7:c7:52:7a:93:5b:83:23:18:
                    c5:60:b1:45:0f:95:87:d4:b8:21:d2:42:cd:fc:f8:
                    e7:0e:fb:16:d9:89:96:2d:2e:18:30:1e:2d:b8:9d:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:45:78:4A:6D:E2:83:30:48:C5:61:8C:A8:7C:F3:CC:E5:82:F9:08
            X509v3 Authority Key Identifier:
                keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1d:13:03:e9:b8:50:0f:47:16:ef:4a:9a:dc:44:00:23:e1:
         4f:cc:98:e7:45:72:0f:da:44:e2:c8:5a:eb:ca:ea:ef:01:f6:
         a6:f3:e4:f6:62:fb:6c:6e:fd:63:19:7f:0d:c2:a8:73:e8:af:
         55:18:d2:0f:af:5b:34:53:02:78:a9:d6:be:da:ff:43:76:ad:
         ff:21:50:b6:bf:7e:6e:14:a8:2f:bf:07:7f:1f:75:cb:6b:9d:
         af:aa:ad:0b:5e:90:eb:39:ed:2f:cd:b9:cc:bd:e3:04:4a:ed:
         69:03:eb:3d:a2:35:f8:40:60:04:a1:37:62:94:65:68:1d:1f:
         90:d9:f2:c7:7a:2c:cf:89:54:51:7f:9a:91:0f:f9:9b:a8:30:
         db:bd:07:a1:cb:47:5d:3f:b2:e1:de:fb:41:81:f7:1f:1c:09:
         3f:6f:ca:ef:28:65:9c:37:68:45:5d:7e:06:0f:2f:e2:dc:29:
         07:bf:f6:9a:ec:d2:61:a7:77:51:cd:76:71:db:b9:75:13:82:
         a1:3f:42:ac:3b:29:57:f8:6f:6d:0e:8c:f9:16:cf:ea:e3:bb:
         9f:eb:b7:2f:f7:82:16:50:ac:46:30:d5:87:5e:f7:ba:0a:e4:
         94:ef:d7:38:6d:a3:69:6e:e9:66:fa:1a:06:9e:7b:ad:e0:f9:
         75:a3:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----