Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File:                     Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier:          dUhwjqfbkShpD7rMtjPZauscWr/kz3inswrGLbsO1TA=
Subject key identifier:   99:C3:0E:8A:6A:C3:84:F1:81:D5:94:C1:41:71:6E:E5:3E:9A:DE:A4
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       0194BCE0896A896BB1819A176549068E7115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 15:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:19 +0000
Files and hashes:         1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
                          2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
                          3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: 5IupDxErmZKSaYppFLu5XumSMNvezXQgiC7w5G8/9MA=)
                          4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:89:6a:89:6b:b1:81:9a:17:65:49:06:8e:71:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Jan 31 15:00:19 2025 GMT
            Not After : Feb  1 15:00:19 2025 GMT
        Subject: CN=99c30e8a6ac384f181d594c141716ee53e9adea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:ba:95:7f:8c:73:de:55:12:5b:e2:10:ee:
                    00:57:70:65:45:71:54:58:0b:1c:bf:09:f2:aa:88:
                    2d:55:b8:9b:2d:7e:a4:62:83:7a:c6:19:e6:2d:ed:
                    33:d9:b9:a7:ff:fd:12:d3:91:50:14:88:cf:7b:6a:
                    94:2e:69:f5:c9:2c:e0:15:5b:59:7b:ec:58:c0:7b:
                    93:8c:70:ae:45:27:56:75:e0:49:f1:af:4e:4e:52:
                    ec:51:d0:66:6f:33:d1:e4:8c:af:55:77:1d:b0:ed:
                    65:1a:97:f2:f4:73:6f:ea:f0:63:b8:03:47:31:97:
                    84:e7:ba:d7:3a:6c:a1:12:cc:bb:2d:71:c1:0b:2a:
                    a7:cd:9b:e8:f5:f3:a8:59:7c:d5:9c:51:81:41:29:
                    8b:1e:e7:ad:22:1f:b0:e5:76:6e:6d:c4:fe:2b:69:
                    b6:de:8d:6c:5c:9d:74:0a:f2:2f:19:14:11:9f:81:
                    a2:38:20:d5:c9:43:2f:55:ae:c0:18:68:93:4b:29:
                    85:27:a5:83:9a:a9:aa:21:00:ff:40:4e:6f:af:78:
                    2a:2e:c9:17:2a:98:05:4e:e3:e8:9e:6b:4e:65:cf:
                    ce:20:ae:e1:3a:65:18:36:8e:d0:52:7e:72:3b:37:
                    93:31:60:68:3e:5f:6d:2d:f5:ed:fc:3b:5b:ca:64:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C3:0E:8A:6A:C3:84:F1:81:D5:94:C1:41:71:6E:E5:3E:9A:DE:A4
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:5f:e2:dc:11:d1:6e:6f:fc:b3:87:57:70:a3:e6:e2:ae:
         1c:3e:4a:3a:97:be:7f:0b:d8:d4:67:25:bd:ee:84:0e:ec:db:
         72:96:0a:64:fd:51:f3:f7:ba:3d:aa:2a:b6:b9:39:0e:f2:e3:
         16:3d:14:ec:04:48:57:f5:58:58:43:40:62:3a:ab:ed:e1:43:
         21:1b:8e:05:2a:d8:3c:ba:d5:ae:11:3d:bc:41:95:cf:27:c8:
         e2:9d:9d:78:ae:f7:f1:25:2e:81:fe:80:3c:a7:60:9c:41:0d:
         2e:00:e6:a2:49:51:60:9c:54:cf:43:d3:c7:71:0d:28:f7:d4:
         a9:5b:fa:6a:cc:55:b1:34:fd:0c:7d:b0:19:1b:65:ab:8e:0d:
         a0:12:f5:fa:c3:2a:57:79:5b:b1:30:d8:92:cc:8d:f0:3a:d0:
         52:87:8b:f6:92:54:40:a0:25:4a:05:42:53:43:bf:f2:a6:55:
         a4:e4:26:bb:d2:6f:95:84:9d:b5:4b:94:a4:db:76:d3:36:4a:
         11:6a:7c:b2:a3:a0:dd:86:0e:cb:41:f2:53:e1:35:eb:36:27:
         b6:c2:93:db:52:c8:9a:29:fd:ee:71:d0:0a:ad:2b:00:d3:81:
         bd:81:2f:c5:0f:9b:1c:50:3b:8b:29:72:e3:ae:81:aa:e3:7d:
         58:4b:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----