Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
File:                     t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft (raw, json)
Hash identifier:          6/UFj/smq7933IgiexdT1s4mMGH2MPkI9wHVBcHQ+b4=
Subject key identifier:   E6:05:88:35:D3:0E:30:FE:4E:0B:F6:33:29:FB:8B:BE:DC:75:87:A1
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Certificate issuer:       /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial:       0194BD857030858A20F8FC0532E6935A3B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
Manifest number:          122D
Signing time:             Fri 31 Jan 2025 18:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:26 +0000
Files and hashes:         1: CNVAQFJW7dBRHMv023-ZukS0QAo.roa (hash: MbBRQaCsuzQIrO/4FeJapKxDDTyVBpclGoH+IKXEFkE=)
                          2: t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl (hash: SHYtDw/AxJIZURnWeWMbagm5w6w7xvSGjumEwC0v9co=)
                          3: tYoEMyoFgANiNY7nw4zfzPaPtkI.roa (hash: PX+Kyq98vaXV0wz8tTuZQEWdK7K2Hq3OD8ndatlexb4=)
                          4: vP8tsa2NBhzhjPXtMmkyYzGXJio.roa (hash: o9F2QGvrVX1U/Nv3P0nlpeVCzrdy5dEFSSO3t+UogqM=)
                          5: wM9AJqsyZ5HxykDxZNxdOWuX0Q4.roa (hash: gFxq9ETUyMPkzj0p0aPzzl34i9ozUX6SFDw+JI4WMhA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:70:30:85:8a:20:f8:fc:05:32:e6:93:5a:3b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
        Validity
            Not Before: Jan 31 18:00:26 2025 GMT
            Not After : Feb  1 18:00:26 2025 GMT
        Subject: CN=e6058835d30e30fe4e0bf63329fb8bbedc7587a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:f1:d7:98:2b:f5:c0:d9:0f:ce:40:ea:c6:
                    bc:6d:dc:63:fa:70:2b:d4:a3:76:f3:50:0a:40:83:
                    ca:cf:17:7f:36:4e:b5:83:87:4e:09:ca:a3:66:25:
                    c5:af:26:78:89:f2:be:1e:fb:a8:db:ff:af:11:9b:
                    31:ec:4e:66:f4:2c:0e:cf:cf:57:84:d2:59:3f:76:
                    cf:22:f8:47:ef:c2:0a:a7:d4:cd:44:07:32:b0:dc:
                    cb:e0:2b:dd:75:ea:e1:f5:60:f0:63:32:5b:87:a2:
                    2e:be:fa:e2:72:3a:b0:a1:5b:7c:53:28:ae:53:be:
                    1b:cd:5a:1e:36:f0:74:a4:ed:a3:54:62:55:bc:4c:
                    2a:6a:a3:47:4f:37:5e:e4:62:8b:95:eb:70:52:12:
                    9c:93:8d:20:0b:83:24:a8:da:43:aa:f1:52:af:f2:
                    ad:ec:56:4a:d3:47:06:23:5c:84:d6:9b:ed:d6:cb:
                    ee:fb:09:5c:f3:dd:d0:46:66:be:0c:75:f9:3d:11:
                    ad:fe:d4:61:10:be:7f:13:38:d0:c1:74:19:2d:a7:
                    f9:9d:51:4e:5b:c7:20:bb:f4:8b:46:de:fc:02:e4:
                    b5:80:ec:23:a9:10:1e:0d:af:5f:6a:0e:02:9a:80:
                    b2:9e:8f:5d:34:07:fc:e3:98:11:d1:0b:2a:c0:2f:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:88:35:D3:0E:30:FE:4E:0B:F6:33:29:FB:8B:BE:DC:75:87:A1
            X509v3 Authority Key Identifier:
                keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:a6:ca:ac:a1:e1:2d:a5:17:a1:81:10:ae:a1:30:b8:af:
         df:58:da:aa:13:73:06:b8:cb:dc:c1:08:91:37:cd:c6:bd:c0:
         c0:77:36:6d:cc:6e:ff:2b:5f:59:dd:57:93:4c:97:8d:35:ce:
         d1:59:98:90:6b:21:04:93:97:19:c1:1b:65:47:9e:5c:bb:10:
         46:1e:ee:1b:f7:ae:6a:28:65:6d:32:32:74:5e:17:ef:b7:bb:
         dc:d2:40:a1:8c:42:65:34:a8:51:96:2a:6a:7b:33:c3:a0:87:
         6d:9e:e1:42:a2:98:a3:86:23:62:fd:70:fb:bb:0b:16:22:49:
         b3:41:ae:be:cf:e7:99:26:99:e5:d0:68:68:b5:ed:d9:39:19:
         e3:ff:c3:81:a4:03:a7:4c:28:e0:45:ce:4c:68:7b:7e:39:e5:
         fb:20:bb:3a:1b:db:b5:56:d0:47:f2:4f:df:01:8a:26:4f:0c:
         05:fd:00:43:e5:9a:5f:4c:57:d5:31:12:03:01:89:7e:3c:40:
         24:a6:de:87:ea:aa:a7:89:e0:32:36:3b:f8:7e:d7:cc:02:ee:
         13:46:ec:0c:58:88:b1:3c:bb:8f:b7:7d:e8:d8:33:ad:9c:7a:
         6b:9f:8c:d3:84:24:70:50:c5:f9:3f:55:01:b8:73:fa:35:da:
         b0:47:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----