Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          C3uZE+IzdOxDnixjiq4aXb40rD5zWRlFYnCDbm5cjj8=
Subject key identifier:   A4:A5:F2:D7:3B:A8:FF:BE:C1:6A:5A:A2:F1:5E:EB:7C:5C:7D:BF:82
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       0194BBCE51099F32EA8DC38AE74920CFBE46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          0905
Signing time:             Fri 31 Jan 2025 10:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:48 +0000
Files and hashes:         1: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
                          2: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
                          3: J6V38H8YoI17U_6ZK87Tdnr9D6E.roa (hash: raWkVSI8/jwN4Seiq8VvscBLScbGAuD9ueNsJNFPab0=)
                          4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: 86djuwk0A1YOzpiV1EdXKrGjlcfXw+Lrqf+hdlIqHYw=)
                          5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
                          6: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (hash: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=)
                          7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
                          8: WL2g552SMTFxlVreLBfVq6mZ70g.roa (hash: fT4vchM9u9UmPGHFe3vcWQVFsOy6XCvUN9jsOGCnnzk=)
                          9: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
                          10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)
                          11: tBypEuD8_6LGvghrSbHbTC7iVgU.roa (hash: XOS8vBivruT/FLYxxS0etrQ1c1DImhE/euhY8wg9G6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:51:09:9f:32:ea:8d:c3:8a:e7:49:20:cf:be:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Jan 31 10:00:48 2025 GMT
            Not After : Feb  1 10:00:48 2025 GMT
        Subject: CN=a4a5f2d73ba8ffbec16a5aa2f15eeb7c5c7dbf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:18:a3:ae:3e:93:46:a7:cd:d9:27:f7:d3:
                    a4:4e:d5:c7:cb:0d:35:ef:49:92:4f:d0:6b:dd:5a:
                    03:86:94:6a:b2:ce:df:8d:40:32:be:80:2b:a8:b2:
                    85:cc:fc:0e:08:54:ed:9f:73:55:31:94:79:8a:af:
                    b9:a5:64:a1:12:6d:d2:c7:c9:72:9c:3b:e3:30:2c:
                    71:a8:d5:52:09:9a:fc:cf:83:a1:e5:5f:eb:9c:7d:
                    28:91:f8:91:8b:58:2f:9a:49:fe:09:66:f7:e3:f9:
                    23:5c:31:17:78:d9:10:34:54:32:7a:f5:41:8b:15:
                    61:b0:a4:35:31:31:04:a9:c5:d5:ef:68:e5:ab:24:
                    0d:ca:fc:04:ef:25:98:1e:93:8d:53:08:d0:fc:d1:
                    f6:c0:64:21:12:3d:f5:ce:5d:d0:3e:4a:ed:e8:fd:
                    a0:49:c5:ef:a5:67:4f:91:44:78:8d:63:93:eb:e3:
                    6b:d2:aa:fe:78:7b:a9:d0:16:00:7b:c9:a0:eb:19:
                    54:69:5f:73:9b:19:f0:5b:ec:23:6a:e2:ed:db:f9:
                    b2:6e:5f:1d:56:ad:cc:67:5d:5b:6a:f7:1f:58:a4:
                    ab:f9:1d:d5:20:e9:de:70:e1:80:a6:94:1d:97:40:
                    26:c3:31:41:ed:83:d9:73:8c:bf:5e:41:a9:13:b1:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A5:F2:D7:3B:A8:FF:BE:C1:6A:5A:A2:F1:5E:EB:7C:5C:7D:BF:82
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:62:b4:33:71:41:45:40:c2:e8:3a:9b:c6:2b:35:70:03:
         a8:4c:3f:3f:ab:22:b2:f9:b0:02:8b:e0:f3:1d:c6:5d:18:0e:
         b2:d6:b6:25:1b:47:05:1b:83:54:71:31:43:81:d5:c0:fb:ea:
         bd:2c:b1:dd:f6:ac:ed:1c:8a:83:d5:d0:6f:d7:2c:d5:f6:3d:
         3b:c3:21:f3:7f:62:be:49:34:54:96:c0:7e:fb:89:28:43:18:
         22:48:a8:f0:fc:89:a3:0a:1b:89:15:59:57:e2:21:5b:aa:c1:
         7e:64:d3:2f:90:99:7a:e0:1c:e1:1a:6a:b5:15:ce:fa:2e:bb:
         ca:21:3d:57:f1:34:c8:ae:5b:bc:cd:6d:fa:f6:67:f9:be:c2:
         16:6b:2c:5c:81:b7:6f:ef:3f:44:cb:7f:43:29:1b:c0:69:1b:
         36:99:96:9b:e9:4d:8d:41:52:2f:11:33:b2:cf:fb:02:e2:e2:
         6e:24:e0:9c:bf:28:08:80:ba:38:78:cb:72:48:90:9a:35:eb:
         cf:28:1d:d6:22:91:7b:d4:b6:87:35:e1:4b:91:a5:07:3d:63:
         da:92:90:a5:c6:8a:3b:42:84:c1:cd:f6:09:c0:1a:a6:1b:08:
         d8:04:c3:8f:d6:fc:42:e1:e1:ad:f3:8a:9b:33:bb:23:4e:4b:
         af:b3:43:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----