Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          cz9n9xgO3Izho49Y6HNwYWs6uVWzE84z5oyQYcDSh0A=
Subject key identifier:   1D:4A:41:BD:9B:05:FC:4E:D3:DC:2E:23:3C:15:68:8E:0D:78:23:2B
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       0194BC3BB9FF30D3428F3ACACD689660491A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 12:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:18 +0000
Files and hashes:         1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
                          2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
                          3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
                          4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
                          5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
                          6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: j0Hf3VFF6PdTkZj+njiLcdT97kVZMA3m1Xiq00k+pug=)
                          7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:b9:ff:30:d3:42:8f:3a:ca:cd:68:96:60:49:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: Jan 31 12:00:18 2025 GMT
            Not After : Feb  1 12:00:18 2025 GMT
        Subject: CN=1d4a41bd9b05fc4ed3dc2e233c15688e0d78232b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:56:7e:57:f1:ac:e1:c2:d7:f0:7e:ec:33:
                    bd:6f:b7:b1:7a:69:9f:7f:b6:2d:cb:89:fe:95:42:
                    03:65:99:38:0d:a9:2d:55:bb:ab:e5:e4:48:d1:15:
                    8e:03:64:08:49:7e:7d:93:6a:e2:41:21:ff:23:de:
                    87:fa:d3:a2:c0:7c:0e:69:07:c2:99:75:c8:ac:99:
                    e4:13:75:4c:32:b9:28:98:7b:c8:89:a0:b6:a3:46:
                    8a:12:ff:a2:c3:75:c2:33:a1:d3:1f:08:34:0c:43:
                    66:35:b2:91:72:89:61:11:71:5f:1d:b8:d8:59:2c:
                    a4:31:f0:72:3f:37:61:98:bc:7b:32:e2:90:7a:9a:
                    07:7e:45:6e:3b:20:ce:40:b7:4b:9d:15:ec:7e:4f:
                    c4:3d:35:10:d5:0d:88:8e:f5:4f:19:e4:29:a8:b5:
                    1c:f9:4d:49:88:66:31:a7:83:6e:86:43:fb:63:42:
                    4d:54:54:14:d1:09:ef:45:30:5a:2b:13:e2:dc:ae:
                    df:5e:66:ef:b7:f1:47:03:12:1a:2b:ec:44:b5:84:
                    57:d0:e7:46:f6:31:ec:a6:53:3c:4f:5a:43:ee:1d:
                    21:45:97:08:ff:a0:75:20:e5:ee:97:2b:d9:4d:3a:
                    b1:c1:92:87:d7:c1:34:42:98:bd:ff:98:98:bc:c5:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:41:BD:9B:05:FC:4E:D3:DC:2E:23:3C:15:68:8E:0D:78:23:2B
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:9a:7f:98:66:1c:15:a8:0e:a2:c3:3e:eb:95:73:f9:52:
         e9:34:b2:22:d8:2f:31:e2:f5:b4:2b:0e:94:16:85:93:45:81:
         68:b9:45:04:03:04:17:cd:a3:cd:7c:72:ef:7a:bf:85:fa:8a:
         ba:b4:e8:38:a1:81:c1:c3:a1:0c:4c:ad:51:7a:8f:07:e5:01:
         2e:53:e7:b9:01:a8:45:39:d6:81:89:d6:fd:87:4a:37:d0:28:
         f7:03:f6:78:6d:13:0b:e0:a9:d5:8e:bb:88:90:e1:95:fe:96:
         07:a4:bc:c5:f7:bb:1e:44:2b:7e:35:95:de:20:b2:8a:e8:8d:
         36:03:48:ad:b8:7c:40:aa:cd:5d:b2:d2:d4:3e:82:c5:23:81:
         4f:b4:ee:b5:ef:84:50:3c:62:2d:c3:af:ce:f6:57:5e:d9:b2:
         1a:9a:b4:f9:55:bc:aa:bc:cc:ed:2f:a3:ab:ea:4a:12:de:5f:
         65:35:33:51:b0:e1:76:a5:02:01:1e:bd:89:c6:38:05:76:ee:
         48:7d:a1:16:c0:77:6b:96:8a:b5:cb:47:76:a6:e8:06:22:33:
         ed:20:e0:65:b3:ab:2a:0e:98:36:c5:f2:46:59:1d:ee:b5:0e:
         7b:b6:84:a1:82:8d:ff:6f:94:14:c3:da:d5:61:31:38:05:45:
         f1:68:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----