Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          yPOp2866459JaZ+LSwZ1wYJbpMwpbdZCh8P994jvS9Q=
Subject key identifier:   07:A1:F4:0C:72:E9:95:C7:9C:C5:60:4A:4B:BD:3F:62:E3:D8:68:F5
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       0194BC72FF54EEBFD6E637AD0159ED2B75D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          0715
Signing time:             Fri 31 Jan 2025 13:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:40 +0000
Files and hashes:         1: GGIWecpIopyHoGkyMoac3XO9YI4.roa (hash: 9Tukemon/VB7WwBPqptslNoQ4E03a3N7Hs7ZGYVz5y8=)
                          2: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: nCYoRGETgVaejfJ2TzBX7ifRu1PP2G0xtIKkxZiSvtY=)
                          3: nsiN3ofAwNQQ2mqsbegc2K4OGCU.roa (hash: uwP5VYs/JMWcCkQcnOTDFYFSosyvKY/vSk4unoVSBA4=)
                          4: okDN2Vo62Yab7_J_IfxlPOwte3o.roa (hash: ZVhneNDrAmsrpM6pDt87HbPveddbBNLv2BXaomrxwUA=)
                          5: xgHz664AQPMntc1cKGqX8uLPb68.roa (hash: L7AjuBiSLP8pLMyCXeeg/SoD465XYb8TiAmRmmGuBX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ff:54:ee:bf:d6:e6:37:ad:01:59:ed:2b:75:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: Jan 31 13:00:40 2025 GMT
            Not After : Feb  1 13:00:40 2025 GMT
        Subject: CN=07a1f40c72e995c79cc5604a4bbd3f62e3d868f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:21:48:0b:10:eb:cf:8d:9a:52:ba:de:ee:
                    7d:3a:56:84:09:7a:68:11:a6:a4:0d:b1:e2:82:42:
                    b1:a9:dd:94:b8:4b:25:6f:72:59:ed:82:32:54:12:
                    53:ca:3b:b5:1e:fc:ba:e9:a6:31:56:e0:d7:83:d1:
                    9e:c1:03:a4:b0:ff:83:80:d5:aa:ca:23:6c:49:bf:
                    c0:3d:0a:d6:51:f8:19:77:9a:bf:d6:ae:28:6e:d4:
                    5e:88:61:d3:89:57:8c:bb:b8:55:15:41:95:2c:da:
                    c7:40:29:4d:1b:a7:05:0b:a1:b9:85:8e:29:d1:e5:
                    f9:8f:0e:21:8e:0d:31:8a:51:7c:29:c1:31:b4:90:
                    54:67:35:65:d4:d2:6d:3a:89:fe:20:4a:0b:72:b5:
                    da:99:fd:36:53:8d:47:f4:ba:ba:3a:9a:78:4d:fb:
                    1e:6c:d8:8f:d2:c6:1c:d9:ee:ff:93:41:b0:92:fa:
                    13:75:8d:43:e3:36:58:d8:2b:12:53:67:08:77:eb:
                    bb:dc:34:4d:86:be:38:52:2e:4e:a6:0a:6e:f9:f1:
                    c3:ab:83:9d:0b:19:c4:dc:a1:34:c5:26:ba:e0:c1:
                    2e:a8:6f:df:d1:8f:d8:8f:3f:1c:07:5b:d8:32:b5:
                    f2:b4:c5:39:23:f8:e9:71:82:fe:a7:b9:c8:ad:0e:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:F4:0C:72:E9:95:C7:9C:C5:60:4A:4B:BD:3F:62:E3:D8:68:F5
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:37:32:f8:e5:37:6f:42:ef:4b:53:3c:18:38:87:18:68:
         fb:d1:03:52:1f:dc:4f:66:b7:2f:ee:15:0d:49:0a:73:7a:00:
         dc:57:f7:d0:f2:fa:c9:31:1b:cf:9b:8a:ec:4e:d3:59:d1:bb:
         ab:79:5d:86:fc:c2:92:15:b4:b5:b9:8a:0f:52:22:0b:0d:d2:
         07:e7:f5:32:71:a3:8d:f1:12:c3:ce:89:71:45:22:65:36:9f:
         f5:ca:fc:3a:e8:e8:65:dc:b7:40:5d:b0:de:cb:49:82:c9:0b:
         e5:0b:fd:c7:8e:01:04:16:e2:d6:05:cc:2b:97:3a:f2:ed:04:
         bc:da:39:fd:55:49:92:50:a7:cb:a3:fe:d4:c2:6e:d9:3a:da:
         b6:5d:f6:72:2c:bc:c1:a3:2c:cb:cc:78:ff:41:c0:f7:6a:d9:
         19:51:a2:b5:07:ac:e6:0c:4c:9f:b5:7c:3e:07:3f:49:5c:4c:
         4b:e4:b8:53:a2:2c:f5:02:6c:4b:32:01:eb:94:4c:2d:20:34:
         85:b4:78:04:65:f2:a6:65:69:d4:c5:81:27:cd:97:5c:e0:b3:
         d2:d3:35:57:7a:ee:33:71:ee:a8:38:eb:d2:0d:01:8b:85:5d:
         f9:12:db:8c:d9:8c:48:f1:b2:8b:c6:85:33:31:c1:89:71:34:
         73:7e:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----