Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File:                     J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier:          07fei1BKLlrXEKIeDaoqSJYhEOBagNQYT2qpTUfmpbg=
Subject key identifier:   0D:49:2C:F4:87:7D:60:EF:B6:CF:DB:E0:8D:2A:77:F7:51:62:5B:70
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       0194BC72EDFE577849B4B86F45964630CA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number:          097C
Signing time:             Fri 31 Jan 2025 13:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:35 +0000
Files and hashes:         1: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: xhVT/JcGfZYOoC1VfI05My3kp2DB4jikz4LblMa2xYE=)
                          2: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
                          3: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
                          4: WTHS0_mrkntFTwKYSZ523FW3dY0.roa (hash: KofyEyzWypys/rTtNM9UpTOaMnadl07Wa+WactOD2TQ=)
                          5: gYwIKw-xSLHcSjWk9Y0rdVBM4Hg.roa (hash: D/H2NTfVJPb6w7G//67beVKcW7TPtcjT3UnT0MdjXDw=)
                          6: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
                          7: xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa (hash: v6JdlRVd2u7tIbRYZCLJ9Bn+UkQd4MO8kZwoWQAa+WM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ed:fe:57:78:49:b4:b8:6f:45:96:46:30:ca:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Jan 31 13:00:35 2025 GMT
            Not After : Feb  1 13:00:35 2025 GMT
        Subject: CN=0d492cf4877d60efb6cfdbe08d2a77f751625b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:36:fb:86:f1:c1:16:7a:5d:61:9d:a1:13:
                    99:2f:93:6b:c7:be:48:78:55:d2:c8:ca:0a:95:d4:
                    a1:dc:16:ec:88:52:77:1a:85:79:9b:6a:05:d3:13:
                    51:c1:35:52:7a:3a:6c:9d:02:85:97:62:07:e3:4c:
                    13:5b:88:20:91:dc:eb:ff:e6:33:c6:8d:4c:47:aa:
                    7d:47:c6:05:c5:c9:93:7d:81:5f:f3:02:25:54:84:
                    cd:e5:cb:f2:d6:15:bb:85:6c:a0:89:d0:03:98:61:
                    72:ab:86:c0:c6:9c:09:a5:3b:07:01:cc:be:4f:fc:
                    ef:81:ea:8b:d3:47:5a:47:d4:07:90:34:78:fb:eb:
                    f7:20:54:2e:ca:d5:9b:88:45:59:a0:3d:42:fb:df:
                    39:ca:29:84:02:12:ad:6d:0d:b1:6c:e3:7f:52:d4:
                    c0:e2:35:c0:3c:ac:d4:67:e6:46:ee:21:3c:28:62:
                    5a:2b:55:cf:0f:b8:37:c8:39:ab:b4:fd:cb:3f:33:
                    22:1d:f0:da:6e:11:9d:1c:33:a9:6b:4c:f8:3e:0d:
                    60:a0:06:0c:e5:47:f9:41:e8:db:e1:cb:93:5a:4b:
                    c4:fb:4c:e2:1a:dc:fe:a6:bd:b4:f2:9b:90:e9:c2:
                    f6:5c:07:5c:bc:7c:13:dd:f8:6c:b5:57:53:df:ad:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:49:2C:F4:87:7D:60:EF:B6:CF:DB:E0:8D:2A:77:F7:51:62:5B:70
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:ce:04:fd:cb:39:49:35:53:76:8b:46:ed:95:55:55:83:
         3b:9d:af:c4:10:2b:5a:26:ac:3b:85:6e:19:e2:e1:24:7e:54:
         0c:da:d7:03:d5:fa:de:f1:05:6c:39:07:93:58:6e:7d:69:e5:
         c0:52:fd:00:17:f6:00:98:75:81:12:f2:19:fd:94:a5:f9:f3:
         56:3d:55:91:26:af:35:9c:46:66:55:1e:d1:72:57:62:47:44:
         93:f5:2a:2d:d2:aa:6a:56:7f:dc:98:2f:cd:b9:03:3c:44:77:
         ae:4f:86:5f:4a:3c:4d:23:1b:23:7e:5b:50:61:be:e6:e2:91:
         f9:9c:84:23:f0:8e:10:1b:c8:b6:df:6e:4f:92:d3:59:ee:ae:
         fd:6d:65:c2:dc:1e:fa:6e:1e:31:67:c2:03:ac:8c:22:5e:a3:
         e4:fa:f4:4b:71:49:b5:66:e4:c3:79:28:7f:87:61:1f:16:33:
         73:da:93:81:12:1e:c2:3c:2c:65:d9:5f:ac:62:fc:42:c4:b7:
         08:ba:9b:91:e0:53:2c:19:9c:29:18:62:c0:e9:1d:1e:64:15:
         63:37:5f:d9:73:e8:c0:e6:86:4b:dd:76:29:90:6c:1b:36:ac:
         83:8f:4d:22:49:cd:d0:01:21:cb:bb:51:cb:c2:88:53:97:d0:
         ff:a8:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----