Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File:                     lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier:          4BpQDB2RPlVk5LUyxbMi2a6e8CZZMID1XFGrtFMB1JY=
Subject key identifier:   DB:7D:62:6A:AD:6F:7D:A2:C7:F4:ED:E7:F0:31:33:68:28:BE:D8:5A
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       0194BC72B917E24DD17545AFF56CFC57795B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number:          0D06
Signing time:             Fri 31 Jan 2025 13:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:22 +0000
Files and hashes:         1: 0YppZtvRSXBHB8NFrLn_rzdM4Wg.roa (hash: AIX2Owt5viXo6Wp2eQTWR2x2rHaX/2g8xn17pbf1zi4=)
                          2: H0U-Km3rz_YtidSX7xAdJ-A_RzA.roa (hash: L4ck5kUvwk5NkXR5fk3e/8692feGx3cZZTXMDkDHo6o=)
                          3: LaP9yZWFLbz-vA6yy7WQjmvmnXk.roa (hash: dSsBDcLcDlWyNXwHKuTffodeoLPC9SNQ0Byy4wB2Z1w=)
                          4: O9yiQLVEBd-NcJHF-CtuMWuUQcs.roa (hash: 9tK+SkxoqMXZGYXgh9to47Jr0S1+VU20uWG/tkGOBQ0=)
                          5: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: J6MQdNV6OvXQrArBWpByq4SX3ls96CSTzDCn6AoFEXg=)
                          6: rB9a6It_BI51LShKQfWu2z_YkjQ.roa (hash: qUj3zw/5k5BNU4OTRP94WfAlL8VyYv94SZAd0gHdXDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:b9:17:e2:4d:d1:75:45:af:f5:6c:fc:57:79:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jan 31 13:00:22 2025 GMT
            Not After : Feb  1 13:00:22 2025 GMT
        Subject: CN=db7d626aad6f7da2c7f4ede7f031336828bed85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:1f:bf:6f:c1:b8:ec:1a:ea:f3:96:95:a1:
                    f1:e6:52:df:c9:d5:16:62:b5:1b:a7:d9:6f:c5:b3:
                    c1:45:8a:aa:87:32:30:3d:37:fb:18:2a:a8:5e:08:
                    ac:50:84:21:3d:b0:a0:6b:65:87:69:e6:6f:0d:dc:
                    81:b8:dc:3c:8f:6d:3c:f7:73:99:29:91:73:1c:a5:
                    7d:83:c7:19:cb:40:95:1a:6b:22:62:05:4c:0a:7d:
                    b5:ca:ef:90:7e:64:f3:c1:66:56:b4:11:19:59:20:
                    2f:7a:d4:97:41:72:dc:ec:75:b4:e2:73:95:83:8f:
                    58:2f:01:98:f2:ee:20:de:ad:9f:f5:00:04:a4:01:
                    f4:aa:9d:e8:95:d0:ef:f6:04:06:bc:be:38:87:65:
                    15:ed:ad:98:ea:43:ff:a9:53:ed:e0:8f:91:3c:67:
                    95:9a:30:2b:d6:3f:7b:bc:61:33:e8:06:31:2e:6d:
                    cf:1e:b5:bf:13:bc:45:7c:4e:ff:0d:47:f3:fb:fe:
                    53:09:33:b3:93:d1:1b:44:4e:d5:6c:a7:8d:4a:dd:
                    e7:78:a1:3d:83:b1:58:72:35:38:5f:c0:5b:5e:d2:
                    29:3e:03:0c:db:6e:ca:c2:d6:b5:99:f8:ce:07:e5:
                    00:b7:45:18:53:58:26:98:71:50:2c:9e:ae:b9:63:
                    3e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7D:62:6A:AD:6F:7D:A2:C7:F4:ED:E7:F0:31:33:68:28:BE:D8:5A
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:ec:9d:8d:24:b6:67:8b:4a:d4:a9:d2:cf:d1:cd:d4:9b:
         e2:6d:4a:be:bc:30:bb:22:c5:e2:f0:e7:17:f7:f7:b7:67:2f:
         df:85:de:36:95:92:c0:87:49:da:07:b5:64:05:ca:26:80:1e:
         37:bc:f8:df:2a:22:80:3e:9b:f3:c4:d1:68:d4:8d:1d:15:b7:
         cc:82:11:f8:21:35:64:65:f3:5d:55:d3:4e:dd:bc:13:d2:f7:
         d9:dc:93:ee:16:0f:86:d8:49:a3:11:12:6b:f9:3e:f4:92:a8:
         aa:07:50:d4:c3:31:bd:f5:84:32:23:f5:ab:54:ae:41:1f:dc:
         2e:37:ef:52:aa:c1:79:1e:72:78:c2:92:7e:a2:fd:43:7e:9d:
         e3:5a:22:a1:6b:c1:40:4a:4b:e0:79:f7:22:5e:a9:30:e6:3d:
         8d:d7:5a:55:f6:8e:74:9d:9f:29:b4:e2:63:ed:c6:1c:55:f0:
         3f:53:7f:fc:c1:22:e8:4b:d6:30:bd:0d:6f:a7:80:ef:59:d4:
         b4:66:e7:84:66:d2:53:7f:f8:f3:2f:43:3c:04:7e:be:71:97:
         fd:0a:17:0e:9e:cc:de:16:71:3f:37:2d:9f:02:ca:f7:31:3d:
         e6:0b:c1:48:96:28:2d:d1:69:5b:6e:ee:b5:97:1d:fb:88:fd:
         4e:bc:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----