Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          PoHMNaAAmacPG+vIJbJuQGjnLaNod+v+sQ8Fa6Tv/v8=
Subject key identifier:   9B:D1:79:F2:A2:F6:91:89:B5:26:E8:D0:C4:FD:D2:F1:A3:12:84:BD
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       0194BD857600D88667C4BF912B7C3D170F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: 99yZKUQY9ExGgKTj0L9E7tksuy/5Sdn9pkT9CO2Mcks=)
                          2: GkXcWKv2tiZbmRFso5KDAtIlFEs.roa (hash: qBk0djYI/QNSD8TA0vX6gS28tOn4bjIOUEqnaYwDuO8=)
                          3: MAzNFV2te9n7kjEaFpStK8vBowc.roa (hash: cw6Ks/U2S63sovwgOc3pI9cS6N4rqlfzqVdKZqK6qIU=)
                          4: jmKQUYSEuZIWnZkjgKqeurLJKlA.roa (hash: ubeUqXL5MrFy3GKLg6YblSSTGgynKbrvwUY5fbq4vzw=)
                          5: si63heC5AIvLLejmiH4SUxw44s0.roa (hash: A2b+++OovlxutbnaWL8WBqlzNLX6SyYHAUqNmWE0KKc=)
                          6: tzI-3RvxZseZ0auE1vTr_8vXlHs.roa (hash: CiZ/fhpSU1BnMxFu5Ur8z7I7FFKUZ6D5j7i0HG/zpqY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:76:00:d8:86:67:c4:bf:91:2b:7c:3d:17:0f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=9bd179f2a2f69189b526e8d0c4fdd2f1a31284bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:c2:51:23:29:87:92:23:c6:55:da:5c:5b:
                    9c:2d:ac:90:5f:1d:7b:42:86:a3:2b:83:56:c2:24:
                    aa:33:25:37:ff:ef:43:5f:22:a3:62:b6:eb:e5:7d:
                    63:63:10:c7:ab:11:eb:09:f3:a5:4e:af:a7:47:57:
                    a1:20:99:58:36:59:8c:0e:d7:03:b5:87:d2:5f:60:
                    37:fb:13:cf:04:31:ff:02:b1:dc:9b:68:48:b9:21:
                    f6:5a:43:d8:13:02:51:40:a3:dd:ba:78:9a:f4:12:
                    36:a2:80:cc:1b:a9:7f:ab:24:7b:d9:8c:78:c6:ef:
                    4b:e4:b1:89:2e:19:87:0e:c2:b5:c0:68:29:aa:36:
                    7b:b5:c2:47:81:19:5e:92:4d:a2:c3:1e:2e:52:a3:
                    fd:c4:a7:af:9c:6f:75:ff:b6:5a:21:f9:47:82:31:
                    b1:52:e9:85:b3:1a:bb:c2:1d:6f:2f:07:62:b7:05:
                    85:14:6e:dc:31:38:66:18:3e:a8:30:16:f2:60:a4:
                    72:56:8a:1d:08:c3:21:7b:bc:98:52:72:de:9d:bf:
                    62:63:c6:27:d9:ab:b6:af:15:d1:8a:eb:7d:b8:7f:
                    2f:74:33:71:70:4a:b5:56:66:bf:88:58:3a:f6:ec:
                    c8:3a:ed:1e:62:a0:b1:54:0f:53:9c:43:92:c8:52:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D1:79:F2:A2:F6:91:89:B5:26:E8:D0:C4:FD:D2:F1:A3:12:84:BD
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:87:3a:05:47:63:f4:7d:26:81:0d:2b:1f:2d:03:85:60:15:
         ae:1a:0a:d4:f0:de:28:da:76:bd:36:64:87:fd:34:e8:ac:96:
         32:c3:33:40:ae:39:aa:f5:b0:87:df:9b:18:d2:7a:f8:ea:79:
         2a:ec:ec:dc:98:b8:cf:36:55:4b:fa:cf:1c:af:55:61:6c:0e:
         c4:f2:d7:8b:c9:ba:3c:50:e7:eb:45:73:33:bb:ce:a6:b5:26:
         21:c2:35:10:3f:0c:1c:a6:a5:63:bd:a7:d6:73:74:e7:e7:04:
         da:64:3f:89:3f:7d:27:c5:1e:ee:9a:e1:fd:a8:cf:0c:61:ad:
         12:70:f8:25:3e:37:f6:55:22:84:32:ca:6d:80:c4:f4:d8:91:
         db:d4:71:75:5f:39:d9:57:46:35:5d:86:40:5c:f8:85:13:99:
         67:1f:52:74:fa:8b:d7:ca:5c:85:88:68:b7:f4:e4:82:a1:15:
         aa:57:7e:a4:f7:ae:b3:e7:0a:51:a8:20:c6:62:ff:63:24:af:
         28:f5:02:b6:3f:45:82:67:eb:8f:6d:33:7f:b9:52:23:cc:41:
         4e:77:ee:bf:32:75:04:65:fb:4c:69:5b:b9:7d:37:d8:4b:bc:
         6e:d6:6d:33:11:49:65:87:3a:c9:81:58:55:bf:6e:0a:39:9d:
         2b:1a:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----