Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          qJWSaKG2pR6sUn/IgHzqkG2z/PT/Wyh3+F4ygYwEnNQ=
Subject key identifier:   52:2D:F9:90:C0:08:72:6C:03:67:26:DA:E3:EA:FC:B3:CB:1C:8B:EB
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       0194BCA975E73073405BC64B86D82CF57497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 14:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:09 +0000
Files and hashes:         1: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (hash: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=)
                          2: T9JRBawWchbn8jON5Y0KsUANSlY.roa (hash: 7BHggFyR7wTe61E+5vWC0sJVPX1dUZpjUdh5hUQN4Q0=)
                          3: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: 1CGUPVI8dcEPDKYRFgjUVIQt6ErMS/SmCyP6kk6khNs=)
                          4: pHamM_FeTuziFQi2w75B0pezcGY.roa (hash: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=)
                          5: xeyOvAZB2wYubEBDAwwO-ACwssc.roa (hash: wLCrfhwnMuWinvjbmYmO6BBiu2MJDTwxPjX1u35nOMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:75:e7:30:73:40:5b:c6:4b:86:d8:2c:f5:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Jan 31 14:00:09 2025 GMT
            Not After : Feb  1 14:00:09 2025 GMT
        Subject: CN=522df990c008726c036726dae3eafcb3cb1c8beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:bb:d6:06:cf:4e:2e:15:4b:8c:cd:38:29:
                    f0:e6:4d:52:c7:bc:f6:df:dd:fe:10:5e:62:df:de:
                    91:d5:c2:8b:f3:5e:5c:1f:27:a3:ae:20:53:2c:e8:
                    d1:07:6b:5f:17:c3:7a:a4:59:c5:ed:8e:c7:da:8e:
                    3c:bb:b3:e9:df:cd:df:9d:bd:33:e0:f8:95:6e:20:
                    36:4c:96:25:76:06:e6:80:23:c7:3a:34:4f:c5:10:
                    0c:b9:80:08:e5:1a:33:7c:79:44:d3:46:36:c0:eb:
                    db:eb:2a:f8:ac:3a:21:29:b9:8f:05:d2:1e:76:9c:
                    39:4b:eb:29:4a:47:2a:9f:3f:8c:0f:a9:4b:a2:2f:
                    73:85:99:a5:79:8b:6e:75:7f:f0:fb:55:5c:8f:16:
                    27:a8:b4:81:23:71:04:1a:c4:9e:7a:58:69:1b:0a:
                    a3:cf:93:48:16:35:47:77:f1:80:e0:0b:f5:6e:4d:
                    a2:27:e8:dd:79:85:20:8f:b3:74:e5:e8:ef:de:15:
                    d6:f8:dd:c4:69:e9:79:e5:21:f1:fa:68:4a:2c:88:
                    7b:7f:f0:88:41:3d:13:ac:c0:85:b8:70:e4:b4:b5:
                    d0:ab:19:a8:2d:df:74:bb:b8:c7:19:c3:a1:fa:3b:
                    39:94:cf:db:ee:4f:02:55:c9:8b:3b:e9:c0:e6:8e:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2D:F9:90:C0:08:72:6C:03:67:26:DA:E3:EA:FC:B3:CB:1C:8B:EB
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:19:36:99:3d:a9:59:00:11:75:33:ca:97:cc:46:bb:80:b3:
         fa:e5:32:99:ad:2a:40:36:16:c7:b5:fd:cd:1e:82:fd:b0:19:
         8e:58:d0:82:b8:f6:2e:2d:86:a9:4c:ab:bf:96:02:a1:ed:ef:
         9a:56:30:f7:cf:37:77:b9:16:b0:de:1f:01:79:df:c2:62:7a:
         f3:f1:1b:84:87:ec:ee:6b:a0:d1:24:6d:bc:c9:4d:41:a8:ba:
         41:ba:fd:dc:cc:ac:f0:df:49:9a:4e:1c:bc:c4:51:17:45:77:
         5d:c0:86:b6:54:7d:c1:93:12:f7:a1:1b:3f:6a:80:50:b6:3f:
         9a:50:7f:a2:2f:8d:c9:cd:a0:ac:82:ac:aa:1c:3b:dd:d4:4f:
         be:4a:09:b5:bc:60:30:cb:9a:f5:b9:31:3e:8b:04:d1:6c:27:
         e2:04:ec:ca:b7:96:1b:47:77:04:e4:22:a3:9e:eb:da:62:21:
         b0:9b:ae:d7:33:3e:d9:a5:9e:ed:b2:b5:1c:bf:38:b2:53:a3:
         f3:06:23:f9:47:64:01:66:a8:2c:77:e5:fc:8d:3b:2f:dd:f4:
         2e:80:71:80:71:2c:c0:a2:b6:82:45:83:1f:37:15:2f:71:58:
         8f:b5:e4:92:13:95:54:89:62:8f:1e:a2:08:88:5b:3b:01:e3:
         e5:f4:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----