Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          szC+LDOfWr/yLBxRarVGCFHh3Q7P3Wfa0faI0IQpWE0=
Subject key identifier:   22:63:3A:93:FF:75:6F:F6:9C:07:F0:6D:D5:2E:22:68:1F:37:B3:04
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       0194BC73158D9796454926A81162B8DE8F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          08E7
Signing time:             Fri 31 Jan 2025 13:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:46 +0000
Files and hashes:         1: 2bwoacVhn9Ey8-WA6HPqgOWaS3w.roa (hash: +4RKvBlDgq1ptS9Kf/qX9i6nHjxZCbfdf3DtkVyJdE4=)
                          2: OFc0yBZFy4Wa20RcLrHQGW0n8Z0.roa (hash: TB30ZCImx4FabUXsP6FrJ/8xR1ebGEeWXJhQyL3afw0=)
                          3: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (hash: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=)
                          4: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: xRTyw/xDCUqO1tLBYbMLAruzZVi4C8zlaS4JEzsoxDw=)
                          5: thsewX5m5QEbqC1hk05OepLePSE.roa (hash: Qec8TVM/3O2FwTtHE6+SXRB/S0VWZFEK7seQA4WOq3A=)
                          6: uZ5GJPrp9SFd4Iq3FGcL7RdiaHc.roa (hash: qgD6SLmZc9P0p+V20mf5ZvuX3cLkvcDCzUTLrsNawj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:15:8d:97:96:45:49:26:a8:11:62:b8:de:8f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: Jan 31 13:00:46 2025 GMT
            Not After : Feb  1 13:00:46 2025 GMT
        Subject: CN=22633a93ff756ff69c07f06dd52e22681f37b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:f8:b9:92:9a:24:8b:39:48:ac:7a:ec:09:
                    f0:5a:17:56:f5:ca:7c:bd:ba:07:29:f8:76:de:f1:
                    8d:9d:59:ae:80:bf:09:28:f7:9c:74:19:fc:2b:41:
                    fe:21:6e:f2:f5:94:87:d6:ad:4b:99:40:3f:0c:15:
                    d3:54:c3:90:3c:7d:8c:4b:37:2c:bd:19:6f:01:7a:
                    ef:4e:29:c2:21:34:79:2c:8e:26:24:7b:e1:57:70:
                    42:c8:d4:d4:01:57:e6:0a:8f:84:cb:12:08:3a:10:
                    15:5c:e3:8a:0f:6a:6c:7f:b9:85:8b:51:6b:a1:ee:
                    5c:de:8c:a3:40:4b:99:45:8e:37:05:1f:8c:62:7e:
                    ad:05:6e:1e:4c:e0:63:de:6a:f4:e4:0b:32:b5:e5:
                    e3:73:f2:94:d1:e5:05:8e:6c:cd:e8:48:35:9e:58:
                    c8:79:1d:d8:ae:08:95:71:e9:b6:24:44:1f:bf:27:
                    4c:63:65:29:89:35:56:31:45:a5:6f:03:c6:12:09:
                    c9:05:89:75:b3:93:68:ee:e2:31:31:47:d2:0a:dd:
                    2f:ae:5b:b2:21:46:6b:eb:9f:1c:39:9b:a3:0c:10:
                    20:2d:71:40:6b:5c:ab:f9:b4:02:79:46:d3:0a:64:
                    fb:ba:5a:a7:4e:dc:15:26:44:de:b6:1c:a8:58:a5:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:3A:93:FF:75:6F:F6:9C:07:F0:6D:D5:2E:22:68:1F:37:B3:04
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:0a:78:33:f7:cc:11:2f:5e:b8:8d:8b:69:be:43:96:27:
         b0:e4:06:d0:5f:1b:62:46:1d:c8:ab:f3:45:7f:54:a9:36:4a:
         eb:d1:d3:b2:9f:c8:92:14:35:a6:5f:6b:b1:f7:7e:f7:70:6b:
         93:93:91:f2:2f:b2:6e:ad:7f:3e:8e:31:22:87:74:8c:b6:50:
         ae:46:07:97:fd:98:8a:f0:1b:90:dc:61:8d:0f:00:13:a6:25:
         74:50:a1:b4:39:29:73:ad:28:1a:cb:06:f9:cb:69:da:bb:6f:
         06:87:67:81:1b:76:4f:7c:7b:52:18:62:6e:cf:39:0f:74:2f:
         00:9e:57:9d:bf:4f:89:0d:1b:85:ca:9a:38:92:6e:64:a1:56:
         cd:15:60:3a:d6:a7:61:27:af:59:7a:91:67:9d:2f:07:23:a5:
         b9:28:0e:dc:9b:3b:ab:65:64:76:4e:7a:95:a1:5b:a4:f9:54:
         ba:d4:f6:90:0b:c6:2a:ca:20:fa:ca:90:4e:1e:89:1b:0c:91:
         5b:46:3b:9e:f7:e0:23:2e:e1:b9:ac:81:b9:64:e4:4a:cb:c4:
         b5:8d:fa:63:3a:2f:d5:48:02:1a:c7:74:ec:34:0f:99:77:5f:
         b9:61:5b:20:2e:a2:0a:54:1d:32:34:85:c7:9c:17:f3:8c:fc:
         11:f4:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----