Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File:                     IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier:          ReZmSJASU7XvtgxXtVOfFIfLpsW+m5xSTZ8c90MNRvY=
Subject key identifier:   37:71:72:51:F5:29:CE:62:81:8B:32:16:82:06:0B:B9:94:18:F5:1B
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer:       /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial:       0194BD4EB904F9E6887F8BDD2DA24C33E551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number:          1457
Signing time:             Fri 31 Jan 2025 17:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:40 +0000
Files and hashes:         1: 0CUp2g3cUdyWe_Az5wCdssS2c-Q.roa (hash: NL1Or6jemOw91U2Vzj6R9fsOqUVKNTZ6S7CODzQ/ZSc=)
                          2: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: gpk1OZmVUOiRq6ghiOhFY/k883gW4z2o3yfngj8OCwU=)
                          3: N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa (hash: bj11HyE9bQVpgK8+L49310uUI7++HSDAwFbYXm4t87U=)
                          4: bXnDK3FrjmreLx1RNLHjlK6yokA.roa (hash: 9KnhQYqvA+XwDxuEoTB3PjhKHhHecpLOEmyBwf4FrSA=)
                          5: ttxltNG2zQjIJW6GFa8ByUupTIM.roa (hash: X+Rp7cCbU+AQt/6HVOu55hwFlooIOfWp0xOq7PMcuDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b9:04:f9:e6:88:7f:8b:dd:2d:a2:4c:33:e5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
        Validity
            Not Before: Jan 31 17:00:40 2025 GMT
            Not After : Feb  1 17:00:40 2025 GMT
        Subject: CN=37717251f529ce62818b321682060bb99418f51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:51:90:50:a6:26:bd:8e:73:b6:17:64:77:
                    ba:15:73:88:3e:ef:4b:11:fe:9c:b9:80:7b:3c:c1:
                    63:1f:25:7d:82:cc:54:17:76:ad:ca:d2:d7:a6:f3:
                    31:ea:0b:ee:39:9b:79:6f:1a:c7:a1:7b:b3:fb:51:
                    24:17:da:62:10:56:74:7a:4d:f3:16:d3:a5:0f:be:
                    0b:df:16:81:60:d5:3b:a5:08:95:58:b2:6c:e9:03:
                    d8:9a:e2:7c:29:f2:b7:10:4b:ef:fc:06:14:7b:8e:
                    77:5c:0f:b2:67:70:01:62:38:dc:e6:ef:ea:68:25:
                    15:ae:32:09:36:ef:fc:43:f1:55:e5:b5:50:da:a8:
                    7d:a7:68:9b:ff:ab:ff:bf:d0:3d:ba:8f:b4:b3:91:
                    8b:44:2a:91:42:61:3b:ef:19:c9:b2:02:ca:6c:c5:
                    30:2e:38:75:35:cf:83:3e:94:c7:0c:0b:46:03:08:
                    f9:9d:9c:29:ed:98:50:58:6d:57:3a:d9:31:00:76:
                    8f:ab:34:dd:f8:c0:1a:1f:e2:5a:98:32:d3:e6:12:
                    d5:33:ae:38:39:af:02:e4:4c:44:96:06:6f:78:39:
                    63:f2:a6:eb:82:5b:f9:a6:f2:f7:1d:26:e9:2b:b4:
                    59:a4:39:fb:97:6a:20:40:d9:3a:07:2b:4f:95:44:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:71:72:51:F5:29:CE:62:81:8B:32:16:82:06:0B:B9:94:18:F5:1B
            X509v3 Authority Key Identifier:
                keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c0:35:cc:5e:d5:62:de:55:eb:73:30:7c:dd:24:ea:5d:0b:
         b4:9f:70:19:43:13:57:fa:d8:39:d1:b8:e1:81:82:c2:d7:bc:
         9d:48:07:4d:fe:9a:ee:84:07:b9:8a:03:fb:e2:44:a5:7d:89:
         f5:79:a3:c8:6e:99:35:a5:59:45:a2:06:52:c4:24:b1:a7:ad:
         0e:e7:4c:95:f0:78:e4:a5:cf:b6:67:43:ab:49:08:b9:11:87:
         79:5d:d3:42:63:ec:9a:b0:50:14:99:43:46:a8:96:0e:5f:8a:
         66:18:13:7b:10:45:89:19:ee:0d:52:d1:3a:f2:1d:7f:1d:17:
         ad:a3:89:91:2d:92:82:8a:d4:8f:b8:6a:43:8e:4a:6e:43:9a:
         46:b1:62:fc:29:cd:da:78:e9:23:53:bc:40:dc:bf:21:2d:97:
         e8:40:51:0c:38:12:86:14:60:c6:8b:a7:98:40:2f:b9:cb:f9:
         6b:11:4d:5d:5d:21:8d:19:c4:49:a1:9f:4d:8b:ce:8c:d0:46:
         15:0b:c7:5a:a9:4f:95:d3:74:a6:88:32:35:70:d1:0a:de:a6:
         be:8a:2f:0c:ea:71:84:d3:c0:20:62:8f:9e:8f:93:74:50:e2:
         95:60:70:d1:b4:91:fd:1c:78:d7:5b:93:51:96:48:1f:68:cb:
         94:7c:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----