Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File:                     NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier:          9g+uhOjeK6UVcVE5VvyZhv6yrovyS0waOcaZubZjv/s=
Subject key identifier:   B4:F3:C4:A9:67:AC:36:A2:D9:04:2A:9A:BF:B3:83:4F:84:F5:0D:E8
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer:       /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial:       0194BD4E50FB0AFB0EBAD2A1A505EAF5F656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number:          0CEE
Signing time:             Fri 31 Jan 2025 17:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:13 +0000
Files and hashes:         1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
                          2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
                          3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: srW3+w1O8U8OHxSfSNumbzCo/QWFTCc5gzT/kHgbquo=)
                          4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:50:fb:0a:fb:0e:ba:d2:a1:a5:05:ea:f5:f6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
        Validity
            Not Before: Jan 31 17:00:13 2025 GMT
            Not After : Feb  1 17:00:13 2025 GMT
        Subject: CN=b4f3c4a967ac36a2d9042a9abfb3834f84f50de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:ae:b3:f5:d6:c1:3b:ba:38:a6:a9:c2:f6:
                    de:5f:71:02:52:57:0d:3c:72:cd:8c:52:18:0b:17:
                    7e:99:e1:e8:ce:4e:30:fb:d5:25:75:40:af:e3:6c:
                    48:d9:44:05:a5:ee:fd:65:39:bc:ac:85:01:2d:81:
                    06:fe:76:04:d5:d3:52:9e:05:2f:d3:46:f5:8d:56:
                    de:1c:b7:6c:32:ce:d3:d5:8b:21:b9:d6:d5:e6:3e:
                    0d:19:fb:d9:12:b5:87:e5:4b:78:8a:ee:20:ba:6a:
                    8d:a2:87:91:cb:f5:fb:a3:d4:15:18:1f:d6:fb:89:
                    98:07:1c:eb:7b:af:7e:2f:47:af:6d:34:79:57:b0:
                    a9:c0:51:39:3e:e6:41:71:40:2a:f6:fa:33:c8:a2:
                    ff:0f:92:10:1c:38:7c:f8:11:c7:26:1f:e5:a4:e1:
                    b3:7e:e4:74:8b:0f:c0:2e:9f:6f:c6:b9:e9:ec:71:
                    f3:d0:1c:3d:d0:fe:34:c8:4b:60:60:20:0b:8b:bd:
                    5e:f6:1a:a6:80:70:bd:b2:73:11:3a:bb:7f:fb:3e:
                    e3:7d:94:e5:29:e4:be:87:4d:8e:84:9c:95:9c:eb:
                    49:e5:0d:c2:ed:56:97:30:64:ff:18:3f:62:37:cf:
                    66:9c:8a:84:c7:90:f9:88:d9:07:3c:25:0a:71:19:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:C4:A9:67:AC:36:A2:D9:04:2A:9A:BF:B3:83:4F:84:F5:0D:E8
            X509v3 Authority Key Identifier:
                keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:60:33:66:29:0f:c4:ee:a2:fe:3b:64:0d:4a:1c:b9:4c:
         81:d0:12:d4:63:2f:aa:6a:c6:a5:eb:2a:66:84:6a:3d:2f:9a:
         4b:fc:1c:4a:0b:a9:73:fb:97:bb:01:3c:7f:9f:91:c9:82:93:
         c1:7d:ee:ac:0d:d6:ae:ed:d9:d4:de:b1:00:a1:89:af:b5:83:
         2c:3c:ca:68:7e:cf:52:0d:43:c5:bf:0e:ba:70:69:be:2f:72:
         f8:81:ad:78:f0:db:9e:b0:13:5d:d6:5d:3d:48:9c:fb:cf:fa:
         a4:57:5a:4a:ae:9b:f6:42:cc:af:56:84:3c:d9:a7:e4:fe:7b:
         08:7c:a5:d2:33:9c:39:bc:fd:69:c9:fe:93:67:7c:85:9b:5a:
         1c:e6:fa:f1:e2:44:a8:25:cb:53:9d:9f:d5:62:b7:62:f8:4e:
         33:fc:72:ff:81:a9:a9:8b:4e:ca:4d:ea:e0:9c:56:a6:3c:6d:
         36:e1:40:7a:a5:93:0b:62:b6:94:8f:89:0c:b0:2f:99:4c:1b:
         37:fe:bd:5e:26:d5:a1:fe:cf:9f:1c:05:2a:f0:45:14:a9:0c:
         7d:71:c9:09:1e:54:a8:b7:84:80:80:02:d9:9c:ce:f4:19:09:
         74:46:8e:b4:b0:11:94:41:ef:eb:f6:1c:c3:0d:97:e4:d1:35:
         84:6a:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----