Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          OsDweqqCz2jRaA1gjNAb92MiNnX96Jo1CPpIRz73x7U=
Subject key identifier:   9B:05:24:A1:50:6C:A3:F1:44:08:1A:37:2D:04:BE:92:F2:1F:F2:17
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       0194BD8559B7C49E8188C39C81C89AB5C0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 18:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:20 +0000
Files and hashes:         1: 1N7fyWAFLqiuAOvuqkaJ6kmgObs.roa (hash: dbJokGrW1Qc74B16BSwJE8MZc4CWTzNJN2SzXHTe7ak=)
                          2: L-hKB8VZ5tko4nxi4bDbgmh0-v4.roa (hash: fv0DVT4i4BIwsnPH30MBmHsLcJcsIlzm3uQy5KfCIaE=)
                          3: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
                          4: fiaOnousA3w1k2Tm4l4eVVMuQvU.roa (hash: 8OG1yxGs0ekx4Dmt06+QBnp418Got1o3hjFg9PXzxDw=)
                          5: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
                          6: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: Inm8icrOsPtpgBVofy/vYKTHLALMHHOGcyQHPbIQg90=)
                          7: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:59:b7:c4:9e:81:88:c3:9c:81:c8:9a:b5:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jan 31 18:00:20 2025 GMT
            Not After : Feb  1 18:00:20 2025 GMT
        Subject: CN=9b0524a1506ca3f144081a372d04be92f21ff217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:01:c2:ab:17:b8:9e:03:8d:d1:0e:93:2a:
                    9f:f0:cd:1f:39:0d:b4:1b:6b:d7:e1:8d:2b:a0:4d:
                    99:96:d9:d8:63:79:c0:6f:35:cf:c6:af:85:f4:34:
                    59:92:7b:c5:51:30:94:25:3b:cd:b3:b2:bf:e8:05:
                    81:f1:2c:10:9c:1e:bd:2b:50:d2:c2:60:16:0d:52:
                    78:77:59:e8:83:70:c7:73:39:5d:ed:57:34:a7:37:
                    90:32:61:07:c8:97:79:7f:94:9b:10:a6:ee:6a:60:
                    f4:d1:0a:e2:ec:7f:29:c8:ee:6a:29:1e:4f:3a:a6:
                    e5:4f:64:8d:c8:89:27:ba:de:80:b5:5d:87:f0:b3:
                    88:f1:43:4f:58:70:2e:32:a5:eb:c7:44:b2:cf:ef:
                    3d:6f:d4:26:ba:01:43:34:af:f9:cf:28:2a:5f:4d:
                    a3:0f:37:68:f2:c8:62:0f:76:3d:d8:ee:e4:16:7c:
                    0f:a1:c6:e6:8c:6a:de:16:8c:6f:64:3e:de:c2:07:
                    c6:30:89:93:be:09:cd:73:3e:6a:3d:d2:ba:de:24:
                    73:54:6c:5b:ec:dd:88:ca:a9:17:0b:3f:6a:51:f8:
                    86:b2:8c:03:52:af:20:57:d3:9c:ac:76:a2:8c:ec:
                    41:83:9d:57:30:52:0e:1c:ae:ac:d8:31:0e:0f:e4:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:05:24:A1:50:6C:A3:F1:44:08:1A:37:2D:04:BE:92:F2:1F:F2:17
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:27:6e:c7:36:18:8c:0e:4e:a3:21:53:45:0c:ce:4a:e1:53:
         03:1b:71:16:68:05:06:1d:1e:d9:c0:30:d6:1c:d9:56:da:d8:
         d0:9f:bc:55:da:b7:a3:26:d1:89:d5:09:36:15:9a:8b:b8:3e:
         f1:07:ff:5e:04:06:b0:0a:d8:8d:73:c2:7d:92:d7:23:57:1c:
         04:5d:53:e2:c4:f1:cd:34:ff:1e:6c:d6:ea:da:31:34:80:4b:
         20:d0:2b:cb:57:e8:83:f3:07:ca:b6:cb:a7:78:50:3c:31:46:
         50:5e:69:45:39:61:a6:b4:98:5b:f5:8e:62:e5:6e:eb:a9:83:
         60:a3:58:fd:bd:6a:fc:1e:58:d0:58:0d:5f:84:d9:f8:c0:32:
         92:08:cf:f1:9d:cf:e4:c0:43:cd:47:d9:cb:d4:17:ad:b4:bf:
         a4:33:b3:fa:80:15:5e:46:0d:7d:d6:cb:27:59:67:8b:d9:e2:
         63:0d:8b:7d:1d:87:3d:e4:23:e1:ce:90:e9:6e:b3:61:56:8d:
         5d:8b:1d:5d:bd:a1:f2:3f:34:28:de:00:f4:a1:29:02:9f:f0:
         d1:bf:eb:02:c8:96:bc:48:1b:38:50:bd:59:bc:43:74:4f:b4:
         8e:bf:3f:84:4d:84:e9:1a:19:e7:59:63:eb:da:a1:4a:60:80:
         9b:ad:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----