Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          mN1rNvdCJRp45rIHmv4fTCPNhcX2ISy4s1DkKM2E7Vk=
Subject key identifier:   79:47:B3:F1:17:A1:45:62:B1:36:7E:63:56:8F:16:78:21:96:E9:FB
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       0194BC730153B68970C898FF0CFA992334DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1035
Signing time:             Fri 31 Jan 2025 13:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:40 +0000
Files and hashes:         1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
                          2: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
                          3: gdv0H1VOQqEC1g3NPKKSe4k3m8c.roa (hash: SQr6HXuQcMmwRyJVvHRUD8exv8UImT2IUgeTeEYqV74=)
                          4: x5P0EDTdVktqZKkEboWB0PM5bas.roa (hash: r1ZTmgOlTkgzyPjFRQu4X4TsA76Y2Iw9iuXpWXvKbw0=)
                          5: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: FLimjnwQp9lNFd9lTcmR2nrymY5d53/QFpYaTwa5Jlw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:01:53:b6:89:70:c8:98:ff:0c:fa:99:23:34:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Jan 31 13:00:40 2025 GMT
            Not After : Feb  1 13:00:40 2025 GMT
        Subject: CN=7947b3f117a14562b1367e63568f16782196e9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:c2:74:8e:b1:58:95:ec:18:fd:d5:19:a9:
                    1c:d9:fa:00:4e:0e:54:43:12:60:ec:2f:fa:f7:30:
                    b2:76:85:f8:c8:1f:05:36:7b:e6:52:80:eb:81:0f:
                    de:67:6e:9d:db:b0:39:f7:82:42:2b:0e:e4:43:dc:
                    cd:9a:a7:82:35:9d:81:7a:14:ae:60:9c:d5:59:79:
                    3c:fc:73:3f:b7:60:cf:5a:6c:1b:b0:98:15:49:c4:
                    56:02:7a:dd:3a:63:8b:94:19:a3:c4:cd:be:c8:d8:
                    4b:16:56:4c:ff:50:b1:5c:ef:64:72:9e:1e:1e:9f:
                    a0:2a:dd:3b:aa:2b:49:5b:b4:79:23:94:1e:e1:75:
                    ca:13:ff:4f:2f:40:cd:35:73:79:ae:40:5f:9a:17:
                    67:e2:15:1a:a2:f3:d5:b5:2b:fb:ce:4b:43:17:8c:
                    db:0c:ab:62:fe:2a:d4:fe:f0:48:00:f1:d1:24:39:
                    4c:ac:fd:3e:ce:2b:0a:ed:71:de:8c:57:fc:1b:a3:
                    32:51:33:ec:57:38:9c:29:8d:df:1c:7a:07:ae:cf:
                    ca:26:ef:59:94:0e:07:36:ef:b6:b7:0c:6d:07:70:
                    82:db:81:be:2b:75:b2:21:7f:c1:76:78:e8:7c:f5:
                    56:91:e8:85:45:5c:8f:bf:8d:90:fa:f5:75:1d:b8:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:47:B3:F1:17:A1:45:62:B1:36:7E:63:56:8F:16:78:21:96:E9:FB
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:31:0c:6b:8e:50:17:81:87:6e:60:e9:57:b9:bc:94:fd:89:
         04:a2:03:a4:2c:0b:50:76:c3:2b:0c:0a:6d:81:7e:e5:3f:ce:
         58:9d:eb:8c:39:9b:a3:3c:25:2b:02:ad:f7:21:6c:4c:27:82:
         16:f0:dc:d4:8c:43:fc:a8:88:df:11:c8:73:c3:06:31:87:18:
         0e:4a:6c:b1:08:1a:0c:13:ea:08:31:78:49:7f:00:76:55:69:
         53:1b:b1:69:83:1d:ce:ba:e7:09:2a:83:f4:06:23:a5:67:48:
         77:41:17:9d:23:c0:28:ca:3a:a2:f3:ca:6c:dd:3f:0d:e9:22:
         fb:ef:af:7a:d7:ca:4a:c3:bf:be:b0:bf:c5:72:f2:07:b7:4a:
         75:9e:07:f5:00:e9:76:7f:9c:5e:2b:66:6a:18:40:13:58:14:
         b8:42:07:e0:c9:fe:59:45:6d:e8:1f:3d:31:76:3b:6c:37:42:
         26:ca:ab:96:01:b2:5d:4f:89:80:99:7f:a5:61:5a:62:5a:c1:
         72:3c:4c:31:04:b7:3e:bc:91:5f:ff:81:27:e7:92:3b:bf:26:
         dc:3b:4f:cd:7d:00:5d:dc:49:5a:42:8b:b4:81:b4:dc:8c:7c:
         a1:f3:0a:21:07:4d:ae:90:42:96:fd:cc:d2:17:4e:1f:76:a9:
         61:64:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----