Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File:                     KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier:          gmvQLrRId3E33MXejc6lvPn9mkF6Kq+tY/DYDAgYYPg=
Subject key identifier:   54:02:EF:EF:6E:DB:4E:DF:AE:EC:63:0E:75:8F:4F:DE:19:6B:EB:80
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer:       /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial:       0194BC04B7202BE983FBDFDDDD4628ED4EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number:          0BF5
Signing time:             Fri 31 Jan 2025 11:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:13 +0000
Files and hashes:         1: 1-uQE08VmMWMxSGInQ76da1_06s4.roa (hash: AVUFeAYeFlG4FX7lon2MdsLDY6fRmsa85Mps6Ye2AU0=)
                          2: AAVumEyDo4vSmxGEsGZbuSi_0ag.roa (hash: n9fAedZpkAhFHxrX5cEdZUwK1t0cG+4HsNJUVGnBPMw=)
                          3: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: 0ZeB/vaH/5AdWq0dKEnfFhP5UNTHah5abEX1kgIwJb4=)
                          4: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
                          5: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:b7:20:2b:e9:83:fb:df:dd:dd:46:28:ed:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
        Validity
            Not Before: Jan 31 11:00:13 2025 GMT
            Not After : Feb  1 11:00:13 2025 GMT
        Subject: CN=5402efef6edb4edfaeec630e758f4fde196beb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:e1:df:a0:3c:9b:86:9a:db:5a:ae:4f:cc:
                    88:09:2f:83:26:1f:57:3b:79:4a:9d:d8:4d:eb:03:
                    76:8c:68:96:17:18:de:73:1f:14:9c:d6:fb:5f:61:
                    f2:bd:47:f7:78:b2:ef:90:10:14:81:f3:f3:62:e0:
                    78:3d:ad:12:ff:41:e8:32:b2:08:ca:1b:54:1f:5f:
                    db:d1:d0:9e:be:d5:05:7b:fe:e0:a1:c1:03:de:e9:
                    01:e7:92:dc:22:da:98:a8:65:87:53:7f:c5:93:e1:
                    75:ac:33:58:56:1e:56:27:25:78:84:c2:9b:48:eb:
                    a8:26:07:c5:61:d0:12:c2:49:bb:3a:06:eb:b9:69:
                    ad:7c:90:1d:bf:65:5f:83:44:51:7d:e7:44:a3:f1:
                    de:43:e3:13:75:d0:0d:0d:a4:0a:2d:27:22:a2:bb:
                    9b:80:9f:2d:2e:92:c7:93:3d:27:22:2b:d8:65:10:
                    71:12:d8:de:0b:98:97:dc:ba:b7:6c:f7:e8:d7:9e:
                    43:2f:af:3b:35:d4:f4:8a:ec:41:d7:ab:52:39:e5:
                    ea:21:3c:9f:4d:3d:9a:b5:74:b2:c8:a4:2b:c1:81:
                    83:cc:ac:5d:0d:6b:4e:22:50:55:35:27:b7:cb:63:
                    5b:29:fb:c5:c8:41:e1:a6:93:4e:6a:79:2d:ee:c0:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:02:EF:EF:6E:DB:4E:DF:AE:EC:63:0E:75:8F:4F:DE:19:6B:EB:80
            X509v3 Authority Key Identifier:
                keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f1:a5:88:67:d7:35:53:0b:43:c8:c2:2c:79:38:26:5c:14:
         dd:56:bb:60:f8:d4:5d:ad:3d:94:4a:2b:6a:c0:43:dc:98:d5:
         90:f3:14:f4:66:6c:44:6a:34:12:ff:6c:7a:55:cb:56:4b:3c:
         94:65:6b:c2:fb:74:22:78:6a:02:8e:ec:ae:4d:dc:34:36:e3:
         2c:cf:82:43:cb:d9:d6:23:4c:76:88:46:22:d6:64:2f:03:08:
         f5:7d:cd:e3:64:48:4a:ef:9f:07:16:d6:00:0b:81:64:8c:65:
         40:7c:ca:33:8d:b5:e3:00:e9:16:65:bf:a9:c2:f4:6b:22:f8:
         6d:6c:a9:6f:13:a5:f0:bf:4c:d4:50:34:ae:e8:22:76:80:d0:
         59:b9:fd:16:bf:90:61:9f:2e:2d:d7:9b:c3:7b:e7:a6:5c:17:
         ba:d4:8f:35:2d:1c:40:2f:29:a5:ac:64:95:75:63:89:18:81:
         4c:c1:3d:35:2d:5d:6b:82:c4:ed:18:1a:4c:0a:f2:f9:86:66:
         dc:b1:b3:e9:e6:4b:95:e7:c8:b1:dd:e2:99:b7:5a:eb:49:51:
         23:86:bf:7f:37:c9:8b:e0:ff:2d:54:8e:0e:9f:9f:dd:63:9e:
         1e:0f:70:fe:cb:a9:98:08:b8:28:68:40:09:a1:c9:5b:74:4d:
         ca:17:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----