Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
File:                     Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft (raw, json)
Hash identifier:          utErJdQuweM1ypfAvO/ZNhn8jNYU+BWwLMhaaG8rFC8=
Subject key identifier:   2D:6D:65:30:A8:1F:3A:2A:E8:B3:76:72:4A:F6:0C:B0:74:9C:AF:48
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       0194BD858FD8766923E2ABEFE40B3B8A9FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
Manifest number:          099D
Signing time:             Fri 31 Jan 2025 18:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:34 +0000
Files and hashes:         1: Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl (hash: ucoI4or0F6Xr3KrDSrohuMaQ+BkzlnJGT78NCswEsYM=)
                          2: WYOXf_Zurm8-bWS_RYQJ3q7Ri7U.roa (hash: iOllh5gi/7wnwzUfRzCTrEG6FgLIkJkLCK4mhZ+VRkU=)
                          3: hzEl50X-HK9H3rATZ6GMdKA4sDQ.roa (hash: Qsefr5BUiMy2rqo2USmsjdMuNx9/rjIcX4pXPuOto6M=)
                          4: t1gHtFwa5agDSOfrfRir11uhmyo.roa (hash: YIC9w6VlHFB3KCLja0LdQ8JmLu/DL14I9GQCq+0Dsw8=)
                          5: tBwbvVkRx7tiigJvabZjuGdnpBY.roa (hash: d7Zp+BRTHnxt8s53ryw5c9y5CaJMgwW2OM5XwqLhxHk=)
                          6: tp85miaZEXw3Jo9EKI88rJNAxCY.roa (hash: w1A6qFijgoLv5j1rHfN1LVempKoIwt4pkO+GOzCoyds=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:8f:d8:76:69:23:e2:ab:ef:e4:0b:3b:8a:9f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Jan 31 18:00:34 2025 GMT
            Not After : Feb  1 18:00:34 2025 GMT
        Subject: CN=2d6d6530a81f3a2ae8b376724af60cb0749caf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:6b:54:97:fd:1c:7d:a1:58:80:5c:3d:e1:
                    54:7d:63:87:d3:1d:7d:91:da:29:c7:50:45:cd:af:
                    f2:b7:f7:25:a2:48:f5:fa:00:b5:40:f5:9b:02:6b:
                    7b:c8:cd:e7:f2:97:e5:35:df:26:b1:47:54:c0:4d:
                    12:aa:04:e2:52:dc:c3:37:47:f9:54:bb:9f:62:7c:
                    f2:87:a3:80:d4:48:a6:bc:82:7c:2e:71:38:77:e9:
                    4e:dc:08:14:96:3e:8e:08:99:94:01:f5:47:52:35:
                    d7:02:e1:51:42:d4:e5:6e:c1:52:70:58:2c:4d:22:
                    57:0a:66:a5:66:ed:cc:79:20:25:b0:bd:07:ee:a4:
                    f0:fa:05:c1:00:5b:4e:a7:3d:8f:d8:19:14:c1:fb:
                    69:e5:7c:d5:a7:1b:0a:79:d9:18:a7:16:0b:83:0e:
                    eb:a4:77:94:36:74:81:8f:14:83:63:b1:0b:60:bd:
                    1c:87:bf:f1:b1:87:44:7b:df:a1:f8:1a:07:6a:7b:
                    2f:ee:b9:77:7d:0f:6a:d8:67:28:24:b0:ff:3b:f1:
                    20:2b:f6:13:a8:00:2c:ea:4f:e5:c1:ef:0b:14:36:
                    05:ad:f4:dc:14:92:fb:e9:89:a9:fe:08:2d:64:92:
                    39:c1:33:43:ce:34:4e:53:e9:a0:65:79:a9:26:a5:
                    ef:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6D:65:30:A8:1F:3A:2A:E8:B3:76:72:4A:F6:0C:B0:74:9C:AF:48
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c4:24:73:84:08:8f:21:89:fd:5d:e8:dd:61:81:78:a9:b5:
         f9:52:bc:49:da:87:72:fa:a2:5f:3a:ae:3a:91:fd:c5:fe:e3:
         8d:2c:ac:5f:e3:63:56:85:f5:d8:b6:2d:f1:10:43:f6:a5:4e:
         06:59:36:ea:9f:27:17:e6:df:57:6d:dd:ec:00:c4:4d:bd:7c:
         29:2b:e2:fa:20:d6:33:54:2f:ae:f0:51:83:f5:25:e3:c0:3e:
         b5:00:6b:67:fc:eb:09:8a:7f:62:5f:55:f0:24:2b:65:96:e8:
         5f:4a:16:e2:9e:cc:86:73:71:36:87:77:fd:a8:a7:a8:c0:ed:
         46:bc:84:a2:e3:51:75:cf:84:98:39:73:4e:04:e2:79:ee:b4:
         45:fa:b4:a1:05:fc:2d:2d:31:f6:cb:b7:d3:4e:d6:65:21:09:
         39:87:52:3d:7e:1e:bd:de:43:5a:6f:af:b8:4e:5e:f0:34:f7:
         db:11:eb:87:8b:ff:15:93:1e:33:fe:f0:93:87:88:ab:ff:0b:
         0d:cb:87:dd:c3:45:dd:61:25:53:10:f9:1d:64:e8:cf:fd:d5:
         3a:94:5b:2a:5d:99:2d:44:f7:26:a7:2b:0b:e9:02:32:19:27:
         32:5f:92:22:5c:85:88:19:20:c9:bb:70:e8:08:b5:10:0a:68:
         2c:61:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----