Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
File:                     CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json)
Hash identifier:          P2H1BjKhjPym6W8sdoJmI599FT1tSiPpK2px7lbATxQ=
Subject key identifier:   22:DD:B0:18:1B:7D:1C:E7:1E:A3:55:68:58:F5:54:7C:F2:25:6D:D3
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       0194BC05053728BABE94F9F4781A0249DB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 11:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:33 +0000
Files and hashes:         1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: 6Q5zP9fI2xBVkdRRVaXhL7tv6gXHF03RP7jCinzq6iw=)
                          2: E-D3ZGslYgKBnaQ36DuHk1Df9I0.roa (hash: C7/eant2Zx3rg9iNoRomHYyEK3sus/zcsayhmh6HDO8=)
                          3: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=)
                          4: NQv7xG2HegsRAk0B3c4ktJo8JxQ.roa (hash: WDmosHq+aj8SIOcSac5TwyKVIhb26O55aRX+Q1tovh0=)
                          5: XFfGj08np--Em5Z5kIc20cz3an8.roa (hash: 731ZgOzIZopYbaORYzYFZjPA2ROCuek/j9hLL8+uhPA=)
                          6: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=)
                          7: a8bu3wwbFC3JJsgsgbDTG3L_-6M.roa (hash: dT2RiFYSkJWE+wiiMfqAa9MFIN22sQbEhJ1uDQwikrA=)
                          8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=)
                          9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=)
                          10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:05:37:28:ba:be:94:f9:f4:78:1a:02:49:db:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Jan 31 11:00:33 2025 GMT
            Not After : Feb  1 11:00:33 2025 GMT
        Subject: CN=22ddb0181b7d1ce71ea3556858f5547cf2256dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:da:9a:e1:d2:d7:f1:99:7c:9e:05:9f:69:
                    d4:83:5c:ff:1c:48:51:f3:57:a4:e2:21:31:75:37:
                    3c:a6:e5:42:75:29:5a:94:bd:32:dd:c7:ec:25:77:
                    d4:a7:e6:53:dc:9d:f3:00:52:20:a2:34:2f:71:fb:
                    c0:7b:50:29:87:10:27:c3:47:67:a6:e5:12:3d:58:
                    39:c5:09:8e:1f:b1:01:ef:44:21:98:92:02:97:23:
                    80:a0:b0:40:fd:90:07:af:49:f5:ee:62:27:b6:db:
                    ec:51:36:41:ea:23:58:39:03:19:0f:6f:e3:bd:d9:
                    67:b9:87:b3:13:d5:e0:9c:c8:30:3d:30:ad:cb:10:
                    05:7d:14:ca:5f:59:98:35:3d:55:f8:6d:cb:4d:ed:
                    b2:04:67:1c:31:92:2e:98:56:34:03:3a:3a:0d:18:
                    ff:81:78:c7:4a:aa:41:e8:7d:af:9d:0e:9e:a7:67:
                    42:85:29:64:b2:13:d7:41:bc:37:d5:25:df:a2:17:
                    09:16:24:45:4b:ba:11:22:9a:0d:9b:3b:8f:e1:2d:
                    c4:51:40:75:ca:53:91:bc:db:b2:9f:e1:d3:11:00:
                    75:58:e7:98:40:a4:af:c3:78:9a:95:20:78:95:65:
                    6d:77:61:18:7c:5d:02:6b:39:c7:04:98:02:a6:c0:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DD:B0:18:1B:7D:1C:E7:1E:A3:55:68:58:F5:54:7C:F2:25:6D:D3
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:53:58:ea:2f:4c:a1:36:69:d9:bd:f9:fc:b3:74:01:c5:
         f7:75:78:00:de:75:94:bb:6a:ee:3c:04:fb:cd:6b:60:27:67:
         59:1b:ee:4e:59:de:ad:8f:e7:8e:2a:89:15:65:fa:c2:3d:70:
         4c:b8:79:47:c1:6f:29:72:98:14:fa:11:3d:0b:a2:02:d8:44:
         fa:56:02:75:ed:b8:ab:0c:a6:21:96:d1:3c:af:1a:86:a8:b8:
         2e:90:21:de:3a:44:a1:4a:87:fb:1b:93:54:42:69:57:19:0a:
         cd:63:1e:b5:13:2c:22:6b:f3:2c:84:6e:2f:97:55:a5:b9:97:
         a3:e5:c9:52:74:d8:34:c2:d1:b3:14:47:48:cc:53:d6:ac:79:
         1a:01:20:50:c3:a4:03:97:bd:5a:36:cf:2e:d8:1a:24:83:ef:
         8f:9f:59:fe:cc:a3:f5:3a:0d:99:db:fc:70:30:52:7e:4a:7a:
         36:56:58:6e:22:fd:3c:9e:27:9c:7d:46:ac:0f:f9:bd:bb:59:
         df:e4:b8:d8:fc:3c:24:ca:76:12:51:b3:56:b3:f6:17:5f:04:
         b3:fa:48:61:7c:e8:b1:92:c8:56:35:f4:52:f5:77:43:16:c6:
         d8:69:92:10:03:a0:fa:25:47:7b:93:03:ae:38:9e:5f:02:49:
         ce:fa:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----