Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
File:                     2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft (raw, json)
Hash identifier:          EfwwZjwHfmhx9iUws78KJ5IUGDrLzC/AhT//HROxQCk=
Subject key identifier:   DC:37:74:95:7D:8B:E8:28:E7:CA:71:DE:4F:01:C7:D8:90:B8:5F:F1
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Certificate issuer:       /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial:       0194BD17798A0655BB66D4ECD8065E5B0020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
Manifest number:          0B4C
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl (hash: weWW5Na4m4PQKNQ4Jx31XOMwEBiaqYuVyAdoOoCnnsQ=)
                          2: GhbIbk50hv6g93dh7hGhzK6K_74.roa (hash: nXi3Gj76e6GTyqlSijwexlGEZ4aKaxuj/QihrtfAHS8=)
                          3: R5r0xeVYQuyhFWywaHju63NvX88.roa (hash: gil6oFrijLp6JqgDOMjfduAOivvAur9Q9eunuVq1Ysg=)
                          4: TofwY-R4zO7hCFwhNRcFqFccDIA.roa (hash: CO89XYgmv4EUpm6JNaIOn/T7FUsKcLGJGFWRoloHQXo=)
                          5: kEveC8WkpMXtAhCjQYal_7N8cqU.roa (hash: 36t2IiG5a0ru6GNWxSIKI2twOH4WabuzXbDN7PDUMCw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:79:8a:06:55:bb:66:d4:ec:d8:06:5e:5b:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=dc3774957d8be828e7ca71de4f01c7d890b85ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:a7:58:b4:72:43:3d:f3:c6:53:cc:e8:1f:
                    20:a1:c1:0a:d0:30:c3:26:52:eb:db:d3:08:e5:0b:
                    a2:4e:2a:83:8c:c7:77:e5:8d:fe:0a:41:b8:cf:c0:
                    6d:79:3c:f0:a7:da:64:e9:15:62:7b:bc:d6:47:12:
                    ea:e0:71:4c:ca:ae:0b:d4:c9:45:57:f4:9b:d6:b3:
                    d6:1a:3f:41:77:b9:00:dd:ec:59:eb:2c:0a:10:7f:
                    56:14:c3:89:e8:fe:e8:97:9d:ec:17:72:a6:6e:06:
                    55:c8:20:71:4e:87:9a:82:42:8c:89:f7:d2:67:0f:
                    c9:3e:4d:4d:a9:13:1c:2d:c2:25:cf:de:fb:4d:82:
                    7b:d6:31:67:d4:88:fb:c2:da:58:00:71:58:83:97:
                    58:f6:af:ae:96:e3:28:d9:75:9e:ea:cc:94:0b:e8:
                    44:15:92:66:4c:ae:b7:bb:d9:b9:67:fa:54:93:88:
                    f6:c3:cd:84:7b:0c:49:25:4d:f7:79:c9:3e:8d:c9:
                    e3:fb:97:37:1a:50:e0:4b:3f:4f:06:7c:b8:53:96:
                    90:80:7e:f0:9b:dd:24:47:a0:29:74:c0:88:f2:1c:
                    c8:de:f3:02:be:4e:22:e9:16:4d:89:25:1e:29:dd:
                    60:ff:a6:65:39:f8:50:34:5e:bf:ab:f0:cb:92:2a:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:74:95:7D:8B:E8:28:E7:CA:71:DE:4F:01:C7:D8:90:B8:5F:F1
            X509v3 Authority Key Identifier:
                keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:65:03:0b:17:42:59:29:6d:ae:cf:5f:4c:ff:da:08:0d:
         69:a5:76:17:80:23:12:b4:1e:08:16:6e:0e:ec:08:37:ed:61:
         ca:bf:d5:5e:f3:bc:dd:12:de:71:d7:90:6a:8d:50:a2:51:9c:
         62:4b:7c:84:0a:4b:7d:53:51:6c:fa:4a:2f:26:18:22:a5:c7:
         93:20:18:8b:5c:f4:ef:98:b7:17:45:cf:87:b3:a0:1c:92:7a:
         20:aa:31:79:6e:e7:5d:e3:34:5d:8d:33:f3:2c:36:48:e3:03:
         10:bc:87:31:2d:6a:d6:6c:5f:32:0c:49:d7:07:95:fa:2f:7a:
         f9:51:1d:d1:c2:74:ac:fe:92:38:d1:dc:56:8c:05:7a:2c:e9:
         7c:91:7e:a4:bf:c2:9a:1d:85:20:f8:14:ef:df:22:c0:62:22:
         c8:08:be:e3:f9:1c:8d:85:2e:ec:07:9b:9d:4f:92:58:d6:41:
         d9:19:2c:ba:f7:37:9c:61:bb:6d:ef:f0:45:ce:d0:f0:eb:47:
         c6:a4:24:ae:1c:91:a5:5e:37:e3:04:2e:ee:e3:98:b5:5d:4b:
         71:3c:76:9f:e0:1f:20:15:15:72:60:c8:c9:2a:b8:f2:14:ce:
         46:49:c1:d8:33:a2:e7:f9:48:60:62:06:39:73:8c:cf:62:a2:
         de:60:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----