Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          OJ7OGdX1EJoJ2v934jb3nfAyg7DQBc6E4DBr0U7vG7E=
Subject key identifier:   C4:A6:C8:57:79:83:CE:51:F2:94:A5:E0:41:9C:5C:F7:AD:DB:EA:B1
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       0194BD178752920CA05AC69D9B1C54EAE5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          0ECF
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
                          2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: 1GFCYBCdPe4RAJP/NkHs2KWfjX92+VI8nDw1NyT4H3M=)
                          3: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
                          4: hP4RlSdcYGNnTpuPiY_-lw9F7k8.roa (hash: C3TpjMqyfvy/eCoQ7B0XWPy+vgrcOa/QV9L4/p4cn7c=)
                          5: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:87:52:92:0c:a0:5a:c6:9d:9b:1c:54:ea:e5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=c4a6c8577983ce51f294a5e0419c5cf7addbeab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:be:0f:e5:0f:4d:f1:44:2d:04:bd:a5:d1:
                    02:68:fa:52:cf:d5:30:10:a3:64:40:d7:d9:7e:a1:
                    50:61:92:00:36:9b:bb:88:33:9d:4d:5b:ee:9d:74:
                    d5:85:60:d8:cd:a5:9b:fe:14:b2:9f:26:25:4f:0d:
                    95:6f:10:e5:e8:4b:a6:ca:2a:6c:85:38:0f:79:26:
                    a9:24:f9:0a:ff:55:93:5f:d1:af:b2:5d:0c:43:a3:
                    4d:4f:8d:e3:27:f2:b6:b1:53:d1:f3:aa:1f:f5:1d:
                    5d:70:d1:d5:8a:36:41:18:8c:3f:fd:9d:42:c0:c6:
                    91:26:8e:ba:c5:9e:7f:52:b6:db:93:9c:68:f3:15:
                    4f:01:3a:45:50:d8:a7:81:ed:c4:c5:93:85:06:0c:
                    78:c4:07:96:66:90:c7:17:ec:06:e4:95:ff:f3:cf:
                    4f:e0:2c:49:41:18:6d:24:3e:26:ff:10:a9:3b:cc:
                    22:4f:f5:4b:3b:f0:84:4b:b7:07:43:69:06:cf:a8:
                    09:0f:db:28:71:7b:b3:53:f7:7f:1a:cd:34:01:53:
                    a1:e5:62:6f:d3:0b:b7:bb:3a:12:c7:f9:c8:7a:09:
                    53:00:54:af:8a:d6:09:a1:ce:71:34:18:4a:c4:ad:
                    f7:39:e3:e5:89:60:c6:75:af:c6:9b:00:77:2b:f8:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:C8:57:79:83:CE:51:F2:94:A5:E0:41:9C:5C:F7:AD:DB:EA:B1
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:53:a6:a1:92:05:24:42:04:09:8f:f5:09:17:16:b1:0e:
         1b:d3:55:65:71:bd:01:d5:1b:cc:78:c7:a8:ca:6c:9e:7e:43:
         4f:85:a0:95:4f:56:7c:25:3f:9a:d3:ce:58:75:98:24:8a:7a:
         0c:4c:51:cc:1a:b2:34:c1:e8:9e:60:9e:68:46:47:b7:2a:1f:
         4b:d8:f4:5e:43:3e:84:50:03:47:a3:f9:f9:58:ee:cd:d1:7c:
         67:ac:8f:a9:16:bd:52:53:33:12:fc:21:7d:d2:fd:44:39:4e:
         e7:5e:35:0a:11:14:96:f0:3f:81:31:59:85:ad:98:50:e4:c2:
         f0:ff:d2:b6:2c:a6:61:ed:13:c2:8b:13:b9:ab:3f:17:98:dc:
         43:cd:65:e5:43:d8:23:2c:16:dd:27:f7:8f:a4:12:ca:af:78:
         5f:25:a1:2c:1a:7d:67:a8:51:b8:ed:91:3b:79:b6:f9:ad:33:
         72:35:3f:ac:61:f3:b0:4d:f5:94:ba:58:bd:3f:a7:02:e5:d5:
         f1:85:b6:20:50:7b:76:a5:95:53:05:d4:39:76:36:97:d9:ce:
         b4:f7:9e:37:41:de:94:6a:be:a2:ed:31:3c:00:a5:98:68:01:
         fe:00:3e:b8:51:d6:d5:c8:fa:ed:ab:d5:65:27:d6:d1:7d:79:
         2e:7c:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----