Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File:                     p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier:          Rx5ThIfxyrEfsBTfIkOt4hcm2w3aZN4hQNs1VqGauys=
Subject key identifier:   E7:D6:15:2B:2B:15:07:45:DF:07:0C:D7:3B:08:8D:56:58:C4:FD:41
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       0194BC3C6F52041E9358CAA1E13B2925CC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 12:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:04 +0000
Files and hashes:         1: 1-K4Qi087lrzvjbVOKyn3qBc1YDQ.roa (hash: BN7XzO6W1te47rGpgTSOjeqKmqwz59riUfU96uugQpE=)
                          2: PQyZxA46MLTHRc5mobvjFwK5lMw.roa (hash: IucPwjrf1WuArHmWX4CO13FVRQsTCjMdmSkeW1oKCHI=)
                          3: SCbQwmT1LBd6vMvIhSz8wEJJlF8.roa (hash: v55wtFAcs5huUepgKvXjyu/peBaeK65+1eYv4A3c7ME=)
                          4: bJdp9vJThsmnU-T4vEJV1p1mH_Y.roa (hash: f3Bk9K95jCENctRrDvO2NphCV9j781ceJJ/eJh+VuWY=)
                          5: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=)
                          6: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: UfoeOjM4cBf7RYJV+k3o24DMsXPvnyKTVA2fybJSECU=)
                          7: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=)
                          8: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6f:52:04:1e:93:58:ca:a1:e1:3b:29:25:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Jan 31 12:01:04 2025 GMT
            Not After : Feb  1 12:01:04 2025 GMT
        Subject: CN=e7d6152b2b150745df070cd73b088d5658c4fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:e4:2b:c3:42:09:31:12:bf:58:13:c3:cc:
                    e5:8e:9e:f8:28:b5:e5:5c:49:a7:b6:a4:08:56:66:
                    6c:7f:4f:bb:7b:63:33:ee:ab:59:c6:9f:ea:c3:e5:
                    c4:60:69:69:a4:4e:61:67:88:ff:73:ff:78:27:7c:
                    1a:77:a5:c4:e0:8b:e3:78:bf:aa:b7:4b:a1:df:4e:
                    17:ff:cb:d1:a9:e6:7a:6f:23:74:21:c6:c1:f1:ff:
                    91:64:a8:b3:78:61:09:d4:d5:36:74:bf:3b:44:f1:
                    e8:31:c5:f5:7a:b0:87:4d:6e:74:4d:ba:a7:5e:31:
                    b1:4b:04:61:29:cf:5c:9a:8a:60:96:1b:3e:6d:7b:
                    3a:18:17:03:fa:53:7a:f6:04:0c:c2:08:77:dd:4a:
                    41:55:0f:82:22:f3:3f:ed:ca:4e:18:f9:6b:f1:56:
                    e6:aa:a2:ea:4c:ee:06:dc:4d:66:4b:b0:4a:d5:60:
                    7c:45:00:79:cd:1e:da:23:8e:d4:5a:d0:f2:fc:1f:
                    be:03:d7:f0:70:8b:60:c7:e3:ac:2d:9a:bb:e1:56:
                    f8:12:b7:6e:02:e9:c8:77:cc:b2:a0:38:19:ac:9a:
                    38:1b:45:36:da:fc:77:c4:dc:e1:9e:28:e6:6b:11:
                    a5:08:84:5b:16:27:49:c5:29:25:7e:68:79:6a:4b:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:15:2B:2B:15:07:45:DF:07:0C:D7:3B:08:8D:56:58:C4:FD:41
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:87:f6:d2:08:d3:02:77:f1:a7:9a:18:c3:9d:76:2c:e1:
         59:e9:4c:2c:a9:0c:03:cb:d7:f7:fa:a4:4f:84:bf:6d:66:62:
         c7:83:53:6d:ba:f8:45:79:2b:d4:65:4b:50:35:c5:61:61:57:
         3d:82:8d:38:3c:8d:60:46:85:27:b7:9c:2e:af:93:b9:a5:8f:
         4d:f2:3c:28:c2:da:f5:ba:fa:0c:2f:25:a9:70:6d:97:09:57:
         01:f0:82:bc:43:d1:37:a4:c0:17:7a:33:90:c5:8d:f3:23:cc:
         7a:33:28:f9:17:01:14:a5:51:72:d6:c3:df:f4:00:f7:fe:26:
         64:b5:9f:b6:b2:0c:2c:82:d8:44:1e:ee:a2:f8:a5:49:11:f4:
         98:81:5f:18:4f:cb:0a:ea:99:76:38:cf:9e:70:13:45:6a:fa:
         e1:7b:8d:29:9a:59:3d:64:53:97:92:3d:62:a3:a9:19:6b:4b:
         12:0f:37:38:af:e3:86:e9:6b:de:85:b4:4e:7f:73:3a:f6:ed:
         95:9c:6d:c9:9e:8c:10:53:6e:4d:4f:e1:a9:87:83:d6:9c:33:
         3c:88:9b:fa:7f:f4:ec:50:fb:b8:41:6b:24:f4:e2:67:a5:89:
         ca:2b:8c:30:c5:ad:c4:56:78:3c:a7:7c:78:82:28:5c:23:f4:
         f0:f4:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----