Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File:                     g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier:          puAdto1SlMYLhwlpKjnjuNEWe1M4OQCKrH9NOAM5Ysw=
Subject key identifier:   4A:60:2B:13:D5:F9:83:AC:81:06:39:D1:1A:52:7C:94:05:4D:32:C6
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       0194BCAA359D4F4DE2A65526888E7BC82E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number:          113A
Signing time:             Fri 31 Jan 2025 14:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:58 +0000
Files and hashes:         1: 0JyAcPXL-bXwxT9T4RR50a8dw08.roa (hash: uXEDLrD6enC/axv995LzZVWavGREUCxmYJkE/6Uz3j8=)
                          2: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
                          3: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
                          4: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
                          5: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: LZUC+XbvADntztiMYMPiH6LVwk3SS43Ki1l7HCqJng4=)
                          6: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
                          7: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
                          8: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:35:9d:4f:4d:e2:a6:55:26:88:8e:7b:c8:2e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan 31 14:00:58 2025 GMT
            Not After : Feb  1 14:00:58 2025 GMT
        Subject: CN=4a602b13d5f983ac810639d11a527c94054d32c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:eb:71:40:48:67:a2:3b:f4:f0:14:c6:fc:
                    95:29:a6:8d:e4:2e:d3:12:ee:c3:56:da:65:34:0c:
                    61:09:3a:89:3f:e7:3c:88:7e:99:0b:3e:95:f6:67:
                    44:1a:db:35:5f:be:cc:3d:ad:ce:7d:7b:c3:7c:3a:
                    8d:11:43:91:f2:ea:34:f7:a3:d8:4a:8d:a5:77:b4:
                    41:30:ed:c2:4c:d4:f4:0a:24:3d:76:37:b4:3d:13:
                    f2:6f:75:bc:8a:15:2d:8f:d3:72:9c:46:64:f7:05:
                    d1:ad:0d:37:4c:85:89:74:da:14:92:1c:7f:cb:24:
                    c1:8b:a6:fb:cd:b1:e9:ac:69:00:46:da:c8:cb:d3:
                    4b:1c:76:c0:df:0c:4e:ea:ed:b6:86:ab:9f:d1:21:
                    f6:1b:33:eb:15:d0:15:72:9e:75:29:1d:42:89:82:
                    a5:03:5e:41:f9:0e:3d:6e:05:78:6f:37:d6:06:4c:
                    03:2c:82:c7:a5:87:2f:d0:46:02:e0:2b:6d:e2:63:
                    cc:88:04:f2:6f:54:e7:de:92:54:b5:c3:da:e0:6b:
                    30:39:cd:36:46:34:8e:ac:01:70:d1:dd:93:dc:45:
                    12:04:99:57:69:61:8c:41:f2:dd:0c:20:35:67:d3:
                    b1:a3:b8:0d:cc:90:a3:83:1c:66:ed:5d:38:6e:d0:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:2B:13:D5:F9:83:AC:81:06:39:D1:1A:52:7C:94:05:4D:32:C6
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:7b:e8:b4:14:31:d9:92:2e:b7:26:00:58:c6:b5:a6:4e:
         3b:7d:d7:b9:40:0c:e7:b2:d1:ba:92:c4:6a:69:74:b9:a6:6b:
         d2:31:a5:45:d0:86:8e:6f:96:99:3c:02:1c:51:02:aa:bd:4d:
         3e:ad:84:0f:9f:cd:c6:16:6e:7f:ee:fd:15:65:01:2c:93:f9:
         22:af:04:ba:c9:2f:66:e4:8d:63:a4:f3:9b:10:ba:fe:c3:64:
         8e:36:08:cd:ee:9b:d0:42:f8:29:f7:e4:75:30:15:0e:c7:e4:
         e3:77:57:a4:07:82:e4:52:91:2d:a8:b2:ec:c7:02:35:1e:91:
         78:c0:07:52:82:83:63:2b:8c:34:8a:30:f4:a4:4a:b9:d1:82:
         39:a6:12:7b:3b:d0:40:23:3b:72:6a:8a:62:83:a5:9f:66:a4:
         9a:ec:13:96:63:74:25:89:71:33:cf:06:f8:42:20:52:da:6d:
         f1:6d:6a:91:22:75:eb:4a:7d:29:c1:63:fa:46:09:4c:82:14:
         3d:3b:9a:bd:8b:f2:2f:30:6b:41:25:35:9a:e2:4a:4b:0b:e3:
         ae:df:21:f5:b8:ce:a8:61:03:4e:30:41:33:1c:29:33:d6:a9:
         0d:da:b1:6a:a3:fd:e0:5e:52:52:32:35:c3:09:e3:b3:0e:70:
         66:fc:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----