Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
File:                     wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json)
Hash identifier:          d9B3LG6CmTAPnMGVFMtLXqmHerHuSRmcYlQUkOc5WzI=
Subject key identifier:   AB:CB:40:09:73:2D:50:01:0B:EA:EF:C1:5C:A5:01:DD:51:0A:A3:72
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Certificate issuer:       /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial:       0194BCA9E1D83E1CB20DB78D5CB920C310C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:37 +0000
Files and hashes:         1: A5e1ajK6VG8bsSgi6vHK9FVhkA0.roa (hash: DwfexPS0q4iJHOaKGcYE+MnhBqtqidrsPJZ1x03qAag=)
                          2: FZT_BTCcPvUDg2WMebmfcMFfqlk.roa (hash: 9tnNWNBi7xBlzEQuuTA6YbXDIlQAtmVWyk/P9qheXMo=)
                          3: XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa (hash: Qb1mjfUYvzsw4HemAT0H4CHevsLBTYDDvuwnqPNJ06Q=)
                          4: ukTsh__PD-e49THfmeczO06Ewzg.roa (hash: 2pxpwWB8nzVKK5ZFAoaYU/qGI9s7E3tcdxUF1upjgL8=)
                          5: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: RmS6QdPN85DlE/5ElOCoQ7zGrXXEVlTL+D2zeM5PC1o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e1:d8:3e:1c:b2:0d:b7:8d:5c:b9:20:c3:10:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: Jan 31 14:00:37 2025 GMT
            Not After : Feb  1 14:00:37 2025 GMT
        Subject: CN=abcb4009732d50010beaefc15ca501dd510aa372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:d0:d0:f6:e0:ec:6d:ec:21:4f:aa:d7:e7:
                    6e:7e:f5:61:af:de:96:a5:0f:0f:2a:99:6d:02:89:
                    41:b4:0e:90:07:24:6b:03:10:6b:bf:84:8f:66:96:
                    c5:1c:6f:84:bb:38:99:df:d3:2e:4a:a7:50:56:fb:
                    b5:94:88:46:64:86:91:be:77:02:99:e4:0a:01:fe:
                    76:78:96:3d:1a:62:68:13:15:2f:77:21:cf:5a:db:
                    a6:ff:93:94:66:72:a7:c8:a3:22:26:40:87:73:61:
                    c0:6a:4c:61:e7:c2:b9:67:b7:61:4b:6d:fb:3d:c1:
                    58:59:59:b4:f4:91:5b:34:8f:dd:fe:d0:c7:87:68:
                    23:9e:13:c8:bb:b5:3b:89:38:57:ff:cd:42:f7:e1:
                    8a:b6:0a:46:d8:94:8d:27:61:5c:75:be:74:9a:11:
                    74:00:91:6f:a0:5a:d9:c4:ae:90:85:99:9b:ba:f1:
                    be:cb:9c:03:4a:56:34:a7:99:56:c0:32:24:07:a7:
                    39:6b:75:3a:f8:05:21:3d:36:4c:54:bc:08:da:12:
                    93:f5:30:4c:7a:f6:53:97:38:47:78:2e:8b:f7:9a:
                    a3:45:4e:06:ab:95:a3:e9:8b:cc:4b:5b:12:5c:f5:
                    31:a6:64:c5:ae:51:27:98:70:83:b1:ce:00:47:3a:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CB:40:09:73:2D:50:01:0B:EA:EF:C1:5C:A5:01:DD:51:0A:A3:72
            X509v3 Authority Key Identifier:
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:b7:23:69:54:fa:9e:96:ca:35:25:82:87:15:21:1e:7e:
         f0:03:3b:29:41:8a:df:cc:93:9f:00:a5:9e:31:0e:fd:12:5b:
         8b:16:78:08:43:48:69:c9:3d:e1:ec:09:dd:b5:6a:bb:f6:9e:
         f2:aa:0f:65:a8:5b:74:bf:76:43:42:26:17:5e:aa:a3:c5:af:
         92:42:2d:55:89:76:d0:59:83:2d:f7:9b:2e:d6:47:a0:71:f7:
         53:01:41:77:a4:e3:ce:84:c4:02:4b:69:8c:d1:ba:04:b7:59:
         5a:23:67:56:df:41:c8:04:f8:6a:ad:bb:e4:e5:3b:c8:b0:df:
         56:f5:c4:e4:65:cf:09:18:7d:b0:22:1f:3e:34:03:ae:8f:5e:
         2e:cd:46:34:e6:9c:18:d1:f3:84:0b:20:6b:02:75:05:31:cb:
         29:56:8f:9f:15:f7:87:fd:b8:5e:fa:31:14:54:da:5a:db:5d:
         c5:6f:6d:0f:c3:2a:95:2f:b8:ee:7d:5a:4b:2b:39:5e:12:ad:
         89:32:27:e4:fb:ec:77:a8:2f:fb:4a:00:0e:14:3e:a9:75:6b:
         8d:db:ba:c8:31:c6:b0:82:4f:48:6b:4f:be:cb:4b:30:9a:54:
         3a:d7:b0:f0:5c:0b:d0:1b:5b:ff:aa:18:92:87:55:06:7f:1c:
         c8:5c:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----