Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
File:                     cwLNwp_coJ6aDz99IRPahafh1lQ.mft (raw, json)
Hash identifier:          jzxr/lShUO+0K3lljQAcj0jj79IMWGN2J7ODnQCSvXA=
Subject key identifier:   C9:AD:B1:64:3A:F4:89:CB:09:20:02:09:89:68:54:A9:C1:35:AE:C5
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       0194BD17EFED3D999B0C0546F2C9489807E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 16:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:50 +0000
Files and hashes:         1: 1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa (hash: rIogoNu1hzVKlpslv16w1RSjAhJwMYGtMcjGmVqGYDI=)
                          2: BclF8ogFJm7SHbbSauqgIPuVgI8.roa (hash: 6BijkZjD88M35uPP9hk20CG6BMPOZYagpsfeWkqpwqw=)
                          3: FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa (hash: Y7NpnMtxGd1OVNPFS3Fggo5HticHh8zC2s5H72cAKJA=)
                          4: Kym43N-Kud789rElwe6-Hg-POmo.roa (hash: 2+Vihi11NoSNLkqGK3EchxRMsWKonblxQqrEVO6Bl8A=)
                          5: MqUoaR99eNjoK2Lt2rxxNJbik7Q.roa (hash: nGbInz7OCxmiA6OXNVfUGoLeYRnDlmkkA5L1LvpR/8c=)
                          6: cwLNwp_coJ6aDz99IRPahafh1lQ.crl (hash: pxDza/kf8Gcisf5J3Wkaza/Hr0dpu6JDt7bKYScI0E4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ef:ed:3d:99:9b:0c:05:46:f2:c9:48:98:07:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Jan 31 16:00:50 2025 GMT
            Not After : Feb  1 16:00:50 2025 GMT
        Subject: CN=c9adb1643af489cb09200209896854a9c135aec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:7b:67:bc:93:ee:58:b5:a4:bc:c8:ea:5b:
                    0e:16:9c:1a:44:d9:1a:2b:85:0b:7c:ae:c2:5e:9d:
                    a8:f9:a6:a5:81:90:e7:a2:1c:05:ad:a3:a0:bc:ed:
                    30:91:00:78:a5:6e:ae:96:43:d1:42:c0:0f:5b:6b:
                    eb:88:08:72:0c:cd:f9:bb:c2:f8:40:d8:4f:56:a2:
                    84:8a:99:d4:ae:86:76:8c:82:6f:a4:38:58:e5:8a:
                    02:c5:80:85:f4:4b:3d:10:90:2e:04:36:95:cb:45:
                    25:14:11:87:fe:6e:1f:7c:31:7b:a9:29:cd:28:8f:
                    90:59:15:7e:39:19:83:9b:bf:84:d3:64:6a:0b:0e:
                    d9:3a:4e:77:88:94:66:bb:0f:9c:3a:96:f4:1f:f7:
                    81:96:d4:2e:ca:71:5e:a8:60:36:b6:3f:10:01:d0:
                    8e:61:fb:40:38:6b:2c:62:c6:97:1e:da:53:d3:b5:
                    f5:1a:9b:cf:4c:bc:ef:21:e9:57:f6:ae:4c:67:d8:
                    b3:36:33:10:49:b1:e7:4d:3e:b5:12:13:66:4a:38:
                    38:df:97:67:af:7c:27:d4:62:a1:56:36:8f:e9:f4:
                    84:84:7c:4c:9f:2b:5c:89:57:af:f2:69:e6:c6:fd:
                    02:03:d0:cf:bf:1a:db:51:9b:53:78:8c:d4:69:29:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:B1:64:3A:F4:89:CB:09:20:02:09:89:68:54:A9:C1:35:AE:C5
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:9e:d8:db:bc:37:e8:fb:ec:5f:2e:74:6d:20:ab:f1:88:
         b3:85:40:37:51:49:bb:fb:cc:5c:7a:f7:6b:61:d5:ab:98:d3:
         72:f4:61:1f:86:5e:6f:c5:e3:8d:ca:62:91:b2:1c:7f:0d:03:
         74:c3:9c:ac:1f:41:2d:fb:27:a9:7c:ca:4c:8e:67:56:90:fa:
         d6:1a:15:4c:67:83:e0:37:90:ad:8b:db:02:92:19:f5:d1:8c:
         39:40:53:e3:3c:f9:67:14:c2:54:bf:a8:ac:1d:b4:8a:f8:e0:
         14:8b:cc:5f:6a:d1:27:8a:2b:26:74:db:f3:54:06:93:02:01:
         84:b4:f3:d7:ba:35:0d:31:04:fc:ea:44:e0:db:dc:8b:df:91:
         e1:b5:90:d5:fd:3d:60:49:a3:85:a1:41:8a:63:e9:28:93:54:
         ba:06:e3:b8:0a:01:14:99:37:4d:da:8b:1e:79:73:50:e8:dd:
         93:d4:87:48:65:7d:76:f3:3c:55:87:2d:1e:84:d6:4b:57:71:
         2a:2f:95:66:1d:16:ec:85:86:0b:9a:12:fe:74:18:3f:69:a9:
         71:72:ab:77:e8:63:a2:e8:b9:69:a2:56:be:f5:9b:12:13:59:
         54:d1:c7:04:c4:68:83:72:2d:ea:6b:4c:8e:91:77:b8:16:64:
         2b:e9:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----