Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
File:                     _sb7WkZ5dMl3qZfG3aFGSAXtN58.mft (raw, json)
Hash identifier:          +qqTREVmhJg84h0soL3+Q6V8jvWeSOEfXKDs9TXUmo0=
Subject key identifier:   CB:37:BA:B3:15:CC:85:48:DE:B7:D1:20:7D:B8:B4:4B:85:1B:B7:44
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Certificate issuer:       /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial:       0194BD4E37407C1BA24ABA33E91990ABDBA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
Manifest number:          07CC
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:07 +0000
Files and hashes:         1: 59SaltDz-0o_TQoBEKFXLERY6y8.roa (hash: 8OZsJspR0zg99vIUKnzi0iZkH7/6VtXXwr7pGOuqCK0=)
                          2: E__vFrmTsxyOGMhhVRbUyFs6fE4.roa (hash: f5Wu8Iuw9y3vTxcVmuh7meVQB42MGArKR0E5sohYz4c=)
                          3: TrgvhdTHQM75gjmPCWy-go1xZ7g.roa (hash: J0ss3iNRgQuDXDO+ZUHpxFg7+eVayUQpwRLYiauVRcM=)
                          4: X0-3PAazjse0hHhiAz0y98y6xD0.roa (hash: AtkwB+eyCo+X4Q8oeouklk8Nhb4ehYTOanEpZg+NyIY=)
                          5: _sb7WkZ5dMl3qZfG3aFGSAXtN58.crl (hash: kXDqssT5vFXajhRrRO+XCSbTyq9Dn9dT13Z9Wd7+MDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:37:40:7c:1b:a2:4a:ba:33:e9:19:90:ab:db:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  1 17:00:07 2025 GMT
        Subject: CN=cb37bab315cc8548deb7d1207db8b44b851bb744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:56:2f:de:a5:2d:60:25:73:1a:49:53:56:
                    f0:c8:65:c8:e5:46:17:b2:52:59:4b:dd:c7:bc:fa:
                    ab:6d:2b:49:81:41:04:8a:19:ed:c8:d2:8f:38:f7:
                    44:fb:46:cd:68:d5:1c:a6:51:e9:52:ca:0f:cd:88:
                    38:1f:36:b1:c5:38:e7:09:9f:55:0a:b4:15:5c:9c:
                    4d:25:83:00:d6:18:3a:6c:da:77:0e:ae:97:62:d7:
                    f3:f7:0b:4c:a5:39:b8:f9:cb:b6:48:d8:2b:e3:92:
                    bf:55:95:de:c9:91:37:90:1e:2d:66:b9:0f:13:4f:
                    c7:2b:4e:e1:87:07:2e:0a:bd:fc:44:ca:f7:33:a0:
                    68:f2:37:60:df:73:bd:18:b6:be:97:54:77:61:8a:
                    33:ff:42:e9:d8:f1:78:a1:57:7b:46:96:e8:4c:9b:
                    92:1a:49:f0:22:32:d7:b8:97:56:de:a4:0b:c1:eb:
                    4e:63:e0:84:05:43:4f:1f:0d:41:90:bc:b3:ba:d7:
                    de:d0:f3:27:17:c3:21:49:78:6c:72:20:dc:60:d1:
                    bc:a5:a8:2e:c3:30:39:06:d7:ba:df:00:f9:fa:5c:
                    d3:59:59:fd:ee:a3:3c:f7:e4:b6:73:09:0f:1a:f4:
                    80:d0:ce:60:87:a1:fd:31:54:20:4b:f9:7a:7f:ea:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:BA:B3:15:CC:85:48:DE:B7:D1:20:7D:B8:B4:4B:85:1B:B7:44
            X509v3 Authority Key Identifier:
                keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:09:d7:22:fd:4f:42:2b:b6:d2:21:ec:d6:39:ef:86:37:20:
         06:3a:58:a6:3f:86:88:10:8b:70:ee:14:17:9c:53:a9:e1:c6:
         c7:61:20:65:dc:f3:62:8c:c5:5d:5d:db:ca:d8:ae:24:0e:69:
         a3:20:24:07:ad:a5:a5:0d:f7:03:73:3e:9a:6e:01:74:c9:8d:
         a2:ac:a3:1f:67:b4:cd:e0:4f:74:88:00:23:62:83:c9:5a:60:
         81:0a:3c:37:92:8e:92:95:79:b8:6c:d5:c8:97:31:51:c3:74:
         20:f0:e7:bd:1b:83:14:de:79:72:37:44:68:01:f6:b4:4a:8f:
         c8:e2:54:bf:03:a2:cc:fd:b2:19:7d:f0:06:b2:71:a7:25:31:
         2c:ed:ef:0f:6c:57:3e:24:8e:dd:f8:fd:e5:41:ec:88:db:1c:
         1c:78:41:d9:71:ce:7e:27:6f:2f:26:2d:0b:76:f5:66:d9:e5:
         b6:a7:7f:84:3c:43:85:bc:03:3b:0f:b9:79:62:32:44:64:93:
         85:10:77:1a:24:7d:19:24:e0:ef:5b:e3:e0:da:a6:94:95:a7:
         ac:ae:04:5b:b8:cd:21:33:74:7c:c5:fd:86:7f:34:19:74:7b:
         69:fe:72:e2:49:fb:62:da:27:e6:41:dd:f1:16:9c:7e:0b:cf:
         44:23:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----