Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File:                     cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier:          r+/7RdDHKJPU9O152+6bKzapY1B1KFQLBljqzXBJtiU=
Subject key identifier:   D4:53:5F:9D:E5:0F:9B:86:7D:E8:E3:83:13:52:28:8B:CE:6F:14:43
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer:       /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial:       0194BBCEEE0B8E7BA1BF0306D82E9A5D6280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number:          112E
Signing time:             Fri 31 Jan 2025 10:01:28 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:28 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:28 +0000
Files and hashes:         1: 6rs7i3vA94rQ8ebECLSNNJ1ESvE.roa (hash: E52tMvrdTBTqcv+jQmW0VQSoDf/CVyZpK9bOXVZ3Rw0=)
                          2: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
                          3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
                          4: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
                          5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: kxsr5bKOKXn3oadZkWuTfYh0VdV5P6dQGEqM/eTr1r4=)
                          6: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
                          7: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
                          8: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ee:0b:8e:7b:a1:bf:03:06:d8:2e:9a:5d:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
        Validity
            Not Before: Jan 31 10:01:28 2025 GMT
            Not After : Feb  1 10:01:28 2025 GMT
        Subject: CN=d4535f9de50f9b867de8e3831352288bce6f1443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:0b:21:4c:32:b0:34:fa:ec:ab:94:96:28:
                    3a:cc:03:40:61:e1:e2:83:4a:c2:74:48:60:59:53:
                    b7:14:b1:0f:5b:f1:69:2a:d9:47:61:e8:42:16:85:
                    8c:ea:bf:60:c5:b1:6c:9c:9f:11:29:81:9a:94:70:
                    76:00:b8:d4:31:3a:90:31:51:8b:60:3f:3f:47:25:
                    6e:dd:97:29:39:c9:ad:a7:9c:f7:10:c2:a6:4e:cb:
                    e8:d4:64:32:a2:42:2d:e9:76:b2:3e:cd:f0:89:fa:
                    1e:95:f8:cf:f3:9e:60:ba:31:7c:33:78:22:5a:3c:
                    ef:ab:44:ea:1b:f2:37:34:94:89:ff:a1:36:93:62:
                    b3:72:34:34:d1:02:33:a4:f6:15:93:3f:b4:a3:f0:
                    c6:cf:00:22:2c:c0:6a:0b:a2:ea:d8:5b:76:82:f4:
                    2e:84:8f:4a:a9:fb:3e:37:0d:44:b9:8c:74:dc:c5:
                    fc:1c:42:47:6d:f5:d2:bb:f5:35:ca:ba:e6:67:18:
                    44:de:3a:51:88:3e:bc:1a:4a:9d:b1:b3:69:cb:88:
                    4e:23:23:3a:6d:56:11:49:46:6c:0d:0a:e0:4c:1c:
                    f3:a9:d4:fd:a5:e3:a7:d8:ec:e4:ac:c4:60:92:6a:
                    2a:07:79:df:68:ed:4c:31:2e:13:bf:2b:8f:f1:b4:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:53:5F:9D:E5:0F:9B:86:7D:E8:E3:83:13:52:28:8B:CE:6F:14:43
            X509v3 Authority Key Identifier:
                keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9f:22:3a:b9:8b:e2:2e:1b:fd:d3:a5:dd:4a:c5:ae:29:cd:
         57:0a:9d:4a:7d:6b:cf:a2:a6:0e:ff:b3:14:4d:b6:94:19:c5:
         b2:15:61:a6:83:0f:02:a9:57:bc:00:af:dc:18:9a:37:1b:80:
         9a:cd:bc:5a:c4:4e:9d:0d:bb:87:79:0c:0a:68:3e:f7:70:bb:
         30:02:68:23:1b:52:d3:2a:4a:4c:cb:d5:03:cd:f8:43:5e:e4:
         c5:e7:56:a0:2a:57:ff:71:72:2d:36:5e:a2:ff:97:89:bf:93:
         0b:6f:b6:c2:9f:9b:0d:14:71:d5:98:48:d4:d2:2e:17:36:9c:
         55:20:da:5c:e8:23:f1:c4:d0:d7:46:b2:cb:4c:47:bb:29:3e:
         09:77:8d:43:2a:3f:56:7c:58:e1:41:b2:7e:6b:6e:09:f2:ef:
         6c:b2:ed:e9:15:08:62:c4:5d:00:36:ec:28:88:24:80:9d:53:
         b3:33:b2:51:6d:7b:a0:5f:8b:d6:ba:63:f2:1e:c6:3f:16:70:
         04:1a:ac:7e:83:4e:d4:a9:b7:1b:5e:63:ce:ad:88:a3:bc:27:
         b3:df:25:d7:34:9f:81:3d:ba:fe:c5:af:57:ec:98:2a:f6:8b:
         4a:11:8d:2d:cf:2c:42:e3:b9:6e:2c:e1:65:6c:6b:49:2a:48:
         a2:ba:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----