Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          SD4jT3/5HG4kycWHu4cBwEqAvNEPlU3gvp65sartMlY=
Subject key identifier:   98:B7:E1:A4:30:ED:CA:AA:E2:1D:0B:5E:B6:0E:71:E7:D6:9B:65:72
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       0194BD17F686AFA34DD6A68620044683982B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0835
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: DgOZwnFO8AhdHBgLmgcNwBsxDAc.roa (hash: h4KsWMGXdyj/8wNpX8sYIR4JqIdgBrnn4TPvXbnDMpw=)
                          2: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: fS4esJHMdbO+NtY3XcrWOJZ4aq5ZOMqpnkdTHphAHas=)
                          3: NThoSQxUafUu9GSg2YgB3KD61Uo.roa (hash: WZ5JuyMW+kpet8m35KP5+E570TrABwEt7fwaKtcUv+U=)
                          4: RR6pycHaTPsIe6GNf5JqSPKOd08.roa (hash: obNVdba5R47x54SSSjM+mOVGtvigMbqXtqMicMTi4UM=)
                          5: U9VsXfCDsGKpry_AQUbKGYz8tRI.roa (hash: SBzZHW/ujJ7yylMaWV4gG1R9SCvZEB29AnTHypdaXgY=)
                          6: m3gokZ3oqrQAkT9aNHEn43WdviM.roa (hash: MQtM6YjLXyL+j/Sfr97BhpgH5ErvjAr3xvEfcREF22c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f6:86:af:a3:4d:d6:a6:86:20:04:46:83:98:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=98b7e1a430edcaaae21d0b5eb60e71e7d69b6572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:03:59:16:09:1e:4a:3b:61:ca:00:e1:ff:
                    2b:b9:02:7b:ff:f0:fd:78:a5:4b:3f:e6:b3:51:fd:
                    cd:35:4f:78:26:57:f5:81:ba:dc:57:96:46:4f:2f:
                    a7:ca:79:e0:c1:41:8d:04:22:4e:63:62:0e:2f:36:
                    db:8e:14:37:e8:65:fd:df:15:38:f2:90:05:fc:79:
                    af:1e:f4:f2:f0:bd:e1:d9:c9:93:8d:56:bd:a8:b3:
                    83:5b:21:d6:90:6d:c4:d2:0e:d8:6f:26:94:6f:ac:
                    f9:f9:48:c7:3a:a0:fb:40:2e:7c:8d:5b:6d:4d:df:
                    5d:2b:e1:47:da:5b:7c:e6:21:e3:25:39:6e:66:d8:
                    56:47:0c:ee:11:40:02:7d:40:31:d1:d9:11:6d:75:
                    c0:96:b7:12:f9:03:d5:bd:93:1a:71:b9:78:9e:bb:
                    a3:31:e9:de:b9:ab:fb:5d:e8:72:bd:15:79:8e:f1:
                    8f:bf:45:1e:f6:b5:1d:db:44:78:a3:a7:87:49:79:
                    81:9d:1f:38:e7:aa:53:4d:80:79:67:74:26:b3:a8:
                    19:51:4f:2a:a2:55:b3:a1:26:3e:9f:f2:50:4e:30:
                    e2:95:4d:4e:ae:1f:90:24:ec:ee:a2:9c:95:19:d4:
                    68:4a:97:dc:37:9f:a9:f1:6d:ca:b2:52:99:b6:cb:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:E1:A4:30:ED:CA:AA:E2:1D:0B:5E:B6:0E:71:E7:D6:9B:65:72
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:00:06:13:32:fa:b0:9c:ab:e8:bf:79:fc:6c:39:cd:80:11:
         16:6c:3f:10:c7:cd:23:19:1c:43:ac:c3:55:c3:1b:87:eb:59:
         22:27:de:4e:d6:1f:45:74:ba:31:0d:d5:12:4a:23:df:d8:76:
         09:7b:78:8f:2f:4b:18:da:e6:3c:7d:80:04:68:67:12:04:55:
         b6:13:a1:23:f9:8d:65:8c:7d:50:57:a1:d2:54:5e:23:c7:dd:
         c0:b7:9f:bf:3c:de:2c:21:a6:61:ac:f1:c1:c5:72:23:31:6c:
         dc:6d:5f:48:a7:f4:b2:1f:d6:22:65:d1:ec:f7:7e:f9:6c:13:
         bf:72:da:81:30:d5:af:dc:ac:78:38:d5:d5:fe:b0:67:5e:42:
         dc:c1:e4:81:8d:85:cc:94:58:98:a7:c9:89:81:b3:3f:16:79:
         86:84:ca:12:8f:03:be:52:ef:9d:4d:e0:dc:89:a0:2c:52:0b:
         bd:54:db:8c:51:00:c6:44:ea:fc:d0:11:72:e0:ac:e7:d0:62:
         b9:2f:c0:2c:53:99:7a:74:85:4d:9e:40:5c:0b:19:46:42:2a:
         b8:2b:d9:e8:e6:00:bd:d8:f4:7e:bd:f4:66:a7:5f:e2:a9:76:
         7f:0e:ab:a8:b8:04:f7:ab:3b:57:41:cc:77:32:08:2d:46:61:
         b2:be:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----