Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          Q4iNVG4ecv7xCjnLvXVB0cy54vm5XAjwYNiFR8jcEws=
Subject key identifier:   49:77:39:84:E7:2E:9B:C8:7A:65:A0:2D:01:E0:3B:E1:35:D3:44:C0
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       0194BD856051E431E5DDDF347B08A4C01A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          120E
Signing time:             Fri 31 Jan 2025 18:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:22 +0000
Files and hashes:         1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=)
                          2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: l86CrS8hJH+55Lzz1Lk+tdekxFsKMha1DbcSBq39JJE=)
                          3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=)
                          4: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:60:51:e4:31:e5:dd:df:34:7b:08:a4:c0:1a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Jan 31 18:00:22 2025 GMT
            Not After : Feb  1 18:00:22 2025 GMT
        Subject: CN=49773984e72e9bc87a65a02d01e03be135d344c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:55:86:64:63:de:c2:6c:3a:46:27:9f:ca:f7:
                    6b:00:0c:a0:fb:53:9e:5d:a5:1f:9f:e7:a9:28:31:
                    61:59:4a:bb:3c:78:f5:19:08:e9:8d:13:cb:1e:f2:
                    c8:0e:69:a1:64:3e:01:b5:8c:11:70:6a:76:13:07:
                    f2:b0:a0:e4:94:bc:f0:4e:b9:83:cd:b9:f7:4c:48:
                    e0:b9:19:e3:8b:07:fc:7e:1c:31:c3:e0:20:f3:09:
                    c8:13:db:c5:e3:64:87:ab:f0:f8:b3:44:a2:d7:f2:
                    23:92:68:d9:36:a1:1f:1b:eb:81:05:f6:47:f4:7d:
                    7f:4f:9d:97:f7:c1:11:a7:ab:be:a9:68:e0:ec:29:
                    7f:80:28:31:6a:e8:b0:31:3e:e8:db:10:24:64:a2:
                    34:4d:4d:4b:72:be:c5:75:96:65:62:4c:70:96:77:
                    d7:98:e9:75:f7:ca:17:96:98:3a:de:8b:29:36:ad:
                    79:ea:b7:29:83:e0:0b:a3:58:9d:5b:6a:36:84:ce:
                    e0:ef:23:b6:56:66:d7:bd:5f:d2:9c:70:be:0c:07:
                    c9:52:35:77:03:67:79:75:8c:bf:3e:ed:09:df:bb:
                    01:2e:ee:5f:09:9c:a9:77:24:3a:97:f4:69:a1:56:
                    1d:08:96:e4:4e:08:52:b7:7e:a5:4d:d4:32:17:6a:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:39:84:E7:2E:9B:C8:7A:65:A0:2D:01:E0:3B:E1:35:D3:44:C0
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:d7:53:e2:7c:76:92:05:89:ef:4c:b6:e8:d8:3a:75:a3:
         eb:74:b5:7b:f5:a1:9f:1d:b3:ad:64:fa:dc:ab:1a:c7:cf:d4:
         51:f7:db:54:fc:72:18:4c:55:c8:0b:46:45:ee:99:ee:24:05:
         f4:4f:59:56:fa:06:91:e4:2a:15:f3:27:7d:e2:ce:93:1f:30:
         ec:e8:a5:3c:ae:0f:52:7e:0c:ff:43:2d:32:60:54:1a:97:ab:
         b6:50:bf:a7:59:6f:e4:cb:98:a8:b2:83:82:95:cd:bb:fd:81:
         ee:38:20:ae:a1:23:8f:40:67:2b:ba:8f:8d:45:5f:2a:57:fb:
         3a:c0:88:32:99:ae:6e:02:6c:72:2b:e1:e7:cc:9d:95:fb:92:
         02:b7:e2:da:56:8e:b0:50:e9:a1:e5:f6:0f:f9:d7:e7:8a:88:
         b5:44:6f:36:45:27:bd:de:8b:14:d0:e8:48:8b:28:4f:6e:64:
         a3:5a:f8:4a:e8:c7:6a:1b:67:80:b6:ef:76:fd:ff:19:70:82:
         17:d5:1d:f6:fc:25:aa:44:59:04:d2:ca:c1:ef:9f:e8:97:a5:
         e0:92:c1:65:94:9d:9e:46:86:fd:58:ee:30:7c:28:98:2b:01:
         15:2e:45:d5:99:5f:5f:64:da:a1:4f:51:79:4d:f7:16:bf:8b:
         7e:98:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----