Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
File:                     VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft (raw, json)
Hash identifier:          cj5WxiGeM2rWdA3ffPhR3GKntp21nB+R5d5s8KPc+OE=
Subject key identifier:   92:AB:B5:9F:D4:D4:AC:D1:47:E4:50:3E:35:D9:4E:0B:9D:CE:08:A5
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Certificate issuer:       /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial:       0194BD85778E63EC2FCDC41236F1610E6792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
Manifest number:          05F3
Signing time:             Fri 31 Jan 2025 18:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:28 +0000
Files and hashes:         1: 2jwJls5Ar4jmarcjJNInWQLllso.roa (hash: LgdCGzIdRce9I75cpLk0D3bK5sO4mVP3fvpXkFLo/bY=)
                          2: VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl (hash: fnK2BCOAA4s13SEPwWvusYkh/Pg+VyXKxLsy3guSalU=)
                          3: fpTc9psmK7mTVjaSZo_0_yvBUR8.roa (hash: UgVFOd+QOH0JwGcBKTwjgIfFrgkGab/yr0muy+SkJYQ=)
                          4: xMtzp4-tdYsNsJ-wu0ECePe81Q8.roa (hash: gr9W9qCoJ0ynru/M4KfrGWZeR9TrsFz5r0lqSWOfJkE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:77:8e:63:ec:2f:cd:c4:12:36:f1:61:0e:67:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
        Validity
            Not Before: Jan 31 18:00:28 2025 GMT
            Not After : Feb  1 18:00:28 2025 GMT
        Subject: CN=92abb59fd4d4acd147e4503e35d94e0b9dce08a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:7e:d5:79:59:5d:b5:f7:be:c4:63:b7:c9:
                    74:dc:25:37:28:5b:e7:0b:3c:ff:04:a5:ec:06:71:
                    05:60:6d:3a:57:f3:ae:a2:75:31:c0:8a:7f:df:19:
                    19:56:89:f5:56:8d:0c:46:72:a2:fc:b9:6d:5d:e2:
                    53:1d:52:58:94:2d:01:31:b7:a1:5f:50:c5:10:a1:
                    42:d2:80:6f:c2:d9:73:c0:66:0a:81:14:87:01:32:
                    ba:9f:78:b8:6a:9f:d2:e7:dc:f3:7d:60:47:ad:a6:
                    0a:f7:46:55:90:de:7e:39:16:5f:02:ef:35:6d:23:
                    98:45:0a:c5:7c:fc:04:97:1d:5a:44:47:01:36:4b:
                    c3:16:a0:17:2d:a8:19:33:9f:8a:b3:f9:6f:2e:7c:
                    a8:ad:52:49:ea:7c:bf:9d:d6:99:38:6a:aa:42:0e:
                    33:3d:27:fa:e8:04:a5:31:75:42:7a:c8:70:8e:cb:
                    8f:ac:9c:6d:b2:aa:d8:42:56:d6:4e:f1:28:d0:b2:
                    80:8c:b7:49:0e:bb:be:30:bc:32:c6:00:a7:2a:b1:
                    3b:ce:f9:91:32:4a:54:26:a4:f7:9b:cb:8f:81:7c:
                    dd:bb:f8:da:5c:82:bd:a4:fd:b7:43:03:e6:6d:9a:
                    48:41:a6:22:02:14:07:00:16:74:73:71:54:2f:f9:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:B5:9F:D4:D4:AC:D1:47:E4:50:3E:35:D9:4E:0B:9D:CE:08:A5
            X509v3 Authority Key Identifier:
                keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:71:e6:57:3c:1a:70:7b:db:7f:b0:06:2b:f4:b0:89:d6:c0:
         36:78:7e:ff:9f:44:29:b6:08:c6:ed:9a:74:53:d1:e0:36:8f:
         1d:8e:9e:aa:18:e7:aa:70:07:49:9c:4c:9e:af:a1:69:58:85:
         37:43:1b:61:20:5d:8f:bf:e6:3f:e9:e6:a2:75:d0:f3:e3:db:
         f2:c6:d3:48:2d:df:f9:dd:05:3a:93:7f:33:70:92:76:12:b8:
         d1:8f:f0:6a:86:27:0c:4a:c7:f8:19:2c:f7:e0:eb:2c:71:d4:
         ac:21:60:d9:a1:29:07:90:8d:b7:92:11:3f:8d:db:8b:1f:ba:
         ad:05:04:42:8a:3d:4a:df:e0:9f:2b:13:ca:34:32:e5:e3:b5:
         99:c4:60:fb:9e:85:0c:7e:df:e9:da:06:b9:4e:9a:6a:96:20:
         46:79:3c:28:09:a2:88:b4:ae:74:53:13:25:e9:eb:34:d2:67:
         9e:54:0f:2d:e3:3b:df:a9:37:32:62:0f:98:23:d4:a9:f7:57:
         ae:41:12:5e:ce:1a:e5:79:96:ba:32:60:f5:ca:c5:76:b9:9f:
         13:b1:d8:30:67:61:22:7b:b7:2a:de:b4:ee:fe:b8:7d:49:26:
         d7:42:f6:f6:22:ca:e6:b0:ea:9e:99:e3:b7:9b:cf:b1:f5:4a:
         f7:31:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----