Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
File:                     C6vWgsGo_FA3rb9oFDrnf9APOKs.mft (raw, json)
Hash identifier:          WDAzPESNNry8AUNCFh27spGSRKrOX0JR8FaBwAvLhpw=
Subject key identifier:   DA:07:91:BD:6B:85:68:2E:B0:FC:88:D1:A4:E8:65:5D:DD:D2:0A:14
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Certificate issuer:       /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial:       0194BC0520C9E891D773526D44CEB11132F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
Manifest number:          0512
Signing time:             Fri 31 Jan 2025 11:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:40 +0000
Files and hashes:         1: 1-Smkp6h6clLOytvsZTW7IYXWdA0.roa (hash: ea3w2mh66EAHkh2gpMZxmUqrFjNif7rFJ3Ux5dT6P3Y=)
                          2: C6vWgsGo_FA3rb9oFDrnf9APOKs.crl (hash: NUJytc1TaXZloGg5DVLWXBieQy9kteRJyhbhRuhrbUo=)
                          3: bEDl4F0oErintdjUmPi3KwD4d5k.roa (hash: Sj0vj1Cb+cSjoHj9Gcm8jJEMPloRebSIxFZ4ot1qytE=)
                          4: fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa (hash: spRUtws11ycMpOdqPxogpwVFrj1ssSP4E3wT9grjXjM=)
                          5: kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa (hash: Q8fDVCk74lV9QZSReJUdZzpV1u+rNruWQfm4y3jiGc8=)
                          6: pAEDN-h1-DUGqiGuMkWdVhlgowg.roa (hash: 3zGPa3AJjPYig0kDedAY3IsrPUE9H1fVHWA5Xf9h6RE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:20:c9:e8:91:d7:73:52:6d:44:ce:b1:11:32:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
        Validity
            Not Before: Jan 31 11:00:40 2025 GMT
            Not After : Feb  1 11:00:40 2025 GMT
        Subject: CN=da0791bd6b85682eb0fc88d1a4e8655dddd20a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:35:8b:46:e0:c3:75:1d:40:5d:78:33:b5:
                    95:5a:ba:30:af:d3:81:a2:a3:71:8c:56:b2:55:7e:
                    9e:27:15:d0:a1:6c:7e:9d:54:84:14:40:c8:4c:2c:
                    6a:7d:21:1b:cc:ca:96:2f:5c:19:a2:04:a1:4a:3b:
                    a7:85:a0:47:c0:da:08:5d:ca:9d:71:3d:0c:c8:00:
                    a1:4f:c1:72:d8:dd:a2:ce:46:61:76:74:eb:3e:01:
                    8c:2d:05:72:bb:46:e7:6b:70:b8:33:3a:7b:55:6b:
                    ca:5f:00:e4:5a:1b:2c:0d:ea:e9:e8:52:81:e4:9f:
                    e6:40:ea:bd:c8:8a:d4:67:4e:38:7d:e4:0c:d2:66:
                    1a:49:a8:12:da:f8:68:69:32:cf:ce:17:5d:e7:10:
                    8f:57:dd:dc:f1:88:41:6e:44:ee:6b:92:c9:76:d0:
                    f6:b9:ab:28:f7:3a:d7:80:69:ed:2c:a5:cb:cb:f4:
                    48:4c:44:0d:7c:64:6f:b7:e4:4a:81:53:94:c4:e6:
                    66:75:6e:64:f8:b0:84:38:96:31:b6:ac:5a:f1:18:
                    2a:6f:bd:75:07:22:14:ef:2c:2f:20:5f:63:5d:36:
                    93:47:9f:4b:46:51:8e:e5:8d:47:ab:51:a6:42:78:
                    0b:f2:81:bb:c0:25:5f:47:3a:a6:ec:38:4a:3e:87:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:91:BD:6B:85:68:2E:B0:FC:88:D1:A4:E8:65:5D:DD:D2:0A:14
            X509v3 Authority Key Identifier:
                keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:85:fa:30:72:7f:91:44:96:70:21:b4:ca:41:95:04:89:
         73:b4:e1:a7:78:09:b7:79:6c:fc:87:6d:eb:e7:d6:ca:46:24:
         b7:11:1c:ea:76:eb:ee:71:ee:6b:53:a2:de:49:34:97:a7:22:
         10:39:92:f2:b2:22:99:82:7d:9a:5a:88:b5:12:70:f0:f8:7b:
         01:41:99:ae:95:c6:3d:c2:83:66:4d:3d:d5:07:99:bb:15:9c:
         7d:1b:9e:67:89:0d:5f:c4:99:0d:22:d0:55:dd:85:6f:61:e9:
         53:11:8f:db:8a:4b:7f:00:33:46:f7:93:f2:0f:91:d5:c7:ce:
         3a:e2:6c:d1:1c:64:66:46:02:35:57:4d:bb:e9:ff:8a:cd:21:
         97:ec:f4:61:82:ff:ff:77:dc:99:b3:02:99:86:07:1d:80:42:
         ad:c3:0a:db:05:a4:4a:bd:66:6c:43:21:62:40:63:b5:f7:ac:
         6c:5e:9b:35:80:99:cf:33:ee:9f:bf:0e:37:0a:4e:f1:73:da:
         b7:6a:2c:ff:e2:e6:e4:22:18:5a:bc:8b:7a:b1:4d:cf:70:1b:
         76:37:f2:00:ec:cd:05:a7:fa:2d:13:b4:54:9f:41:83:68:87:
         4b:e6:ab:37:1c:43:4b:a2:cd:59:c6:06:d8:78:b3:e2:5a:16:
         6a:ac:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----