Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File:                     VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier:          /Dm4V3AbuKlQbF4PZuFSNHUfJ4MRwZbG2gF6jh/lO0Q=
Subject key identifier:   98:03:C2:34:07:5F:2F:65:EA:A9:9A:FA:10:6A:30:81:E9:5E:44:C5
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       0194BCE0713C76ABE73960F7013166C32B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number:          093A
Signing time:             Fri 31 Jan 2025 15:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:13 +0000
Files and hashes:         1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=)
                          2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=)
                          3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: Ga2qC3YMZxMPQK3Nhowuw9ddxx3MxxvXLkdgwgSPpPQ=)
                          4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=)
                          5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=)
                          6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=)
                          7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:71:3c:76:ab:e7:39:60:f7:01:31:66:c3:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Jan 31 15:00:13 2025 GMT
            Not After : Feb  1 15:00:13 2025 GMT
        Subject: CN=9803c234075f2f65eaa99afa106a3081e95e44c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:8d:9b:b0:1f:fb:b0:84:81:83:dc:df:c5:
                    a1:6a:0d:a1:6b:49:63:3f:35:68:ea:cb:c5:ef:11:
                    64:0f:dc:d1:40:a4:b2:38:cc:e7:05:2c:e9:f6:b1:
                    08:91:58:21:e2:9c:a6:d3:c1:9b:f2:16:bf:52:b8:
                    29:ca:1b:48:28:6e:16:92:cd:c9:ac:e9:f7:6c:70:
                    fe:24:5d:a3:f5:33:5e:50:36:99:dc:c7:21:55:1e:
                    86:17:44:95:26:3e:f3:fe:3a:f8:3d:fd:df:30:2c:
                    e7:6a:a2:46:ef:c2:6c:aa:6d:70:7e:ef:bd:80:2e:
                    5c:36:f5:f3:18:20:20:fa:e7:11:f4:9c:4e:36:98:
                    98:4c:76:ad:fa:e6:4e:3c:66:01:16:a5:9c:d6:d7:
                    99:b9:c0:f6:78:e9:99:03:e5:fd:9b:6c:78:19:e0:
                    34:78:3d:b4:f6:60:3a:46:45:84:27:1b:7c:b4:97:
                    ed:7b:0a:70:37:7c:e8:94:c3:8a:26:85:a1:1a:4b:
                    84:a9:c4:8b:59:86:60:29:36:cf:e2:a4:04:6e:00:
                    b9:bb:c2:90:53:ea:58:9a:95:50:86:9c:ce:75:4d:
                    0a:da:2a:8b:49:98:57:e0:8b:78:9b:72:98:f9:41:
                    f8:9e:38:4c:ea:de:ad:5b:4d:01:2f:e4:e4:66:71:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:03:C2:34:07:5F:2F:65:EA:A9:9A:FA:10:6A:30:81:E9:5E:44:C5
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:82:7d:cf:c2:66:f7:c1:5d:44:36:66:dc:7f:31:d9:fb:4c:
         b6:f9:d9:f8:cc:c1:52:fa:4e:e1:d1:9b:10:45:e2:ef:e9:50:
         7e:67:82:3c:4f:1f:a1:f5:29:ab:88:53:37:22:21:f2:64:56:
         3d:0a:2f:f8:c7:d5:dd:9c:90:bd:f0:ff:a1:1c:3d:8f:3e:38:
         8f:9d:90:17:43:14:d8:12:1f:75:38:15:84:bd:d7:33:78:22:
         3c:96:ca:ec:5c:a8:ba:2a:6e:9c:76:7a:73:6d:7f:0c:0c:a5:
         43:f7:06:db:9d:27:ff:8e:49:97:4e:f8:0a:9e:07:32:4c:c3:
         c6:9e:08:11:fc:4f:c0:ba:fe:6a:75:33:41:d2:f5:2e:7a:5f:
         5a:69:5d:c0:c8:2f:03:c1:e0:0c:01:13:b0:b4:b9:42:89:c5:
         08:99:2b:94:ba:73:97:13:0a:89:e0:2d:ae:a8:a4:eb:1b:97:
         8e:7c:b1:05:09:da:a6:bc:ad:e1:9a:a4:f1:22:6a:13:da:1f:
         fa:76:ee:f2:8f:fd:6f:fe:d4:11:64:1d:99:29:b7:ba:8d:f4:
         b5:32:00:d1:b8:86:a4:18:ad:d4:50:62:dc:21:f2:6a:bf:e8:
         3b:07:41:cc:88:7f:12:9a:fa:db:39:ac:29:1b:c1:5f:8b:89:
         f2:62:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----