Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          DNMSOsfdliTa0WSxcMkluzllwrA6a1q6xwQN06PRHF4=
Subject key identifier:   FB:71:B0:70:A2:E4:92:F5:B1:A6:12:6B:E5:E7:EE:19:F2:E1:2A:E3
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       0194BC728F5BE88EC1E93B01628CE848B269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 13:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:11 +0000
Files and hashes:         1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
                          2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
                          3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
                          4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
                          5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: TzLSRj38SZAgVyvbiC+CnrDMGH7q/Bj61mihuetAeTE=)
                          6: aQlOLPDeolF5uYY7VkMgbIlakC4.roa (hash: S5wKpeaQD33X7vEA4AJwuoJHgqZl5CaYGcEVikwgdoI=)
                          7: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
                          8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:8f:5b:e8:8e:c1:e9:3b:01:62:8c:e8:48:b2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: Jan 31 13:00:11 2025 GMT
            Not After : Feb  1 13:00:11 2025 GMT
        Subject: CN=fb71b070a2e492f5b1a6126be5e7ee19f2e12ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:c6:61:6a:df:6c:ec:72:f5:f4:b5:12:90:
                    46:38:e9:bb:00:a9:50:ab:6a:df:b2:86:1d:4e:08:
                    c3:f1:31:3d:40:4c:16:8d:dc:2d:1e:79:41:81:ae:
                    5b:16:a4:68:e0:3f:51:d8:91:1e:cc:4d:63:6c:a6:
                    f7:d8:8d:95:61:7e:fd:34:42:63:cc:29:d1:6a:b8:
                    e5:94:12:bc:e3:26:c2:89:01:49:1b:0f:63:17:66:
                    e8:6a:1b:07:99:a7:cf:e5:12:24:0e:d0:ce:08:11:
                    ee:85:08:3e:f0:70:db:bb:69:df:3b:02:ff:4a:be:
                    d4:ef:65:30:18:ca:72:0d:2b:7d:55:24:6b:85:f0:
                    5d:85:07:6a:35:de:5b:8f:8d:2b:f4:58:73:2a:fd:
                    05:0e:4f:d0:59:95:53:5b:e8:72:82:2e:4c:de:b4:
                    73:8a:56:99:58:9b:c4:33:7e:4b:ac:b6:b3:71:61:
                    e0:e6:e8:89:39:5f:a0:cb:53:5b:7a:43:b5:f5:85:
                    01:40:2d:11:10:b2:ae:6c:41:21:5a:9b:c1:d5:db:
                    04:e2:d9:a9:b6:8d:33:6a:e0:c4:0a:cc:f8:45:1b:
                    3d:cc:28:c5:e6:a0:9a:50:2c:a6:cc:5f:5a:49:4d:
                    48:40:f3:6b:fc:0e:34:09:cf:8d:db:02:df:da:21:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:71:B0:70:A2:E4:92:F5:B1:A6:12:6B:E5:E7:EE:19:F2:E1:2A:E3
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:61:76:c0:f9:9c:52:27:8f:68:a0:21:1b:cf:5c:4f:94:ec:
         fb:24:60:d7:a0:bf:f8:5a:75:1b:79:83:6f:26:9f:56:50:0b:
         e2:78:3e:59:88:12:5e:a6:a7:2d:fa:be:7a:16:f2:77:cf:86:
         d0:6f:36:22:c3:21:86:00:50:ef:14:9b:1f:71:09:db:1b:6a:
         9c:ee:43:92:ab:54:5d:bd:b1:cc:16:8e:b6:44:40:47:3d:76:
         b3:79:31:75:d1:6e:a4:0e:68:53:94:39:e0:1a:ae:61:50:a3:
         32:00:26:27:d5:83:e7:b2:9e:3e:d4:b6:d6:13:ff:89:e0:d7:
         32:3e:dd:ef:72:d6:38:05:fb:34:0a:86:4c:68:19:7c:45:9a:
         64:4a:b7:28:65:c8:42:32:a7:cc:3d:dc:02:13:0e:1d:f5:49:
         98:58:c2:e6:d8:2d:81:2e:34:2d:a0:78:db:ec:9e:78:d6:2b:
         a0:28:f8:64:c1:31:8a:61:e2:d5:b4:57:14:97:0d:84:3d:15:
         0d:b7:b0:27:14:a3:c3:ed:0f:2d:4b:12:15:f1:61:d7:7d:16:
         c9:0c:cd:d8:bb:ad:d5:7b:53:18:03:a6:95:94:0e:f7:18:7e:
         55:9d:29:e1:e3:38:d0:a7:57:9c:01:81:a8:e3:62:01:07:d2:
         66:33:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----