Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
File:                     ZtM30zC6RO_P71VTVRMqaixpeDw.mft (raw, json)
Hash identifier:          Tk2d8GA1EgT2L3H4/ufQSmag2gyEaLZdR0EHMR7VnR8=
Subject key identifier:   5D:8C:8E:81:04:E8:C8:03:6C:80:D8:B2:24:7A:AA:2C:56:36:A7:23
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Certificate issuer:       /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial:       0194BCA9D13EE1033D5474E7A0EF4B756BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
Manifest number:          12F6
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: 1V6f1oV4KdVfTtXD9C3yVDxLM0g.roa (hash: QjrhXSoTLzzQB8pNCdz/57KujYqXNHGX03aljVkY0I8=)
                          2: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (hash: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=)
                          3: ZtM30zC6RO_P71VTVRMqaixpeDw.crl (hash: eDig7L1Ct9q6WFELNIohTrj+BuDPWhTaAROqIGv9CWY=)
                          4: vmCYxXBe6-CXL6B1D1C_4Plw6tE.roa (hash: BOX7FDtGe/sQ9owge+TRj9jp46uxKtCvT9m2x87H1K8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d1:3e:e1:03:3d:54:74:e7:a0:ef:4b:75:6b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=5d8c8e8104e8c8036c80d8b2247aaa2c5636a723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:47:d7:23:b1:73:c7:d7:79:37:4f:2e:72:
                    da:d0:e1:88:1f:df:89:65:a3:fe:9f:ea:6b:f6:63:
                    b3:87:26:65:ca:4c:95:c3:b6:8f:9f:52:8f:42:ea:
                    51:35:c4:d7:b8:b0:6b:77:2f:05:e0:dc:f2:84:82:
                    81:bc:a4:c0:2f:90:fa:c2:87:67:ef:63:5d:c6:ab:
                    93:7b:3c:55:9b:d8:9a:63:a7:07:e7:62:c5:b7:c3:
                    4c:71:da:b9:31:5d:98:3e:e5:32:e1:62:dc:df:45:
                    d5:f4:a4:ae:1d:0f:fb:1d:39:41:63:95:a2:fa:cc:
                    ce:85:2e:ea:26:14:7c:d3:2f:ce:47:16:96:b2:d3:
                    1d:3f:65:76:a4:b9:e3:ad:3c:f3:d7:42:93:a4:ad:
                    d3:fa:1c:c4:0d:a9:c6:0e:ba:ac:c0:ab:32:27:3e:
                    e9:9e:fc:01:15:37:58:25:9e:b8:e3:fa:9c:8b:cd:
                    77:9e:ab:88:8b:5d:f0:3d:be:4e:eb:34:99:17:07:
                    11:8a:d1:44:1c:1d:69:09:ad:cd:18:4b:40:31:65:
                    44:ce:40:75:67:2a:73:ee:b7:27:13:db:4d:5f:57:
                    e8:ec:9a:8b:d1:66:af:3b:4d:20:8d:9d:00:de:69:
                    cd:09:22:a4:8c:82:a2:ab:4b:1e:56:9a:b0:a8:e1:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8C:8E:81:04:E8:C8:03:6C:80:D8:B2:24:7A:AA:2C:56:36:A7:23
            X509v3 Authority Key Identifier:
                keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:81:ad:06:ce:e4:aa:ec:4a:40:ae:eb:b4:12:03:17:e2:84:
         2a:68:c3:9e:25:10:30:d2:5c:19:11:1e:94:90:b5:23:90:e6:
         e6:d7:e7:bb:96:ea:a2:35:21:75:10:32:db:b3:e3:e1:4c:08:
         00:62:77:5f:1f:14:5c:4e:a2:43:a4:b8:3f:67:8f:ad:74:35:
         4d:79:9e:c1:dc:d9:ea:45:a8:c4:65:97:93:d2:6a:46:6c:00:
         8e:32:c3:9e:a0:f0:d2:b4:be:2b:5d:53:22:ca:5d:47:ec:3f:
         d3:fe:b8:3a:da:99:2b:d8:0f:8c:7a:d3:d2:73:fa:23:57:97:
         93:9d:6e:cc:24:6d:b2:82:de:bb:37:c6:25:ab:8b:29:53:3e:
         82:0a:20:90:31:5f:ec:be:43:41:c5:a7:49:9d:85:a6:5d:43:
         6b:e6:5e:5c:d1:2a:3b:4f:e8:50:18:cd:40:2f:b2:40:d4:e3:
         c0:74:35:86:9b:4a:ee:36:a3:a7:0e:5a:04:81:80:2d:86:ed:
         af:df:b5:9b:6a:fe:a4:8e:6f:5c:cc:61:1f:5e:82:87:34:e8:
         e7:04:8a:cc:0d:49:3a:47:f2:ec:f4:74:82:b5:6a:a3:88:63:
         a3:07:bf:4d:65:3e:c4:8b:9f:ae:2e:ed:44:ce:6e:89:62:ba:
         fc:5a:eb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----