Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          CxNSDQh8b0IfZkEIS++8dvxUw10dsbysipBasZ9PjJw=
Subject key identifier:   08:B6:0B:82:4D:87:4C:8F:20:6A:FE:AA:AD:49:47:9C:CC:76:87:C7
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       0194BCA9EF4F8BA5AF3C110688C1C69C9062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          0745
Signing time:             Fri 31 Jan 2025 14:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:40 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: no4p3gkaYuLAGJhWnVkstYNAaxJLHJzXjkmPWyQGJcI=)
                          2: 3UqWODae-W_KRnDyCPYz1_OG32o.roa (hash: y871Jre0p863nPe1CoOGeswcSvdN1WU/WfOE51E+5qw=)
                          3: GCvMpFjTox7n5FmOa5IgrXeN2Mo.roa (hash: Y53wvi3S7ITug5cC6QdZKUB+NY5xkHHiQyyYmB7inpo=)
                          4: GE8S6QweGIt3c85t_rnGab-IpQg.roa (hash: 6PBV94W3VYcFPHikrfHt83RqRfHZjAYrztUDVd5Z6y8=)
                          5: MKXJ66CRttluCaD2As6acb3eAwI.roa (hash: A1bSrmMEPbiNQFfUVIkOSltYihJGIH6EUwYcLxbC5P4=)
                          6: cHT0qzGhhZWWUdosb7dz_r29LkI.roa (hash: LL8UCKvFFQoG00GXqpjxb1DBAQ64iWVLzPMwKvO00IA=)
                          7: fFp4eoz-hCMYvsK7dXrDp_8e8GQ.roa (hash: y7HumSc3YJoxyBoO8b97/GWLbqjWtFMAV/IOwgPMrlM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ef:4f:8b:a5:af:3c:11:06:88:c1:c6:9c:90:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Jan 31 14:00:40 2025 GMT
            Not After : Feb  1 14:00:40 2025 GMT
        Subject: CN=08b60b824d874c8f206afeaaad49479ccc7687c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:30:15:14:81:b7:e1:09:e1:c6:24:f3:f9:
                    9b:3c:7d:7e:cd:bb:e3:dc:c4:96:2c:42:8b:42:da:
                    55:4d:b8:82:86:a9:79:48:b6:d3:20:61:35:1f:5f:
                    ab:4d:61:6c:51:f0:c3:6a:cb:30:4c:db:ed:15:b1:
                    dd:84:21:16:56:cf:ca:e9:3f:97:31:39:4a:b0:18:
                    58:c6:ce:63:ed:d7:4b:18:23:62:e5:77:b0:4f:eb:
                    c1:a6:2f:94:0c:6c:e0:45:03:3c:89:02:31:22:ec:
                    d0:71:2c:8c:bf:97:3a:eb:1d:ea:4d:48:0e:f5:66:
                    fe:2f:4e:0b:c8:42:41:67:52:6e:5d:2d:85:63:3b:
                    5f:2a:7a:dc:0f:bc:f9:14:6a:d7:22:69:0c:86:4a:
                    f8:7a:3e:d4:b8:e7:83:ed:6b:2a:9e:ee:9f:a4:b3:
                    7f:c9:c1:2b:5c:36:1d:29:09:c3:d0:93:27:e9:9d:
                    f9:31:be:9c:61:46:b3:d8:06:02:49:3f:39:1b:ba:
                    ce:27:52:b1:49:c8:b3:33:49:08:82:3a:e9:ba:2b:
                    92:8e:47:f8:60:8e:56:aa:ae:44:19:5a:09:25:5b:
                    33:b0:81:cd:d3:5b:1c:f6:a2:e4:cf:d5:1e:c0:c4:
                    0d:f5:83:5a:fd:1c:ff:a8:98:30:57:8b:6a:4f:16:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B6:0B:82:4D:87:4C:8F:20:6A:FE:AA:AD:49:47:9C:CC:76:87:C7
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:a0:c6:d3:3d:47:58:09:22:51:83:65:36:60:62:ac:2a:
         4f:00:0c:09:bf:11:75:9e:31:08:cb:67:72:bc:a3:a1:4d:e8:
         eb:14:24:cd:f1:dd:f3:0a:06:32:2f:a3:43:3d:88:60:41:4e:
         3a:85:40:7a:92:80:1b:09:c9:0c:b1:b8:53:f5:02:ff:cf:3e:
         ff:4b:2c:3b:73:c0:aa:4b:9c:35:08:6c:49:0a:b5:c8:71:b0:
         97:1f:74:e5:b7:e2:fa:0d:58:2f:84:57:d7:76:73:a1:70:c1:
         e4:1e:11:77:5b:30:74:e8:b0:cd:92:d0:8c:29:db:c6:17:9f:
         a7:19:51:f2:26:a0:43:fd:85:a0:91:e2:b2:c0:a1:aa:37:99:
         5f:1e:f3:b4:87:98:d8:44:db:97:9f:1c:46:f6:2d:8d:be:de:
         c4:6a:a0:40:c8:69:27:9e:96:51:dd:5a:05:b5:36:ea:8b:a6:
         aa:77:e0:86:70:a5:97:95:f1:be:11:67:0b:a8:97:31:9b:e1:
         cb:0a:de:b1:c4:2c:b0:32:4e:5d:4e:88:e4:2f:2c:f5:60:00:
         5a:03:1c:4a:e0:30:e3:93:09:61:9a:aa:d6:01:89:05:a0:46:
         0c:ef:ec:ed:f7:8a:81:9d:32:b9:d7:1b:d1:ee:e5:a7:5a:79:
         f1:7c:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----