Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          bduj86Y8yW2nnOAriEzS+ln5rrOpliwWuzC0YfkEV3w=
Subject key identifier:   06:FB:A3:4D:9F:35:E4:1E:7A:3B:1D:6E:F4:57:A8:48:A8:29:51:12
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       0194BC3C6DF19C13DC7F4DCF8E458D55C899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 12:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:04 +0000
Files and hashes:         1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=)
                          2: 3IjZ5GRES4txzqQX4Qcixk66Q2s.roa (hash: q4Y0aGLsnwyGE/1lp5HXd2+BQA+1jawV7hj7BbQPFKY=)
                          3: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: 9qQqkwEsZCkaGeegzxMuQ/LNhWr7BQKyeVit4Xuyvog=)
                          4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=)
                          5: iLH36GyszubyOM15YNbYemlm46w.roa (hash: XNy3lZbScyWkaFoNgj57X+jgQy4sDxLzv1TtCdTKbN4=)
                          6: r1g2Xsdzu30zPFlJCXwy2iO_jT4.roa (hash: wdA8I6DrFVDPzdpOfzRSwcg9nRPW/Sj5Vb9OhkcS/wA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6d:f1:9c:13:dc:7f:4d:cf:8e:45:8d:55:c8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Jan 31 12:01:04 2025 GMT
            Not After : Feb  1 12:01:04 2025 GMT
        Subject: CN=06fba34d9f35e41e7a3b1d6ef457a848a8295112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:db:08:9a:f7:e9:ef:85:82:6f:73:1f:94:
                    4b:81:cb:68:05:a0:d4:dc:4c:23:58:12:a7:6e:31:
                    13:a0:25:2e:81:6b:00:b3:18:c1:4b:dc:00:a7:40:
                    32:a0:51:b2:ad:98:bc:5d:97:a2:54:a2:bb:a3:14:
                    1d:88:38:84:f0:17:12:72:bd:68:2a:f2:6a:f8:96:
                    68:91:ad:3b:7f:1f:f1:fc:db:01:78:c8:39:6c:4d:
                    8d:5a:78:12:f0:80:42:5a:59:b5:c1:f0:3c:68:77:
                    1d:f5:80:11:9c:72:2c:cb:92:e6:8d:8f:03:de:84:
                    1d:90:8f:57:e9:77:ff:4e:58:4b:2c:ac:c1:e7:13:
                    b3:80:c6:a9:4c:2f:1a:d7:e8:a5:24:99:7c:df:61:
                    09:3b:47:f6:e3:b1:a5:48:fa:3c:23:a4:13:2b:f5:
                    6c:16:61:9c:11:4f:c6:94:92:c7:f2:f5:34:de:a8:
                    0e:e8:1f:3a:5c:38:1e:2a:58:56:e6:75:35:28:df:
                    4f:e0:00:8f:78:5b:20:b8:31:96:7f:56:f2:a4:74:
                    d2:39:f8:6f:7c:6e:f3:e7:49:e0:c1:c2:c3:bf:50:
                    cc:51:e7:d1:c8:f3:87:35:f0:45:37:82:01:93:41:
                    e8:d6:ce:21:b5:6b:94:66:1e:27:a8:e8:0e:c1:4a:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FB:A3:4D:9F:35:E4:1E:7A:3B:1D:6E:F4:57:A8:48:A8:29:51:12
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:f6:24:18:49:39:5b:26:de:ab:54:e8:c8:49:ba:f4:a3:
         72:6c:72:3c:3d:83:ef:7c:ab:c0:12:10:72:80:1f:eb:b1:98:
         c0:39:60:3f:cb:c9:a4:e8:7b:ce:d0:92:b2:06:9a:5d:e1:b0:
         bf:74:90:0e:a5:dc:7b:e4:ef:59:1f:b7:b0:19:b6:2c:14:b3:
         9d:78:a4:ea:f7:3f:15:73:1e:ed:fc:aa:fb:de:93:c4:e7:cc:
         7d:84:74:db:53:9a:bd:68:64:35:42:bf:2c:f6:10:61:7c:8e:
         fc:c8:ce:a6:2e:96:a5:9e:ab:29:b9:a2:35:f3:78:e2:52:e5:
         1a:55:11:61:97:9b:f4:74:e8:8b:4e:6e:de:19:f1:fe:21:85:
         70:85:5e:c9:4c:16:f4:b5:f0:14:a9:28:df:0e:87:53:48:78:
         49:60:fa:d0:81:ef:31:55:33:88:86:7f:d9:8e:3b:99:ea:2c:
         14:a6:84:3a:47:6c:b9:32:d5:12:c4:6d:37:16:d0:02:9c:63:
         85:6a:32:7f:42:08:ae:57:0c:cb:f2:32:3f:1e:18:eb:ad:44:
         e3:08:d2:e4:dc:58:08:fb:99:e1:d7:12:2a:b1:c8:13:f1:be:
         f9:b1:44:60:65:d4:1b:d6:66:40:e4:2c:1c:40:ee:35:b1:27:
         39:9b:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----