Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          Ufryec0dvfo0y02pJDsmAht0GBvSVad3X0YPxub/ym4=
Subject key identifier:   65:3D:E6:6A:70:88:B0:5E:7A:BE:5A:8E:06:28:A6:97:E9:10:52:8C
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       0194BC3C64C20C6FB591931A98977C22B37E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1232
Signing time:             Fri 31 Jan 2025 12:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:01 +0000
Files and hashes:         1: 9dLAFBA3yZtxQ3Sz-i3bboY76i8.roa (hash: XKwu2dm5EiilAMiU6vQWAsMs3u94DmEeOaG3OlX3RRc=)
                          2: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          3: mLzt7xGUveLWBI5KBd3nPnlkK34.roa (hash: gBHkMYqm2CFNHYl0R32/z6OsqeoYFanglt5qYzw7wHQ=)
                          4: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          5: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: lnZ+m6B1bB6sQKwa5djXWK+Tyv1P65r1KW1lVkwB0Yg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:64:c2:0c:6f:b5:91:93:1a:98:97:7c:22:b3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jan 31 12:01:01 2025 GMT
            Not After : Feb  1 12:01:01 2025 GMT
        Subject: CN=653de66a7088b05e7abe5a8e0628a697e910528c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:0c:a5:e2:a3:96:b2:fd:e1:78:e4:99:1b:
                    52:88:74:d9:f7:55:d8:93:d3:05:4a:5b:08:b4:07:
                    51:e0:6e:3e:bc:79:e9:b6:47:e2:e0:f9:b7:16:3c:
                    4c:c0:0c:f1:ae:93:fe:15:e5:ab:c7:cf:b8:55:08:
                    9f:ec:b6:f6:b5:87:50:df:0a:04:e7:b7:f2:9a:3c:
                    a1:2c:0a:6b:eb:f2:b2:e2:b6:40:26:b6:03:ea:a9:
                    73:0b:56:42:c6:1f:37:35:7f:eb:65:16:bd:70:fd:
                    94:72:e2:f6:f4:17:88:7f:6b:eb:83:58:be:eb:2f:
                    03:da:4c:47:ec:2d:e4:7b:8f:8f:f7:ea:98:e7:08:
                    2f:1b:9f:a6:d0:63:a4:e6:f3:54:2e:93:70:34:9e:
                    d3:05:99:7b:18:d6:df:fe:31:23:66:a6:25:83:98:
                    d6:b6:89:60:d1:9e:0d:90:e3:9a:d4:f5:18:0a:a6:
                    5e:72:b9:80:84:b7:95:ac:31:fd:1c:67:74:42:73:
                    6b:12:61:c2:0c:8a:57:fc:0c:ed:c1:d9:48:0e:89:
                    18:44:67:b4:57:be:9d:ab:96:bf:48:dc:3a:61:99:
                    de:06:62:9f:75:26:5c:10:6a:e7:9e:41:ee:29:7d:
                    00:94:01:e8:45:92:32:ba:9a:cc:43:de:3b:00:d7:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3D:E6:6A:70:88:B0:5E:7A:BE:5A:8E:06:28:A6:97:E9:10:52:8C
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:2e:d3:b5:37:3e:ec:68:2f:6e:db:41:1c:17:32:73:e2:
         8b:d5:ac:e7:1f:d7:56:03:95:e3:d0:e1:d9:6a:41:19:84:ed:
         f5:83:92:08:57:de:e6:26:53:de:26:9b:6a:12:cc:48:69:a5:
         25:8c:66:4b:b9:2b:13:7c:b9:38:1d:73:1b:49:89:95:eb:82:
         b8:9a:c8:db:d1:66:d1:bb:7e:b5:ab:4d:63:9d:c5:1b:2b:70:
         73:ae:76:e5:21:25:3a:df:5c:53:f0:34:95:d5:09:89:74:bf:
         a7:31:95:ca:c0:30:96:8f:95:41:23:1a:0d:98:43:0b:54:55:
         eb:79:2d:df:c1:7c:dc:75:de:77:33:f9:8f:a3:61:2e:a9:a5:
         82:fe:43:af:66:4e:96:ef:5e:42:7d:5d:ef:1b:6b:f3:92:a9:
         97:39:7c:9a:35:f6:09:89:be:74:d8:4b:c8:4f:ff:52:31:be:
         2c:14:60:ff:c7:25:f2:43:86:6f:a8:95:00:12:d4:7d:93:00:
         f6:27:45:f7:13:0d:f4:f1:c4:9c:da:52:56:aa:ff:e1:77:03:
         0d:ef:9f:b6:d7:f4:ee:96:c1:b5:8d:f3:8e:c3:b4:12:4c:78:
         81:05:62:01:ce:fb:62:4d:5a:c7:93:98:5c:4b:58:93:d3:5b:
         a8:1b:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----