Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          23TcbHnO+IXmm/aOkJfZ/i3sG0kgwTv3yCcYyDmjka4=
Subject key identifier:   7E:56:B6:93:6F:15:31:35:67:D9:D3:43:8C:FB:AC:58:97:FD:04:BC
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       0194BD85AA79365646CB08B0020BB8078823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          0CB4
Signing time:             Fri 31 Jan 2025 18:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:41 +0000
Files and hashes:         1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=)
                          2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=)
                          3: M_PuTLErPj8kaXkeBy5OmHYauuI.roa (hash: uCFRQj0T8LOt3CixbitxMiJ5LrW2V3WIxaXqvYOfbSU=)
                          4: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=)
                          5: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: HHcDoW5SoL4vrAUtAFK2+bPdy6LuL5TZ9ck8+OZumAA=)
                          6: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=)
                          7: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:aa:79:36:56:46:cb:08:b0:02:0b:b8:07:88:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Jan 31 18:00:41 2025 GMT
            Not After : Feb  1 18:00:41 2025 GMT
        Subject: CN=7e56b6936f15313567d9d3438cfbac5897fd04bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:62:1e:f3:a3:81:73:b2:6d:95:cd:d0:25:
                    29:0f:9c:80:b8:40:06:cf:33:fc:ed:a5:4b:f7:40:
                    6d:fd:02:32:df:09:7c:aa:7b:7f:0c:70:14:d8:8f:
                    a2:57:73:17:a1:0d:3e:32:6b:6a:7d:28:ad:10:bb:
                    bd:4b:e7:82:ba:90:e8:5b:25:f7:ab:75:93:00:5f:
                    f9:2b:d4:90:de:15:e2:cb:cf:84:15:89:d0:ea:97:
                    2a:b7:09:ad:39:96:77:8b:70:5c:41:55:79:0a:1d:
                    08:f8:cc:23:0d:d7:b1:98:d3:a9:7f:05:68:85:9d:
                    69:d2:89:a4:58:4e:65:8c:12:c6:5a:73:1d:ec:a9:
                    0b:be:71:b1:e7:76:23:41:57:ed:31:0b:c1:43:fc:
                    56:8d:1c:26:82:d7:cc:3a:60:92:c9:83:ee:70:89:
                    e8:85:65:5d:21:f9:3b:dc:91:16:13:88:dc:bc:aa:
                    63:e2:ec:6f:23:2e:5a:ff:b1:c8:e6:11:cf:65:fb:
                    6c:60:84:65:7a:12:58:cb:6d:75:a5:e2:4a:0f:be:
                    4d:05:8c:19:c2:31:cb:d2:30:d5:d6:e1:54:e3:bb:
                    d2:36:ea:43:9c:20:7a:ca:be:40:5b:f6:58:1b:a3:
                    6d:6b:fb:f8:e4:38:28:1c:0f:5e:c1:6f:68:20:34:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:B6:93:6F:15:31:35:67:D9:D3:43:8C:FB:AC:58:97:FD:04:BC
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:fe:e0:15:e9:68:21:2d:2e:16:fe:02:b2:0c:d8:23:51:
         f1:62:36:4a:15:8a:bb:68:40:52:c1:19:cd:c0:d3:fa:fa:55:
         f7:4a:37:f6:1b:a5:89:aa:bc:0d:35:05:da:ba:33:19:de:09:
         28:8f:de:11:ec:e8:31:7d:49:c6:ef:3a:38:0e:fb:46:de:9f:
         d1:c8:1d:17:b9:38:5b:40:66:4e:fd:33:d4:d5:71:5e:a0:97:
         52:c6:e9:27:0e:11:b6:40:ac:a2:4c:0a:1a:c1:13:ad:15:2a:
         fa:98:76:de:95:09:47:ba:09:14:4b:4e:a2:bd:c8:17:bc:9c:
         d8:32:e2:b4:a4:7e:54:44:ee:b5:1a:4c:58:54:64:10:39:b4:
         ef:6b:21:03:55:4d:35:d1:3e:57:55:1e:06:23:38:dd:74:30:
         6d:c8:63:e2:95:70:c1:ae:23:ab:c0:41:24:0c:6f:c1:06:1f:
         6d:a4:01:22:e4:f1:55:b9:d1:32:65:24:0a:b9:e8:82:5b:77:
         9a:4d:49:34:76:44:9d:72:4a:b2:a0:1b:5a:0d:bb:6d:7b:e2:
         28:c4:19:94:17:f6:df:3d:52:f8:c9:ad:18:1d:40:b2:1a:67:
         87:2f:4d:d2:e0:d8:f0:7d:c1:0e:f2:40:d8:a4:e7:f2:c1:c6:
         fe:4c:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----