Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File:                     z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier:          YKHbyoL5Fv7jWwwZFfJnKz21PS+zEj3yOKUM+PWhbtY=
Subject key identifier:   08:CD:18:3A:DF:AF:96:DF:CD:C8:6A:21:AD:22:D3:F5:34:D8:13:F3
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer:       /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial:       0194BCE08C1C43D4158644595609D8998B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number:          01F2
Signing time:             Fri 31 Jan 2025 15:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:19 +0000
Files and hashes:         1: C3s5o6S6iMFqA5kUnPyNkOVDKSM.roa (hash: H3u9mvJ7SuTZccRd+wWwmhJZK9bvIglyqc2Q2wLWS1o=)
                          2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
                          3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
                          4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: uH4bvrRbyYpyDQtHE5O6xbXABmOJKGYeF+QONyNMScc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:8c:1c:43:d4:15:86:44:59:56:09:d8:99:8b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
        Validity
            Not Before: Jan 31 15:00:19 2025 GMT
            Not After : Feb  1 15:00:19 2025 GMT
        Subject: CN=08cd183adfaf96dfcdc86a21ad22d3f534d813f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:c0:c3:bb:71:a4:d2:5f:76:18:16:70:ef:
                    8f:de:49:88:a5:8b:13:b0:00:ad:49:04:df:f0:e2:
                    1a:b3:5e:61:25:29:b2:4f:37:8a:6b:cd:94:b2:a3:
                    c9:84:20:be:97:49:5a:38:7f:a6:91:59:ea:94:b1:
                    87:00:1a:2a:e0:08:53:81:9e:c5:89:f7:88:c6:50:
                    8d:54:4d:93:33:e6:6f:bd:de:79:fd:55:fb:96:4e:
                    07:28:f8:d2:67:f6:9c:7d:b0:63:55:6e:98:58:7a:
                    51:05:e8:79:b7:e8:bb:bd:0a:15:0c:42:bc:56:24:
                    16:91:8f:4d:9c:75:5a:32:25:10:e4:60:86:bb:4f:
                    b3:92:5e:0c:4b:06:d7:50:8a:24:f8:19:e5:f1:76:
                    5b:80:2e:14:0a:f1:10:0a:0f:a0:05:30:4e:b6:5b:
                    b6:d2:ac:16:e6:cd:25:71:c1:ca:d3:05:0b:3b:01:
                    50:a5:b1:7e:79:c1:69:95:bb:82:1b:a9:92:f8:91:
                    fb:a9:aa:fa:ef:75:44:0a:f1:5e:fd:20:98:94:53:
                    a5:18:f3:ab:df:f4:9b:4f:2b:e4:0a:0e:17:fc:a7:
                    56:e0:56:a3:41:95:db:11:f5:88:41:c9:8f:98:d4:
                    ad:2c:80:fa:75:5f:0f:c3:03:02:51:b5:96:c1:9e:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:18:3A:DF:AF:96:DF:CD:C8:6A:21:AD:22:D3:F5:34:D8:13:F3
            X509v3 Authority Key Identifier:
                keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:31:9c:cf:8f:91:5f:6f:35:30:ef:7f:18:50:59:4e:5c:
         38:28:4a:3a:6d:93:8f:09:e8:87:ed:6e:83:65:af:35:05:16:
         6c:a3:f2:7f:8d:e2:18:ec:60:98:66:35:e9:b0:27:8b:3c:26:
         ca:c9:c5:46:9d:b8:93:65:fc:dd:77:1a:a3:22:17:95:35:74:
         e5:18:45:aa:fc:34:01:05:36:72:ef:7c:93:bf:bd:1b:a4:d8:
         92:96:70:84:f5:8e:0a:25:f4:b2:49:0b:d0:4f:1c:45:b0:39:
         21:6d:9f:df:6d:ad:c5:96:57:e6:c4:51:4c:01:b8:b5:33:b9:
         48:d6:eb:68:fc:be:d3:52:c9:a8:a3:13:dc:be:7f:7d:d8:4c:
         a7:57:3c:7a:11:20:a2:f8:22:74:83:6c:fd:8a:48:aa:d2:da:
         f6:f5:7e:e7:09:db:0e:f3:74:18:ad:77:cb:7b:88:3a:62:b7:
         51:03:a3:7e:cc:ae:f1:75:dc:5f:28:c4:51:74:95:ea:f9:f9:
         68:fc:7a:a6:9a:23:90:6b:a4:26:d4:2c:da:dd:50:20:9e:dc:
         77:7b:a5:a6:28:93:ae:19:5d:75:d5:1e:e6:bf:59:d3:03:44:
         69:9f:73:ba:b6:00:fc:db:2f:89:4e:b4:d4:1a:c3:90:f7:6e:
         80:e3:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----