Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
File:                     9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft (raw, json)
Hash identifier:          7PlnMDpnDHZXXUJ78Wsz/kAv8BN/WQUTn5n4049vYac=
Subject key identifier:   CD:01:85:80:D8:FB:B2:8D:2D:AA:F2:87:BD:2B:BE:9A:C2:07:C5:48
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Certificate issuer:       /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial:       0194BCE0D6E8D7DE651A82505C9C1779351C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 15:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:39 +0000
Files and hashes:         1: 6jJiKZ8OqfMQQiwAGfF_REinVvg.roa (hash: dMHNj/i64l7thI3ogWvnJHev0VMEJdnc6dU3VLBoezs=)
                          2: 9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl (hash: 9dF5fKD8TnuRkbH8L98CavJw3uLrilpD/tT6TiIMpg8=)
                          3: IVrRWFI1ry1_t1jTghjesJBZcQ0.roa (hash: Gd14w4+1RfDgCwueX1ZHqk/dUawCUFDofpaoy6972KE=)
                          4: O_-r6AZIiVVlfZFZ-YEHc0Z0UaI.roa (hash: HQvPmYszPim0o6HOq+UD08ZfUFe24TEf6qmSm4Gtkuc=)
                          5: fAbOIbHK5-PVtXMOGIO2S4Xc80s.roa (hash: A/R1dGee9i9ll3uzH2uvDgQFeaI46CgRuWCcx8V04Lc=)
                          6: pnlRPUhZWx-18cN9NyZhKYkt_80.roa (hash: 4GEIDeArajdM/SlgOWHtHJwQGutC5XfeEODamrmD5BE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d6:e8:d7:de:65:1a:82:50:5c:9c:17:79:35:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
        Validity
            Not Before: Jan 31 15:00:39 2025 GMT
            Not After : Feb  1 15:00:39 2025 GMT
        Subject: CN=cd018580d8fbb28d2daaf287bd2bbe9ac207c548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:3d:20:e1:fa:53:6d:3e:76:92:2a:8b:b0:
                    60:7c:50:7b:64:3a:67:8b:55:70:9e:97:2c:66:93:
                    78:52:24:d2:de:d8:d0:1f:80:f3:32:05:91:1e:51:
                    31:cf:98:79:cd:e4:49:04:6a:42:a4:fd:25:35:9c:
                    53:cc:b7:07:3a:67:5b:f5:69:fa:4d:c6:9e:2c:28:
                    83:f0:83:2d:e9:5d:57:a9:e9:86:ba:2e:cb:52:e8:
                    3c:da:10:dd:ec:96:12:fd:0d:c7:1b:b5:09:ad:60:
                    c9:52:36:7c:24:8a:96:46:55:fc:ba:20:1f:72:b2:
                    2a:75:19:4f:bd:81:03:af:c2:49:ee:20:c9:1b:61:
                    08:2c:1c:d1:ce:ff:7e:98:9c:72:33:47:c6:d0:b6:
                    cf:cd:15:3d:5c:b3:f2:56:c7:e4:c4:26:2a:61:82:
                    6a:44:20:f6:7b:4e:4f:1a:c7:36:4e:41:fd:1d:84:
                    87:36:52:b2:e2:d7:94:8a:78:d5:e2:1c:28:a0:4b:
                    5e:0d:03:0e:8d:92:60:fb:18:ad:15:7e:c6:63:f0:
                    42:75:45:4f:80:d8:67:32:54:0f:b3:b3:5c:70:d3:
                    ce:7e:e2:7e:5f:c8:18:8f:d0:21:30:15:7c:34:51:
                    b5:3c:41:a9:16:cd:ca:02:b0:a6:b2:f3:80:cd:a1:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:01:85:80:D8:FB:B2:8D:2D:AA:F2:87:BD:2B:BE:9A:C2:07:C5:48
            X509v3 Authority Key Identifier:
                keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:43:70:61:bf:e4:33:3e:21:7a:fb:78:dd:6f:1f:29:22:
         51:46:79:b1:ed:c9:9a:70:68:d8:0c:bc:3e:ed:a7:8b:75:fe:
         66:2a:de:f1:fd:44:ee:0e:3e:bb:e6:a1:f5:21:ff:b6:59:0e:
         f3:84:6c:f1:07:a1:2c:5d:b6:75:1b:51:b6:dd:45:cc:7a:fc:
         4f:c9:c7:47:5e:b6:2a:8d:6e:67:83:54:c7:85:94:13:8f:42:
         a8:6a:88:ab:3a:90:c8:11:44:ee:2d:1e:0e:94:26:d3:db:47:
         74:b8:ae:73:64:fd:68:09:d9:a3:c9:7e:c3:f5:21:4b:61:64:
         4d:27:c8:1f:30:8b:57:63:2b:50:f1:b1:a6:35:0e:35:13:7c:
         16:b3:ae:5b:03:50:52:7f:13:45:82:f0:85:8a:e7:52:fd:98:
         ef:65:3e:26:fe:35:50:a7:9a:74:fb:2c:74:1e:24:98:f5:36:
         e3:a9:0e:71:11:1e:7e:9e:67:6e:c4:bb:c2:5c:d2:dc:7d:a3:
         f3:b7:fa:13:4a:e2:5c:0f:bc:c6:00:e9:5c:d2:83:96:5e:a9:
         cf:cc:57:1f:93:cb:30:dc:f3:c2:85:e4:07:cf:03:89:b2:16:
         1f:f2:27:76:ff:a5:79:81:7f:0d:9a:56:07:fe:b3:58:19:45:
         1f:4a:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----