Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          wgzvr3xOQ9GxCCxrAR8dujr5sD8YwAW8bykmCiLwAcw=
Subject key identifier:   76:2B:F0:9E:C6:09:21:34:F1:35:8F:F0:58:08:C6:F1:E4:2A:53:2F
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       0194BCA975FA5C8B34D169EF308F546F2A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0A0B
Signing time:             Fri 31 Jan 2025 14:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:09 +0000
Files and hashes:         1: D_sfllHI5TzCkYD0Z5hvgkOAOO0.roa (hash: KBw8uNegI1likM+lcntvt8t6qBJCobyyTtYYssV5f34=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: NLZzCJWg_gZSCvlQdBDguC1tG3A.roa (hash: uUu1Zmc6Dao8the9v8+FvKLmscuKfmsdWKqnuAaPYVs=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: CpvB3O7/7fLbo3CIsl5wc6FHjXyitdu77vn2OhV5K1U=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:75:fa:5c:8b:34:d1:69:ef:30:8f:54:6f:2a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Jan 31 14:00:09 2025 GMT
            Not After : Feb  1 14:00:09 2025 GMT
        Subject: CN=762bf09ec6092134f1358ff05808c6f1e42a532f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:93:80:49:d9:cd:54:b1:42:b6:85:30:06:32:
                    a5:6b:d3:84:cb:e0:11:7f:11:f6:b3:16:94:6b:64:
                    dc:87:94:00:1c:23:a2:7d:ce:16:30:e2:6d:6f:e4:
                    94:0d:28:2b:b1:3c:c6:53:bd:5d:1d:d4:65:a0:86:
                    a4:c1:f3:22:8c:38:dd:83:07:24:70:3f:af:dd:ad:
                    1f:6f:70:2e:1c:72:6a:fa:b9:f9:0b:51:f9:80:a7:
                    17:bc:fc:76:8e:3a:9b:2a:91:c3:23:ad:af:6d:e4:
                    9c:87:fc:47:32:f1:e2:af:f5:16:51:e4:94:82:38:
                    0c:0d:fd:fe:32:97:d8:7f:d1:21:c2:ac:9e:51:89:
                    a9:fc:88:10:0f:13:a8:b3:6c:7f:87:07:ac:08:06:
                    4d:c6:b3:5c:44:50:32:84:f4:e0:45:ed:07:68:14:
                    cb:df:24:b7:56:29:45:df:fb:2b:19:fe:0d:4e:cf:
                    f5:25:cb:56:01:39:a2:4b:6b:08:de:e4:fb:74:82:
                    a6:3a:b1:a9:c7:22:0c:e9:e0:36:da:d9:3c:4e:1b:
                    ee:cc:0d:da:27:86:a6:8a:29:8c:5e:2b:dc:13:6c:
                    42:87:c3:2a:5e:ce:3a:2e:67:fe:b6:49:9d:18:7c:
                    a7:d3:a9:54:97:e9:90:97:8e:1a:d5:e4:d9:93:a5:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:F0:9E:C6:09:21:34:F1:35:8F:F0:58:08:C6:F1:E4:2A:53:2F
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:12:d8:b4:50:7c:26:93:2c:68:80:fd:cc:9d:d7:f2:af:6e:
         68:31:43:e4:a5:0a:51:b8:79:96:44:0e:4e:c7:13:41:6a:bd:
         aa:cb:23:38:ef:5b:d6:25:fc:37:17:85:a9:92:d1:4d:42:2c:
         8e:55:b0:ba:1a:0e:50:2d:36:b4:7e:5d:94:fc:35:b1:fc:f7:
         7b:02:da:fc:25:5c:2d:15:73:40:b3:9d:ff:5c:92:41:61:80:
         dd:ed:6a:46:97:75:9b:b7:77:e6:52:36:45:5d:e6:73:ab:32:
         da:1f:34:a0:6d:a1:29:9a:fc:c5:cd:18:af:e7:c8:d8:d8:12:
         99:60:f7:88:ef:cb:80:33:58:64:08:71:69:02:2b:e6:28:95:
         01:95:72:b3:a5:ae:6e:f4:1d:b2:d7:49:e2:3a:4f:e1:19:2a:
         0c:c2:ff:40:c3:d9:f6:74:26:b1:a9:fe:f4:28:f8:da:82:be:
         f1:9b:9d:fe:af:94:85:bb:3c:cb:5a:ee:64:85:93:84:cb:d3:
         3a:0a:34:9c:4a:76:ca:cf:d1:8c:c4:5d:fc:e6:6a:00:1e:70:
         ab:7f:3e:07:59:5c:5b:5e:af:37:e2:e1:3c:82:5e:76:34:6a:
         61:67:f5:c8:d4:67:72:86:01:e5:83:46:32:9f:1d:8e:82:2a:
         83:90:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----