Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          WRv3CkEKhZCH22AOXpx2A/1JxovvAYjMBSg8wtmJpA4=
Subject key identifier:   81:A1:5F:A3:30:07:6E:94:B2:34:1E:A5:DD:FD:91:AB:24:49:FC:32
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       0194BC3BE36D8D81C40EE6C9BA2EE3241E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          0FE9
Signing time:             Fri 31 Jan 2025 12:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:28 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: eBZJ1n3gDgONB6nsdA96/Tk/ggyhoAzhHKKEvV8etkE=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e3:6d:8d:81:c4:0e:e6:c9:ba:2e:e3:24:1e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Jan 31 12:00:28 2025 GMT
            Not After : Feb  1 12:00:28 2025 GMT
        Subject: CN=81a15fa330076e94b2341ea5ddfd91ab2449fc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:87:24:aa:28:60:c3:55:e5:d5:41:81:54:
                    39:9e:46:34:be:ae:ed:e5:d2:4f:ed:b9:2b:4d:c1:
                    9e:19:0e:07:c9:a8:e6:33:0f:92:79:0a:01:c0:6b:
                    eb:da:33:a0:06:26:b2:13:ff:01:87:28:42:ff:13:
                    2f:cb:46:13:7d:1a:47:2b:c6:eb:ef:b7:5c:d2:89:
                    ed:fb:1d:ab:51:5e:91:4e:83:ee:8b:2d:f5:46:52:
                    24:0c:16:30:a7:fa:2d:ef:64:cd:ed:ae:bc:51:4e:
                    47:c3:58:a9:36:31:c1:e7:3f:2e:b2:d0:d3:ac:8f:
                    3e:3e:12:c5:72:95:d2:a7:f5:1e:1d:7e:fe:04:e9:
                    3d:dd:a3:53:98:76:94:c7:27:d9:3c:18:85:cd:22:
                    ac:9b:9a:52:6b:e2:87:23:e3:97:29:10:37:27:e4:
                    b2:ec:d9:a2:ff:d1:4f:45:52:8d:01:e4:86:0d:5e:
                    01:32:9b:32:9b:e6:ca:0d:20:36:cb:6d:6b:b4:b6:
                    70:ee:f9:3f:6f:cb:ad:1d:87:d5:cd:a6:af:84:13:
                    eb:2c:ca:ed:69:09:eb:7f:ef:5b:4d:a0:87:29:3a:
                    92:84:ff:76:1b:1c:62:74:b1:be:89:a1:f7:42:66:
                    75:b3:9a:0d:25:44:c1:5a:8e:02:59:21:49:49:95:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:5F:A3:30:07:6E:94:B2:34:1E:A5:DD:FD:91:AB:24:49:FC:32
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:48:08:23:39:5a:6d:a1:1c:a8:91:59:e0:b7:d0:07:29:04:
         8b:b3:46:64:c0:e7:e9:27:76:7c:e6:bc:9f:15:4b:e2:53:c9:
         d1:36:d8:67:86:28:93:74:25:fc:c3:b8:35:cf:0a:92:32:55:
         76:7e:5a:50:06:dc:00:96:89:62:66:98:20:6a:a0:75:ac:17:
         79:aa:ea:ba:c6:8c:71:cf:25:b5:11:cc:97:af:0d:21:4b:d5:
         b7:33:5a:c2:0c:22:32:71:56:df:77:d7:29:1c:f1:11:5f:29:
         c8:34:9a:75:07:00:0c:99:c2:bd:b6:9c:e8:da:c6:74:1a:97:
         1c:76:cb:d8:11:47:f0:1a:5d:48:a9:0d:ab:94:1d:00:f8:0c:
         a5:81:2f:db:47:18:cd:80:4f:18:a7:6b:ed:a2:50:eb:d1:8e:
         22:48:92:47:46:8f:52:ba:7a:f5:1b:8b:ad:0f:73:a9:0b:44:
         b0:7b:2a:ac:ec:e8:25:fb:6c:10:0d:cd:6f:8c:60:6b:f0:43:
         f3:34:be:b8:19:9f:78:3a:16:37:bd:b5:a0:d6:71:b5:ae:ed:
         60:a5:b4:8e:be:e2:89:93:42:83:7d:4b:bc:96:98:b7:f7:3b:
         79:36:f7:11:f8:02:76:28:9b:55:05:b7:58:c7:fd:dc:6b:8d:
         d3:c7:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----