Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          CsXxGwDsAbMuJgMq8BY0+XIWOO9jc+7kIVrweHJ1XV8=
Subject key identifier:   6A:AE:E4:6E:F7:8C:C0:AA:47:C9:7A:21:2D:12:0E:4A:9D:8F:E1:B9
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       0194BBCE95F611DDF3BFC48924A1E9DA46BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 10:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:05 +0000
Files and hashes:         1: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (hash: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=)
                          2: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: DzmVFhGSrHaTxwupNk7uyQk97GSHtgazI3EiBxe1ZJs=)
                          3: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (hash: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=)
                          4: rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (hash: o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=)
                          5: wpH7An9OGaqDDHbjqAXOYrzTOjY.roa (hash: 2UBnZqOnnI+7jNrBotsNcwolkfZL1bsPGHesYmJ3hac=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:95:f6:11:dd:f3:bf:c4:89:24:a1:e9:da:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Jan 31 10:01:05 2025 GMT
            Not After : Feb  1 10:01:05 2025 GMT
        Subject: CN=6aaee46ef78cc0aa47c97a212d120e4a9d8fe1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:a9:c5:ca:f8:57:d1:ef:e3:4d:6a:b8:00:
                    fe:bb:30:d5:7f:8d:82:32:0d:82:5f:9f:a4:cb:a3:
                    1a:f8:15:3a:a2:68:e0:8b:76:fd:fe:3c:9b:1c:1c:
                    11:07:c7:16:9b:60:b5:00:2f:a0:c4:52:7f:ea:b3:
                    c1:4f:a2:79:53:b5:75:03:a4:b8:33:ef:85:0e:45:
                    eb:dd:f1:3b:ba:83:b1:85:13:47:8d:c1:48:bb:6b:
                    e2:be:cb:66:4f:20:76:3f:2c:86:f6:bc:11:4d:18:
                    25:5d:76:f9:af:bf:24:70:e4:ef:da:19:40:05:1f:
                    bd:48:83:39:dc:2f:c8:d8:2d:b0:ed:6c:b0:79:7f:
                    ff:b2:11:0a:c0:ff:a8:82:f9:67:55:90:da:2d:6d:
                    62:a9:71:f0:9e:ee:89:e7:59:ba:9e:95:b7:25:29:
                    e2:20:23:83:23:83:c3:61:e1:e6:7d:d9:d2:53:5c:
                    bf:fa:7b:f2:0c:9e:9c:6a:07:a2:46:4a:76:d0:5b:
                    f7:80:e0:ae:6f:2c:49:ac:bb:46:df:53:7b:b9:eb:
                    94:f8:6e:dd:92:9a:16:b3:15:5f:63:23:2d:e8:f1:
                    7b:22:00:f3:d4:1b:7c:6b:79:33:09:8e:82:5b:59:
                    d5:58:57:c3:d3:d7:23:c4:02:9c:0a:81:13:a5:ce:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AE:E4:6E:F7:8C:C0:AA:47:C9:7A:21:2D:12:0E:4A:9D:8F:E1:B9
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:15:04:75:b7:48:e9:bd:c9:cb:04:ce:61:8f:94:b0:d2:
         f5:0b:5b:7c:e7:71:97:18:09:dc:5d:97:21:41:1f:e7:b4:b4:
         9d:fe:2d:34:5e:53:03:18:8a:76:4e:0c:e8:6a:2d:3c:13:f1:
         5e:16:ff:b6:8b:7e:82:63:49:10:01:01:cb:d2:29:a2:74:a4:
         1c:7d:6d:b3:dd:1c:b6:50:76:bf:8f:b3:ca:ad:4b:83:0c:89:
         9d:0a:41:fd:e6:a4:93:78:78:e6:40:6e:2d:21:8e:e8:8c:2e:
         d8:82:34:35:fb:1f:c1:81:44:42:25:f3:4e:9d:aa:38:b8:a9:
         51:6f:6e:1b:d8:3e:6d:50:dd:e6:67:90:de:46:eb:3a:d9:2d:
         59:88:a1:07:5b:8b:ea:4b:ed:f7:26:61:fa:31:02:64:eb:d1:
         d5:97:c5:5f:70:3a:91:5c:00:c4:83:49:a8:5a:86:6b:35:44:
         c2:c7:30:6b:d7:f2:04:45:32:e0:12:ab:a3:6f:2a:31:fc:6b:
         de:a4:72:e4:46:64:2e:e5:37:dd:40:f6:7b:91:4e:4d:ff:76:
         35:08:cc:9e:a5:40:6d:4a:0a:fb:67:93:41:00:55:09:ee:ed:
         50:68:36:4b:03:e4:84:65:ed:33:20:19:24:de:d3:be:82:bb:
         be:5e:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----