Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File:                     JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier:          fsnBB9ZCFHujZ5CpfNDGbQN11icj+ok16/pfdpclg9Y=
Subject key identifier:   52:24:85:9F:B1:49:EB:D7:15:C2:DB:EB:D4:75:69:BD:67:EC:EF:19
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       0194BBCE561645F74387A2A407940BF27F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number:          0F04
Signing time:             Fri 31 Jan 2025 10:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:49 +0000
Files and hashes:         1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
                          2: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: 0TDHDzjTNmHJw2pspjtILRsYTnZ2W4JWN7qMvYeDEiQ=)
                          3: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
                          4: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:56:16:45:f7:43:87:a2:a4:07:94:0b:f2:7f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Jan 31 10:00:49 2025 GMT
            Not After : Feb  1 10:00:49 2025 GMT
        Subject: CN=5224859fb149ebd715c2dbebd47569bd67ecef19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:e7:63:f9:92:77:af:3f:5a:dd:82:59:06:
                    e7:ec:46:4a:68:44:3b:16:48:e1:56:d2:76:54:b6:
                    dd:01:70:34:bb:fa:91:c1:8c:d1:2d:24:08:9b:20:
                    2c:c7:ba:6c:a1:6b:31:a7:b4:6b:72:8f:41:0f:a2:
                    99:92:ba:df:5d:60:b2:6d:c9:00:c7:c2:49:f5:f9:
                    50:75:9e:a0:64:f2:ed:04:f0:7f:62:58:0f:cc:cd:
                    06:ef:e7:13:43:b4:9e:4c:35:ab:ad:a5:8a:a6:0e:
                    b0:d1:db:92:99:f3:09:e9:8e:62:dd:79:c4:96:6c:
                    86:22:44:9a:0b:a5:73:e0:b3:5d:d9:3c:7a:9c:56:
                    26:8f:15:af:a7:f0:16:c9:8f:45:37:da:13:4f:05:
                    1f:c1:2a:f9:83:f8:78:73:49:f2:57:f1:a8:73:45:
                    94:59:79:f3:de:5e:31:ed:86:76:e6:01:af:69:e4:
                    ed:b6:1d:6f:a3:ac:c6:d0:44:3c:45:61:cd:25:0c:
                    96:80:ed:c1:23:e5:4e:de:be:65:46:a5:f5:f5:a9:
                    78:47:55:00:34:4a:33:0e:51:bf:01:25:3b:ef:62:
                    4b:5b:f2:05:3e:9f:03:6a:dd:12:2a:18:6c:90:44:
                    f7:f2:54:74:03:92:69:11:12:52:47:d6:ab:0b:8d:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:24:85:9F:B1:49:EB:D7:15:C2:DB:EB:D4:75:69:BD:67:EC:EF:19
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:8b:5e:51:52:23:e1:ec:17:97:c5:a4:91:88:e8:97:b7:
         10:ec:2f:1f:86:3c:bc:a5:54:b6:7a:14:8d:da:bc:d8:57:29:
         ad:84:42:44:f5:5b:86:73:90:69:1a:51:7c:93:f3:f0:53:a1:
         7c:11:09:58:31:88:3c:4d:3e:b1:0f:35:32:36:8d:17:a5:3c:
         67:17:46:01:d5:01:76:88:d9:1e:70:cf:01:8d:bf:bb:5a:52:
         69:09:f3:ef:21:d1:79:98:62:33:d1:3c:27:17:a6:ca:1a:02:
         6a:c6:21:fd:45:75:26:df:64:4c:f1:9b:00:ba:32:b3:36:8a:
         12:5c:fb:13:29:c2:f8:7f:18:c4:4b:17:95:6c:eb:08:42:43:
         d9:e5:9b:52:b8:23:74:65:6e:eb:8d:25:bc:90:fb:e7:c7:2a:
         41:14:52:2a:78:1e:ea:67:f0:8b:a8:be:16:9d:ae:0b:08:95:
         a8:d6:77:ee:80:ae:ed:e2:dd:91:dd:f0:7f:85:78:59:43:53:
         4f:9b:e5:2d:97:c3:6f:d5:e3:4a:be:cc:bb:74:e5:58:08:dc:
         fb:3a:7a:7f:bf:bd:7a:d4:4c:9c:00:5f:14:b0:c6:0a:64:6e:
         52:aa:81:f6:0f:1b:44:98:f4:f0:72:f7:ec:89:57:29:f1:6c:
         91:ae:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----