Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft
File:                     6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft (raw, json)
Hash identifier:          5kEhzaApqkopiTKrUwLfAc4NuAAgqqJN+9ML58lVyJI=
Subject key identifier:   CE:C8:FC:D8:05:4D:2B:AC:82:0F:29:F9:30:AA:0A:35:08:1D:A9:15
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Certificate issuer:       /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial:       0194BBCDEE17D5EDA1E302B941721FF25FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 10:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:22 +0000
Files and hashes:         1: 5lD_GKbxjgCPRQ_Z3_WLyHUiJO8.roa (hash: Cmbbg34EqcSBetZYCLfej8mkuPhXU2aySlgUWJj8IbQ=)
                          2: 6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl (hash: X7m69xMSCnnb39Tdkpo+qH+zG6Pa/CuimSpNjJ7XBrc=)
                          3: XBj8T-sMyA4HDdmkc7gblixIgLY.roa (hash: M7W+3zG/4cxj32KwBRlgvs4BMAjAE1RcLg6LElt6mCY=)
                          4: wmH-oNwHurnp2OaK2UAzkQskT08.roa (hash: N3y3C0nEG+u7rfKoqA3F9O7ItROzjJypdPXX7fTnUDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ee:17:d5:ed:a1:e3:02:b9:41:72:1f:f2:5f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
        Validity
            Not Before: Jan 31 10:00:22 2025 GMT
            Not After : Feb  1 10:00:22 2025 GMT
        Subject: CN=cec8fcd8054d2bac820f29f930aa0a35081da915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:b9:79:90:3b:0b:05:f2:0a:e2:99:8c:7d:
                    bf:85:63:fd:cc:90:fa:1f:c7:0d:32:da:3e:a2:de:
                    0c:9f:01:83:24:c5:b9:fc:98:0c:0b:ad:94:8d:3e:
                    71:33:d8:12:b8:34:78:27:50:80:e0:4c:ee:a1:0f:
                    a1:4f:ad:95:ad:f8:ef:8f:4b:bd:a9:f6:2a:25:a0:
                    c3:a9:fe:cc:2a:91:90:6d:18:b3:fe:b3:40:85:e4:
                    cb:5a:4c:c6:28:5e:de:c5:53:a5:c4:7a:3d:8a:9e:
                    be:72:37:6f:f0:31:9d:13:13:cf:4e:5a:25:57:80:
                    76:2b:80:42:ca:7b:3e:d9:45:35:69:50:ad:19:88:
                    c9:ff:73:43:bf:0a:db:93:60:af:c8:dc:14:7c:db:
                    f3:31:b8:3c:85:bb:8a:d6:98:94:32:7e:9b:c5:91:
                    b6:7a:c8:a0:fa:97:05:43:19:c8:c8:d2:31:65:8a:
                    b2:4d:ab:b7:49:f2:86:d4:d0:f0:13:bd:e0:7f:50:
                    11:3f:b3:09:36:b8:fc:c9:0a:64:67:a0:c5:74:2a:
                    ec:b7:10:1b:52:33:e9:f1:7e:41:71:c7:1e:d9:94:
                    54:64:0c:bd:5c:59:cb:83:7d:77:d2:34:5c:85:e3:
                    1c:66:08:39:3f:ae:3e:60:43:dc:4b:67:fe:61:42:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:FC:D8:05:4D:2B:AC:82:0F:29:F9:30:AA:0A:35:08:1D:A9:15
            X509v3 Authority Key Identifier:
                keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:c8:eb:cb:c1:8d:92:ee:bc:c8:be:7a:9f:a0:5b:cf:e8:
         fb:f3:9e:96:5d:6d:71:f6:3a:38:d0:44:a6:66:c5:62:27:3d:
         9b:81:f5:01:16:06:b2:f9:fa:2c:6e:69:6c:fd:50:ad:27:d7:
         20:d5:e7:e8:69:9c:cc:e5:71:ad:1f:f7:5b:77:b7:4c:c9:92:
         94:77:9d:92:4c:42:2d:ea:07:56:33:1f:a2:57:74:73:ed:2c:
         fc:9f:ff:23:79:b3:a1:5d:8f:a7:9f:a1:fd:c4:20:7e:ed:a1:
         04:8d:6d:36:c1:a2:a6:fd:71:7c:54:73:99:c9:70:d5:60:1b:
         0e:a4:a4:22:ea:c4:14:99:6b:ec:e7:69:a1:1b:42:9f:da:2c:
         98:52:65:91:e7:4a:6b:a3:87:ba:d3:97:56:86:a7:4a:23:ca:
         17:e5:f6:c1:65:b3:e2:8d:eb:6d:8b:f8:da:55:3b:a7:1e:11:
         0f:d8:4f:10:26:eb:25:6e:45:dc:38:e7:1c:a1:1b:fb:5e:76:
         af:5a:54:b9:64:1d:fe:1b:91:d5:ed:5b:f9:21:7f:78:4b:d0:
         d6:c1:0d:8f:6c:79:b8:a8:d3:fe:3d:15:11:a5:6d:21:6c:27:
         4b:c6:8d:14:22:6b:83:bb:7b:80:0f:eb:b2:47:9b:25:e2:ce:
         b2:c8:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----