Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          v+6WFAhgK1xACU37XPLrMsr1g3g9gG5CBAxCeNRbO1g=
Subject key identifier:   B0:51:D6:92:28:00:78:5A:2B:3B:4E:AF:3C:8C:9C:84:F2:21:75:C3
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       0194BD859AF494575CFB656073C7C0138213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          10A6
Signing time:             Fri 31 Jan 2025 18:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:37 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: tPTDjPbYAEKRB2IJ5ky25B+UVgPGse8QGlkHw6mpozg=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9a:f4:94:57:5c:fb:65:60:73:c7:c0:13:82:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Jan 31 18:00:37 2025 GMT
            Not After : Feb  1 18:00:37 2025 GMT
        Subject: CN=b051d6922800785a2b3b4eaf3c8c9c84f22175c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:5c:8d:03:c4:b4:f1:80:0b:76:71:84:e9:
                    0e:6f:e1:fa:cd:b6:7a:a8:b1:11:15:8e:54:3a:fd:
                    e8:f9:29:79:4c:f4:a3:59:4b:fe:b9:98:4a:67:ce:
                    c7:05:8e:46:bd:70:8e:3a:73:c2:13:82:61:ab:1e:
                    c2:ca:02:86:27:81:60:58:74:0d:7c:69:07:c8:13:
                    12:b6:cb:f6:5b:63:0e:a4:29:08:b0:a2:2e:d2:18:
                    95:b3:01:68:fc:a0:d8:94:ec:26:83:70:b2:4d:8a:
                    49:f7:2e:5a:ea:1e:c0:98:2b:e5:28:06:95:7c:9f:
                    fb:db:5c:43:23:39:d2:be:1c:93:2e:3c:16:86:8c:
                    a5:cd:f5:c5:4c:2c:92:a8:18:78:bc:fc:80:f5:15:
                    ea:da:45:95:ea:7b:ed:65:d2:21:15:17:c2:d8:a1:
                    cc:1c:b4:5d:af:31:41:0a:3c:f5:4b:a6:df:33:27:
                    4b:3e:96:ba:c7:e8:13:dd:3d:b6:f0:90:c7:a2:8d:
                    f9:a1:f2:bd:6f:37:6c:1b:52:64:79:72:ca:b3:34:
                    79:91:c1:35:07:a3:c6:54:77:c0:e1:0f:72:3c:a8:
                    12:6e:7f:9d:5e:7b:f6:71:34:d0:a7:c0:1c:df:bc:
                    c9:50:59:bb:a5:bb:70:a2:db:25:a1:ad:16:c0:ea:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:D6:92:28:00:78:5A:2B:3B:4E:AF:3C:8C:9C:84:F2:21:75:C3
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:56:8c:a8:90:c6:6f:e5:a6:e4:7a:2b:bd:71:04:24:35:
         72:dd:4f:de:40:94:1d:cd:da:7c:3f:51:7f:79:7a:b4:80:50:
         b7:3e:17:90:4c:3b:8b:a9:10:c0:1c:80:6e:83:8f:52:2e:ea:
         38:65:8e:a1:6d:cc:8c:13:37:af:83:3e:6d:b0:54:94:80:db:
         8c:dd:53:ff:c8:40:95:78:18:a2:26:a6:aa:0c:ae:98:7d:b4:
         64:6d:82:b8:95:13:81:f7:77:c6:98:1b:b2:77:41:fd:af:01:
         7a:65:3f:e9:d3:0f:e6:da:ba:07:32:d7:1e:e5:73:82:36:13:
         a3:d5:b4:70:8a:d7:85:31:8c:06:b9:b2:49:64:57:cb:c8:cb:
         58:1f:ce:58:f8:3f:f5:a7:76:85:fc:31:dd:6d:2a:b7:6d:ae:
         d2:5c:56:1b:57:21:1d:72:33:90:c2:1e:a8:59:44:9c:36:a5:
         e3:a3:10:00:f6:1c:8f:e2:9a:4b:21:79:b9:f9:9d:f5:25:f6:
         ce:c0:e7:d2:8c:85:bf:3f:1d:63:4a:2b:2c:8f:8e:4f:b3:84:
         48:bc:f1:ae:40:bd:d7:c3:72:aa:02:78:f8:c7:68:71:00:48:
         f8:10:54:25:cb:ff:ec:16:a9:e6:46:4c:ac:70:85:f7:49:91:
         15:fd:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----