Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          AohOk1GtXMe47g8sNY9D/XbsFS+mz6JRJPObWcTdKlI=
Subject key identifier:   FC:FC:1B:89:10:CB:2F:D0:B9:DD:C0:DA:CC:56:26:2A:55:5A:CF:2F
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       0194BC3BFEC32E9528866AAE04EB6FAB7CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          0D5B
Signing time:             Fri 31 Jan 2025 12:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:35 +0000
Files and hashes:         1: 1KCeM_saj2EHwCtmvYUyod5fQVk.roa (hash: Pv9o3ZWxmDIYTSHQUpAENmb1SekUnxD3+SSuHyFLNIk=)
                          2: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: T848AtrpdfLWcaNoVZEgnX8bkbPWRVTQ/5OJeSXP5vY=)
                          3: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=)
                          4: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=)
                          5: s67wfBYN4Keq-XcZ3aP-wu5Usu8.roa (hash: iepRGsTeT7EybANIxB57/7dp/YbwlG1MHY+mia+/CQ8=)
                          6: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:fe:c3:2e:95:28:86:6a:ae:04:eb:6f:ab:7c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Jan 31 12:00:35 2025 GMT
            Not After : Feb  1 12:00:35 2025 GMT
        Subject: CN=fcfc1b8910cb2fd0b9ddc0dacc56262a555acf2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:04:cc:2c:ff:6e:b9:d4:90:39:97:da:36:
                    77:31:8a:da:86:ea:b6:2f:4e:1d:e6:20:45:46:41:
                    d9:a8:04:88:be:4f:55:38:24:dc:c3:79:ba:6e:61:
                    c7:74:da:d0:8a:0a:4e:d9:18:22:ac:51:6a:05:25:
                    b0:03:4a:41:75:0f:c3:7d:96:b1:4e:c2:6c:0e:58:
                    f2:de:2c:b9:b6:75:58:48:08:97:a2:79:f7:ff:03:
                    10:a5:e9:cd:b8:69:f0:6f:87:07:f3:df:5f:a1:48:
                    fa:65:f9:18:e1:d4:b2:03:0e:81:63:36:a4:b7:0d:
                    84:85:e0:de:db:71:88:18:81:7c:88:62:1b:d5:59:
                    01:67:f5:30:12:d7:d1:f4:e3:04:d2:ea:d8:50:b2:
                    9b:80:a3:4c:2f:3e:30:2b:fc:e1:48:c5:4d:7d:12:
                    39:e9:fc:f6:4c:cb:28:6b:4e:99:a4:f7:09:15:b7:
                    e5:e3:79:58:6d:da:ab:31:ab:79:81:3c:48:49:0b:
                    3c:f3:fd:f7:0e:4b:a3:81:54:17:ef:0e:be:80:5f:
                    46:51:71:88:3a:8e:d9:7e:2b:87:b3:5e:7f:8e:a4:
                    70:1a:b2:55:40:f7:f1:92:9a:df:8a:89:d3:06:44:
                    d4:a5:a9:4a:18:4e:c8:da:1c:45:d9:53:94:b7:9d:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:1B:89:10:CB:2F:D0:B9:DD:C0:DA:CC:56:26:2A:55:5A:CF:2F
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:d1:ca:70:f6:1e:ef:c1:98:1c:b4:fc:f5:88:8e:2f:aa:
         c3:be:44:5b:96:2b:4d:33:b4:fe:0b:59:20:b3:74:70:cf:ef:
         24:b0:e7:7c:e5:22:ec:12:df:95:a8:e9:de:fa:10:6f:33:9d:
         74:90:4f:fe:4c:a6:67:44:bc:9e:d5:b6:f3:40:ff:dd:59:48:
         4a:29:32:ff:12:48:72:a7:e3:5d:59:bc:16:33:bb:35:6d:77:
         9d:02:d1:18:f7:e1:74:5b:45:99:7c:09:de:31:dd:94:10:df:
         31:41:ba:8c:90:58:ba:5a:2e:57:af:8c:5a:9a:dc:58:ea:ad:
         1f:4c:ae:35:db:36:4f:55:62:cc:13:14:f0:3a:09:bd:02:c0:
         7e:10:86:f2:c8:d3:9b:31:3f:77:90:51:61:b1:f6:5e:bf:e5:
         50:df:30:89:19:df:7b:1a:d2:84:49:49:54:87:fc:44:ee:e8:
         85:2d:ca:d0:42:00:5c:15:ba:0e:f8:86:62:47:5c:30:5d:9c:
         e2:0a:72:71:91:bb:48:64:c7:08:e8:14:4b:7c:e3:5a:da:30:
         ab:0a:cd:0f:05:26:ea:7d:75:e7:10:fd:08:ec:2c:06:b5:9e:
         66:b7:00:5b:da:0e:0a:1b:08:68:f7:08:b3:4f:62:65:70:af:
         9b:ba:af:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----