Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File:                     ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier:          nQF5a1xK3laQcM8Jh6kA7bvZVNtbA4WxossvlBe3e5U=
Subject key identifier:   27:8C:82:C5:2E:07:C5:99:27:7F:D8:20:BB:ED:FC:20:CC:90:51:64
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer:       /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial:       0194BCE0C42916BA3D07D2D7E78350B64328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 15:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:34 +0000
Files and hashes:         1: 36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa (hash: SQ9ogBKHb+rGHe3BXgCbUKWuF1/SVTNnqc7Qrrn9o88=)
                          2: BLIbcZ8gVGAjnHegyR2lqH6xAJM.roa (hash: Bj27w9uQHRhZtkX+wPrDSZtYcxRX/Qm5XlGgHnKEj+g=)
                          3: c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa (hash: G3UZF7fxpF7R/IVnk9rPAZ+jjio/iwehlQmNNTZ8rAo=)
                          4: h_RE6WU4ZuYi01oBDIse0-pY6i0.roa (hash: WA+t8DetCDYbdx3o6UcknVGJ3PsCQ51UnZ6QRrSNIm0=)
                          5: oq_HXzOCCJ3V-kFxFIeDBDnbULg.roa (hash: n4S14t4ExmuKX91bG38pFLwh1gNdMqcOWis+wx+O8jw=)
                          6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: IMc1mJG9jWqXQ6t2L6blwlez6O38MHU+/aTLA+bltg4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c4:29:16:ba:3d:07:d2:d7:e7:83:50:b6:43:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
        Validity
            Not Before: Jan 31 15:00:34 2025 GMT
            Not After : Feb  1 15:00:34 2025 GMT
        Subject: CN=278c82c52e07c599277fd820bbedfc20cc905164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e8:5d:ec:fd:41:57:5f:ce:6e:70:23:1f:4a:
                    69:cb:62:53:f4:e0:bb:8a:9f:84:01:47:a8:51:81:
                    a6:42:08:f0:95:e9:6a:c5:06:7d:ba:70:33:88:d6:
                    d6:2d:94:b6:ae:b6:b6:77:48:2c:74:51:d3:53:45:
                    48:3e:80:b6:90:ca:5d:1a:64:67:53:78:44:fa:e6:
                    64:80:ea:5e:e6:cd:bf:38:25:e2:07:ef:7e:90:d2:
                    17:30:f3:12:62:a6:e2:51:97:7f:61:4e:7f:ba:7b:
                    53:f1:90:4c:10:8e:7b:27:a1:0d:2d:a2:6e:ee:90:
                    17:94:3d:3e:25:b2:cc:59:7c:fc:95:39:15:81:ed:
                    0e:64:07:83:3f:22:67:d1:63:60:69:19:a3:4a:a7:
                    23:5c:52:03:a5:8b:8c:5f:75:90:43:b2:01:48:e8:
                    56:97:0e:75:ed:d9:ab:2d:91:96:48:eb:09:12:0d:
                    1d:2a:fe:6d:03:d7:80:3e:00:da:e6:c7:75:e7:86:
                    5d:53:2b:4d:b8:39:87:e0:e5:bb:19:09:9f:d4:ff:
                    21:4b:ee:85:1a:4b:fb:ae:77:bd:fe:24:1c:ce:a4:
                    83:0c:b2:6e:5b:93:f7:cb:7b:d2:5f:e7:3a:95:f8:
                    a7:e2:4b:d8:d3:1a:3b:bb:0c:78:63:f0:ca:e6:fa:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8C:82:C5:2E:07:C5:99:27:7F:D8:20:BB:ED:FC:20:CC:90:51:64
            X509v3 Authority Key Identifier:
                keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:d4:7f:78:e4:a2:10:ea:00:ae:f0:0f:a6:c0:38:b7:7a:
         b8:03:49:b7:a3:70:5a:a9:93:f5:a8:6e:58:1a:a9:76:5e:70:
         c3:db:05:83:cf:62:67:8b:63:a5:78:8b:7d:e6:b3:07:d3:80:
         c9:de:dd:2a:b0:b2:4f:38:bd:af:ea:91:6d:fb:76:9d:b2:b4:
         3b:9f:58:42:5a:39:c3:32:5b:06:0c:86:8c:10:81:2d:9b:30:
         4e:67:98:78:58:d5:fa:6c:00:7c:eb:95:7f:16:ab:79:ce:9c:
         18:d4:02:76:65:0e:6a:11:ab:16:5e:43:dc:b3:b9:42:17:04:
         51:b6:e4:04:36:0f:4f:05:c9:ee:e1:8b:73:f6:cd:d8:54:57:
         7a:11:ac:60:a1:52:88:ba:41:25:8e:4f:25:48:1f:77:ad:86:
         96:61:dc:7f:e8:73:03:dd:29:62:81:c8:ac:55:e9:e0:4a:d8:
         74:be:06:de:5d:63:91:61:39:9b:d5:74:59:fa:2f:c1:0a:6a:
         ce:32:db:f9:96:40:c2:05:d9:ea:42:73:de:3a:28:ae:eb:ca:
         a7:ba:33:b9:09:f0:fb:b5:d1:0b:13:33:6c:7c:26:aa:17:29:
         2b:7f:12:4b:06:78:69:e2:6c:a1:25:62:a0:98:7d:89:13:9a:
         6b:f8:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----