Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          +03FQaJOL9BMRHbXET7ebmpiM5H3G1GhfqHbtvJydLU=
Subject key identifier:   68:98:EE:EB:22:5C:D8:5D:69:06:17:BE:9D:EF:DD:B4:CE:9C:2D:37
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       0194BCA9D5D1C2974CBCFE04F06AD05AB5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 14:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:34 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: MeG0wQuX8HEUy21IuImc8r8IgL6xOuIvNQQL8tPnFh8=)
                          2: 4BZRPAcjbKmzIdxdYQxaUgNZUG4.roa (hash: hnE1E66844mqWIF61x4kJxcvwYhKL4SWAFV4o0BetiU=)
                          3: 9AJVL74Koo20QslQbsW5LgWmuN0.roa (hash: ywfcVkqztZIsa4yV5w7CN7DaKI/bsZeXQWa9VUzq1PU=)
                          4: J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa (hash: 44Y8BMgB+sH5b8+axfLWpVcHTARgYoCnMt7xMsge5P8=)
                          5: _SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa (hash: yLq+2S7VzCleP2MSt8WxD7vanT3ofV/BHsfwwfGB6uA=)
                          6: qHajeM7KS0OkvXZ6gKIN6UcTzPg.roa (hash: 9Inme+UM24UQgsOmhNMhOS7m0XYuhceY/GRE7b5eI94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d5:d1:c2:97:4c:bc:fe:04:f0:6a:d0:5a:b5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Jan 31 14:00:34 2025 GMT
            Not After : Feb  1 14:00:34 2025 GMT
        Subject: CN=6898eeeb225cd85d690617be9defddb4ce9c2d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:30:04:a9:af:c4:38:0b:f2:8f:05:5e:90:
                    48:4d:64:5b:fa:e7:12:44:f9:4b:07:08:92:1c:89:
                    9e:17:46:bb:b2:8b:a7:ea:f3:76:f7:f8:56:62:53:
                    90:5e:5e:a3:24:b8:49:f6:b8:6e:dc:32:8d:4f:a3:
                    87:8a:26:fe:07:5a:85:67:27:4a:ae:21:e2:5b:d3:
                    3b:58:a9:72:c5:a0:d9:36:b0:47:11:8e:af:0c:6f:
                    27:18:58:07:9d:ab:01:bf:a4:69:e6:be:66:5e:2b:
                    a7:fd:f8:35:e8:bb:d7:17:2e:8a:d7:86:4c:6f:07:
                    c7:ba:89:4f:57:48:91:a9:03:a1:73:2e:62:1c:5a:
                    7b:25:a6:94:30:36:ea:a0:5b:3c:eb:87:1a:73:27:
                    eb:37:42:d9:4a:8d:15:fe:f9:b2:27:5d:3f:d4:0d:
                    57:23:0b:77:c7:00:a9:f6:6e:ee:1a:ef:0e:08:54:
                    1e:0d:11:14:94:b1:53:0f:45:83:4d:96:b3:55:94:
                    0f:96:bf:b0:43:35:70:9c:7d:3b:9c:3f:63:ef:46:
                    7b:9c:4d:8c:a0:df:f7:26:9a:65:37:52:38:cf:37:
                    37:35:92:5c:dc:96:56:d6:da:0c:4e:de:2d:d5:72:
                    9d:ab:64:02:ec:76:1a:e0:45:a7:90:cd:c2:14:db:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:98:EE:EB:22:5C:D8:5D:69:06:17:BE:9D:EF:DD:B4:CE:9C:2D:37
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:06:c3:e5:19:1c:7a:6c:33:95:7b:96:09:52:74:f6:55:22:
         71:02:26:45:1a:28:05:69:a5:db:51:b3:15:46:31:c9:b1:4c:
         04:c9:b8:b9:7a:14:14:5f:74:27:30:e6:db:b4:2d:d9:67:f6:
         6c:28:81:01:d6:32:32:36:f2:0e:02:05:36:6f:55:0b:d2:78:
         b2:18:bb:bd:35:5c:e9:d3:f2:55:20:28:4e:8e:29:f9:d0:79:
         60:a0:e9:71:d6:21:a6:2d:b9:16:50:09:d3:af:1d:62:19:b5:
         38:d2:7c:04:83:c0:c8:fc:81:b5:e9:a9:28:70:b3:de:8e:34:
         27:2b:29:6a:97:31:9a:9e:3c:53:41:24:da:fc:82:12:83:bc:
         8a:2b:93:6e:82:20:01:27:ef:c3:76:10:ab:d4:aa:53:13:b0:
         e3:78:a4:fc:0f:12:ac:59:75:e1:7a:48:35:d9:8e:80:dc:00:
         b3:e1:e3:db:6b:1d:4a:ed:5f:35:a5:cf:e9:f7:bf:09:98:c6:
         49:93:21:8d:75:8d:ce:61:eb:fe:b5:1f:da:d8:da:3c:94:54:
         5b:c5:e8:eb:b4:54:37:3c:be:55:1d:9b:d8:04:5b:d7:a8:5a:
         fc:62:68:26:68:03:ea:11:21:ac:d1:d5:c2:be:6f:ac:46:35:
         15:2c:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----