Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          Rl3WA/OSK8wEbxWh2y3tFRT2bsiV1RYURzjmg2NAUks=
Subject key identifier:   4C:75:6A:53:AE:7B:EA:05:7D:A5:73:55:54:CC:87:E5:17:F9:19:73
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       0194BCAA12E6781D1A549381414D42E9D59D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          0CEC
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
                          2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
                          3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
                          4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
                          5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: J1zw1SXmwaTgfYY1W/wtgCq0vdL598aV/i95ZFKgVS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:12:e6:78:1d:1a:54:93:81:41:4d:42:e9:d5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=4c756a53ae7bea057da5735554cc87e517f91973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:45:fa:4c:2c:66:bc:2c:62:cf:e1:b3:b5:
                    70:2e:cc:cc:9d:36:8c:74:38:d6:c2:ad:d8:d5:e2:
                    4d:bd:64:39:9d:87:d6:32:34:e0:05:7f:31:11:ff:
                    38:ac:ef:dc:ba:66:ca:99:55:c2:86:c4:9e:45:7b:
                    da:c0:5d:1e:44:82:90:29:9b:88:b5:71:97:30:b4:
                    02:e8:9b:5a:69:4b:70:c8:14:f8:00:20:b3:d5:ec:
                    1a:0c:d2:a0:3d:d9:3a:63:58:dd:a6:37:a3:87:d7:
                    03:1c:39:49:a5:14:ef:9d:2d:eb:9a:22:45:fa:ea:
                    c5:c0:16:1a:6d:d8:0f:22:06:29:cc:0e:44:0c:0b:
                    28:97:d4:21:95:0c:a2:03:a5:3f:8d:89:e1:a6:3b:
                    04:fb:7f:81:0f:17:e5:ce:2d:3d:c9:e7:81:01:b3:
                    d9:c2:69:9e:b8:ee:51:be:c1:86:1c:24:c9:b9:6f:
                    2e:a8:ae:1f:85:56:b4:14:39:3d:d3:02:e6:db:53:
                    8a:c0:5e:6f:d3:3d:03:96:d5:c4:61:98:b0:16:b7:
                    d5:a5:e0:c5:4b:8f:39:a8:1e:51:94:11:0c:6a:df:
                    7f:f4:f1:42:e5:ee:51:77:69:c7:29:48:24:69:ce:
                    11:35:d8:8a:8f:46:3c:b6:6c:5c:5a:08:e1:cd:52:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:6A:53:AE:7B:EA:05:7D:A5:73:55:54:CC:87:E5:17:F9:19:73
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:78:de:aa:d9:72:05:d1:3e:8a:d2:a6:f1:a2:09:93:6d:
         fd:56:56:83:2c:e3:e6:1f:92:a7:0c:31:01:61:72:27:40:5d:
         14:6f:dc:01:ca:bd:f8:9a:49:4d:99:19:9e:e1:29:60:20:64:
         d1:df:04:64:d2:47:12:fa:7f:65:62:5d:18:48:48:e6:01:6d:
         47:9a:41:64:7b:fc:50:85:88:ed:81:1b:27:c6:93:86:ae:1e:
         ba:f4:8b:73:be:3a:b6:f8:82:81:c8:09:39:f5:6a:29:c7:d4:
         db:0f:2f:3b:2f:84:e8:0f:5b:38:79:04:fc:92:a8:89:c4:8c:
         89:71:80:93:51:c1:85:b7:78:08:06:a0:aa:6e:e9:d5:f6:6e:
         f0:25:4c:90:80:93:90:df:21:20:dc:a1:64:af:62:c0:a3:fa:
         7e:59:3b:4d:6d:74:aa:49:e6:f0:57:69:39:65:e3:8a:61:d1:
         02:70:31:e0:95:47:fd:00:93:e6:4f:04:ae:ad:ed:74:93:69:
         29:68:5d:dc:68:4f:c2:65:67:93:5f:21:7b:aa:14:3e:58:63:
         95:8d:bb:c8:af:f2:21:52:20:1f:4f:59:5f:b7:e2:a9:00:ea:
         82:0e:8f:93:89:8a:7e:7b:9e:2e:6e:98:80:98:ed:62:8d:c8:
         67:a8:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----