Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          4nBu44BSbyGVZEgvZMzkOQRdvs64EiDyyoEswHKKtEg=
Subject key identifier:   8F:B9:D4:1F:80:43:7F:D1:2E:AE:30:38:DB:43:37:C9:51:3C:68:F3
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       0194BD85B8FC378FBC7763B3F750962C097F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          07CE
Signing time:             Fri 31 Jan 2025 18:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:44 +0000
Files and hashes:         1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=)
                          2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=)
                          3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: Ymmy3WnioylTpuHuPlsfcQkmug6VOfpBslfcZv23etA=)
                          5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b8:fc:37:8f:bc:77:63:b3:f7:50:96:2c:09:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Jan 31 18:00:44 2025 GMT
            Not After : Feb  1 18:00:44 2025 GMT
        Subject: CN=8fb9d41f80437fd12eae3038db4337c9513c68f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:07:4f:36:aa:8c:8e:d5:35:9e:09:30:47:
                    53:ed:bf:e9:69:22:63:db:60:85:06:52:95:ec:d5:
                    4c:24:2f:3d:52:c7:6d:20:c6:30:0a:34:8f:ef:79:
                    ee:1e:a3:3a:57:07:e3:87:f1:53:3c:ba:3f:1e:3b:
                    8c:f7:f6:6e:0f:76:cb:89:91:23:3e:e5:49:cc:af:
                    24:3c:42:4c:e0:e9:4d:38:b8:eb:8a:a0:4f:a0:16:
                    0d:53:76:6d:bb:e5:2c:14:c0:35:8a:73:8b:ca:fb:
                    b1:b2:11:3f:92:c7:4f:9b:aa:7b:c7:ec:0a:ca:62:
                    13:25:21:a4:5f:2a:a8:82:c5:ac:f6:c2:9f:fd:03:
                    c1:31:c4:68:40:89:35:92:54:29:9f:8c:77:f4:10:
                    30:89:89:1d:ee:59:62:2d:98:c6:ac:1d:82:fe:5c:
                    94:5b:32:59:8a:67:42:ea:c1:1c:2f:8a:f8:e9:2a:
                    70:e3:3d:05:5a:89:42:f7:5d:1c:6a:ea:d2:8e:80:
                    05:aa:60:2a:03:51:9d:96:a2:fa:e6:e4:28:4b:28:
                    53:b8:d0:35:80:8e:cd:38:b0:ab:2b:e7:2e:c7:91:
                    33:a0:b3:16:94:d9:0e:e4:6b:da:9c:90:b2:ae:a3:
                    6c:ad:55:c5:63:dd:4e:f8:9f:2f:68:fe:88:f6:7b:
                    73:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:D4:1F:80:43:7F:D1:2E:AE:30:38:DB:43:37:C9:51:3C:68:F3
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:29:ad:83:b3:f0:cd:fd:d6:d8:c5:09:62:a9:a9:cc:55:
         6f:e8:d5:37:83:3b:9c:67:20:d9:99:82:55:84:c9:78:8f:0f:
         c8:e6:f9:1d:3d:f2:07:fd:dc:f3:33:22:04:bc:a6:13:27:5c:
         0f:db:ec:1b:fc:0f:3d:aa:26:8c:5e:fc:89:d2:10:c6:2a:70:
         fe:14:7b:2e:f1:62:0f:a1:08:e2:1b:18:37:06:26:75:51:ec:
         e0:22:21:70:1a:73:6b:6b:b0:78:c1:66:a6:a3:25:1a:51:a4:
         31:8c:10:e8:1f:7f:ac:b1:7b:d6:7a:62:47:57:4f:e7:86:67:
         7c:27:cf:e2:53:f6:cd:54:5d:22:dd:ce:7d:e1:4f:6d:06:53:
         ec:dc:c2:fd:c9:14:c7:5d:0e:c7:89:78:7a:30:b7:57:bb:f0:
         ac:ce:f1:3f:e5:cd:99:04:4f:9d:d1:4d:cf:ff:10:d4:9e:8f:
         17:88:ac:74:8c:bc:d6:f8:01:d0:ca:2f:4d:44:5b:a1:29:7a:
         08:13:4f:33:87:24:8e:c3:d5:90:fb:6a:33:4e:2d:c2:01:7f:
         8c:98:99:55:0d:5c:9d:50:3a:c1:cf:97:e7:3b:75:ad:22:ff:
         a7:53:9f:25:16:e8:5b:b3:6b:42:cf:54:04:f2:9d:19:b4:86:
         df:7e:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----