Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          5zog3QVFUp3kVucbmmP2AXHjAkEwuqVwwPhLWOczCJI=
Subject key identifier:   E9:E0:3B:BD:D4:5A:D5:E7:FE:FF:DB:51:89:85:74:EB:97:A0:DF:FE
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       0194BCA9D395699EC11AFE16F45A5AC2CF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          0A92
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
                          2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
                          3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: 5OMUrSF32trNCNShYRhz+X3XBwAnFGa3Qd7pxLueQW4=)
                          4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
                          5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d3:95:69:9e:c1:1a:fe:16:f4:5a:5a:c2:cf:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=e9e03bbdd45ad5e7feffdb51898574eb97a0dffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:df:5d:e0:92:e4:ef:11:fc:91:7b:cf:14:
                    bd:74:4f:3b:98:d3:4a:af:bb:f1:d7:e9:fd:ab:7c:
                    f0:26:24:e5:5a:80:b9:51:e4:d6:da:72:03:8b:79:
                    f2:97:42:dd:00:0a:81:d4:41:48:1a:22:c9:99:e3:
                    64:cd:12:b7:0e:dc:8c:c1:23:21:19:5f:15:4a:ee:
                    b6:d5:08:c3:c3:09:81:a2:e8:93:fc:f6:db:aa:35:
                    18:37:7a:bb:c9:d0:be:8f:69:8f:13:8b:56:a9:67:
                    69:ea:0f:61:9c:d9:e1:bf:a3:6d:30:ec:08:ca:e0:
                    0b:b7:34:0d:4f:6b:da:f4:74:4d:f5:92:5c:7f:7a:
                    73:b7:54:9a:35:1d:cd:67:f4:ac:56:b2:40:dd:47:
                    3f:52:c4:df:05:76:9f:95:ff:2a:1d:32:b8:50:91:
                    db:ef:52:c2:95:4a:9e:00:71:7e:1f:eb:f3:b9:4d:
                    7b:c5:96:68:61:37:b5:a4:76:2e:a4:d3:08:0e:17:
                    bc:26:42:9c:83:35:6b:55:96:54:da:51:ff:aa:f0:
                    cc:0e:e6:bb:35:76:6b:bf:02:f5:df:42:be:e5:5a:
                    44:93:64:48:ce:65:8d:a4:72:ce:9b:53:51:29:d3:
                    15:c3:79:e4:ca:25:39:2c:9a:c5:61:71:5c:27:04:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E0:3B:BD:D4:5A:D5:E7:FE:FF:DB:51:89:85:74:EB:97:A0:DF:FE
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:08:de:37:2a:c3:d2:b1:13:e4:1c:a4:91:5c:6d:55:11:
         34:6d:1a:19:1d:24:4a:54:d0:bd:b5:e1:49:7e:d4:42:a6:2c:
         bb:f6:b8:e6:ac:a8:32:1a:5b:fb:c2:c1:0f:c5:3c:ab:44:9d:
         50:fc:8a:0d:96:f6:27:74:5a:bc:51:3f:3d:95:23:39:81:04:
         fb:35:96:ad:64:42:e6:80:3c:ea:39:c8:4a:7c:5b:5e:b0:e2:
         b0:4c:cb:07:59:88:c0:d8:e3:e5:c9:1b:b9:eb:90:a2:57:e8:
         90:02:5e:e3:92:84:49:df:61:86:84:f2:61:0d:48:35:d0:75:
         7a:dc:2f:55:0d:4a:41:e0:25:97:8f:33:7e:5e:0e:0d:1c:f3:
         4f:09:93:47:bb:b5:ee:46:4f:14:c8:71:d1:65:a5:d3:4d:4e:
         33:90:af:e0:f8:e1:c6:16:76:d6:91:80:35:e4:84:55:57:45:
         78:81:20:5a:13:2b:9b:ae:18:c3:49:f3:ba:d6:e1:f7:06:37:
         37:81:d9:4b:06:7d:95:62:c0:e6:c8:05:28:fe:cd:74:f4:62:
         3c:86:b6:42:80:b8:94:00:a9:1d:63:b4:95:aa:82:39:1d:24:
         49:3e:88:e7:67:89:3d:14:80:ee:32:c5:ca:87:c4:8b:7b:c3:
         85:f3:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----