Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File:                     _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier:          tL0KPHNACPu3y1FVDXghap5saCPW98kt0kv9pMWg3BY=
Subject key identifier:   89:65:C5:41:F6:36:11:67:95:13:CE:E6:BB:F0:34:1B:B1:ED:28:DC
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer:       /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial:       0194BBCE7EDD50DDD3C9981CDA3C33CB3623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 10:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:59 +0000
Files and hashes:         1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
                          2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
                          3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: MbmoTXxwLwlWISKJhD2+68ShC1GD5N1FLKBV6VEbLdg=)
                          4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
                          5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
                          6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
                          7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7e:dd:50:dd:d3:c9:98:1c:da:3c:33:cb:36:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
        Validity
            Not Before: Jan 31 10:00:59 2025 GMT
            Not After : Feb  1 10:00:59 2025 GMT
        Subject: CN=8965c541f63611679513cee6bbf0341bb1ed28dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:d6:b0:56:4b:f1:f4:86:ed:d9:a0:c7:7e:
                    df:bc:88:ba:8d:25:56:17:9c:0b:31:a8:6c:da:68:
                    07:e9:d9:12:b7:36:67:04:0b:f8:a5:c7:1c:74:cc:
                    94:9c:4d:51:d4:60:d5:c1:fb:a8:81:c6:99:23:bb:
                    b1:b3:40:9e:97:72:f6:73:66:eb:46:f4:56:d3:28:
                    1c:2a:d4:f4:22:73:cc:ff:bf:7a:98:30:08:bd:04:
                    91:58:66:2d:e2:b9:cd:0d:ba:42:bc:fa:96:0d:70:
                    b7:73:9b:54:5e:af:eb:b5:c2:ed:cb:0e:5d:f0:72:
                    95:3d:65:33:e8:56:bd:d6:b9:09:a0:2e:8c:20:94:
                    b4:6c:fd:f7:b9:b7:9e:c9:c5:c6:a4:7c:bb:b1:19:
                    69:42:9e:ca:fb:d8:5a:1a:65:e5:b7:72:a8:b9:3d:
                    7c:a0:bd:43:39:f8:c7:72:18:58:8b:87:d8:54:27:
                    ab:08:f8:46:4e:be:f8:80:3a:19:e3:06:c8:89:cc:
                    50:9e:58:0a:78:a4:65:3c:2b:e6:92:51:44:f7:0f:
                    d5:2b:f8:1e:63:40:d4:ab:1b:91:66:a5:d1:ae:fb:
                    8f:54:35:1f:30:b8:0f:15:f8:61:7a:81:65:7b:f6:
                    85:3c:5b:92:79:ef:15:b2:40:31:11:1c:f1:07:ce:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:C5:41:F6:36:11:67:95:13:CE:E6:BB:F0:34:1B:B1:ED:28:DC
            X509v3 Authority Key Identifier:
                keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:42:f4:53:d6:19:00:6f:3d:1a:40:00:fe:eb:1c:ec:df:7c:
         1a:86:5a:95:19:8b:7b:b4:96:88:01:1b:2b:7a:fc:21:70:81:
         59:65:69:9c:4a:66:36:fc:09:25:4b:7a:ff:73:d3:1d:7e:1a:
         46:99:99:c9:75:37:21:a2:76:3e:f4:e3:46:97:b3:35:ec:c2:
         a5:5a:5a:58:8e:1d:38:a9:63:3a:ce:60:7a:af:1e:fb:25:b1:
         02:2a:0d:24:2b:b4:e1:51:43:e4:b3:2b:11:e2:f0:3c:7e:b7:
         fb:45:f0:51:e3:fb:6b:bb:28:67:09:2b:ba:46:76:32:75:14:
         95:0e:b6:27:6b:e3:bb:6d:7e:f7:b1:bb:c6:26:aa:87:d5:be:
         c1:7c:25:8f:68:b3:28:2f:aa:96:de:f4:5d:3b:3e:bc:79:a6:
         81:87:8d:9d:66:b1:2a:a1:ed:6b:0f:b8:39:cc:5d:42:e3:7e:
         99:34:a3:71:78:f6:41:b8:f3:88:b5:ca:e7:ab:41:34:65:f1:
         c5:43:46:db:7b:d5:0d:d2:83:f6:2e:44:e2:7e:5b:8a:9e:55:
         45:de:48:22:e3:51:91:35:0a:31:c2:89:f7:1f:23:24:55:ee:
         de:b7:3d:2a:b2:1b:96:93:72:c1:50:1e:bc:56:10:fb:e5:6f:
         6d:3a:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----