Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
File:                     9dkBIB_wsbl-89GnLaQeGPAUV2I.mft (raw, json)
Hash identifier:          tDZF+u5KWdj6kqpYPLErF2COU6wGIp4SsLkq5TqOrtk=
Subject key identifier:   AB:4E:1D:5B:12:22:F7:FE:D2:14:45:58:97:4C:4A:B6:C7:6E:05:6E
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Certificate issuer:       /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial:       0194BD4E871F20175F6FFE98630245AF69AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
Manifest number:          0D96
Signing time:             Fri 31 Jan 2025 17:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:27 +0000
Files and hashes:         1: 9GHYyQxjIAaL8idlitP2zYbsDjA.roa (hash: RL9eBc6j8CiAvBwDEIUMqLZtPOvwgVV2Phu4g1DvLkU=)
                          2: 9dkBIB_wsbl-89GnLaQeGPAUV2I.crl (hash: vlDl6rjnGcRp1zIUZtwVuPGGewhqZZNMaIuPlSykIro=)
                          3: AbT3htyDEl5yF3u5Q8YiHkq-VPo.roa (hash: I+WRaSD6/q0A0IB1xrlT+ST9KI1uezSwJcEv8edCWJ8=)
                          4: Bwqq8Z5AZL_2lUde5qk7oColHZI.roa (hash: bFEzn3Yzi/n+R1SI5psM35DL7T0gcBGjte1Ppv7HbOc=)
                          5: Rp8fxcLKkkldzr9NKHoycDdZmcY.roa (hash: pwYOFujYISzC4oGuTnK76LZ1N3L4Kc4WvVqV0Z88I2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:87:1f:20:17:5f:6f:fe:98:63:02:45:af:69:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
        Validity
            Not Before: Jan 31 17:00:27 2025 GMT
            Not After : Feb  1 17:00:27 2025 GMT
        Subject: CN=ab4e1d5b1222f7fed2144558974c4ab6c76e056e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a2:1b:b2:de:36:ba:81:6d:55:34:b5:e6:e3:
                    0f:2f:52:ae:43:41:7f:5a:45:30:dc:02:2a:25:d8:
                    53:14:46:d2:b5:82:e6:4d:1c:52:c4:f5:10:0d:6a:
                    ab:79:c1:ba:c6:eb:b7:8c:24:cc:09:9b:e8:fa:cf:
                    64:43:ab:1f:e0:fc:d0:9f:b4:53:e7:65:5c:f8:c2:
                    ed:7d:67:76:a0:6d:58:18:14:7b:23:02:bf:a9:42:
                    e9:8e:fd:f6:c0:60:ac:29:86:c8:6c:d0:ca:c4:e9:
                    ac:44:7e:cb:71:8a:d7:fd:be:a9:71:da:6f:79:31:
                    a4:dc:ab:ce:3e:91:8a:62:97:06:2e:bf:c8:75:f3:
                    67:fc:21:e4:79:0e:4b:58:39:1d:c4:92:86:83:56:
                    df:54:0d:fb:3a:de:a2:fa:a4:a4:b5:44:fa:27:82:
                    6f:9d:ea:8a:49:74:81:86:f3:fb:1c:f8:98:81:cb:
                    e6:19:45:65:43:2b:07:e0:d8:85:ee:e2:61:5b:a6:
                    94:7a:7c:ec:60:3c:43:d0:cf:2c:0f:dd:2b:76:31:
                    b0:4c:b7:31:f0:d5:4b:a4:c0:d8:2a:46:56:2e:83:
                    16:09:dc:56:6b:77:4a:c4:88:80:fe:f2:90:8c:30:
                    77:a2:c3:c8:70:26:14:69:3a:cf:a4:7c:27:0e:cd:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4E:1D:5B:12:22:F7:FE:D2:14:45:58:97:4C:4A:B6:C7:6E:05:6E
            X509v3 Authority Key Identifier:
                keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:4f:5a:5c:ee:8d:55:29:b2:a0:95:b5:bb:5a:a0:8e:e8:
         d7:b2:72:4b:37:0a:23:e2:ed:ff:0e:10:68:f0:8c:e9:5f:8a:
         16:b6:03:45:07:2a:ef:c9:cf:a1:75:96:58:b9:8e:cf:de:e2:
         6b:f0:a0:17:0d:ae:40:09:48:28:d2:1d:f8:21:99:ed:11:59:
         a3:12:73:88:98:27:3b:f8:09:9a:a5:d4:8f:98:34:ae:de:ad:
         36:0a:50:ad:1f:9c:d4:73:48:b2:0a:9b:cb:f6:f5:4a:be:35:
         f7:11:60:36:fe:92:be:67:5f:b3:5d:74:2d:5f:33:91:d3:b2:
         e9:0a:4a:d4:de:9c:53:75:ca:ee:8b:76:f3:df:5d:dc:ab:0a:
         d7:18:05:1b:5c:3a:d7:c3:78:90:94:68:20:db:f2:e1:ca:a9:
         92:98:82:c2:3f:c5:d5:e8:d3:89:9d:ff:e8:e0:b8:b9:3c:8d:
         b5:e6:e2:60:16:b7:be:51:37:85:f0:7b:cb:2f:c2:8b:5d:9f:
         cf:74:e3:06:e2:e0:5e:33:a6:af:e4:20:43:8c:17:5c:a0:3c:
         de:03:91:88:61:37:2b:66:4d:c4:d0:a3:7e:38:a0:e0:56:50:
         e3:82:3d:85:4b:54:ab:b3:34:24:16:2f:50:54:65:dc:4f:6d:
         7c:51:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----