Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          IzDBYWzvAEvrtwjnN7cBJe/BuO4d/85bY9DScDqujyY=
Subject key identifier:   CF:C4:39:F2:BE:98:81:01:CA:F7:53:C2:E7:04:DF:74:F3:B0:F9:D2
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       0194BCA9A924C163242FC99A4605925AE5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          1129
Signing time:             Fri 31 Jan 2025 14:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:22 +0000
Files and hashes:         1: 1QVk1mwhRced4ZFbCGKb85l3WO0.roa (hash: p8wvog7E7NQyigh9F1XCHiJovkkIhiAPoqiyZJ+4Ha8=)
                          2: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: HPactwZuDUwK7J4zGGOtUfwfTRTMcPsYasfAEYkbjzw=)
                          3: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
                          4: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
                          5: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
                          6: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:a9:24:c1:63:24:2f:c9:9a:46:05:92:5a:e5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jan 31 14:00:22 2025 GMT
            Not After : Feb  1 14:00:22 2025 GMT
        Subject: CN=cfc439f2be988101caf753c2e704df74f3b0f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:05:e9:d2:41:14:24:89:55:4f:f5:d5:ee:
                    41:0f:38:8f:d6:d0:bf:11:cb:db:51:67:88:89:c5:
                    c5:54:da:3e:bb:99:13:07:ba:43:f0:7d:76:26:13:
                    73:1a:5e:f9:35:dd:81:76:8f:dc:c2:b8:8d:50:68:
                    6b:df:37:99:d3:57:5b:73:b0:79:81:09:67:ab:22:
                    4e:4d:29:4e:c5:e2:b0:56:ff:2e:8c:90:75:65:0d:
                    cc:e9:82:68:66:cf:73:78:48:08:cb:0c:43:a8:2e:
                    40:62:14:07:30:99:da:80:9b:9d:96:4c:13:3e:37:
                    e8:29:da:ef:5c:b6:b1:36:53:a9:1b:4e:b7:55:92:
                    ae:6f:f3:7e:1b:44:51:ee:97:af:c7:7b:a9:96:9b:
                    5d:89:d3:48:b5:c2:b3:95:76:2a:3a:32:6b:29:e4:
                    cf:64:81:34:42:b0:fc:af:ff:b6:20:49:83:44:35:
                    5f:24:14:ff:3e:10:ca:43:e8:d8:ce:d2:ec:6e:cf:
                    4e:e7:11:82:d8:de:b3:b4:25:65:0e:26:27:55:14:
                    c5:b3:34:d4:ab:a1:cb:29:37:c4:98:43:f3:86:f5:
                    1e:5e:85:a1:48:2b:90:9f:1c:22:b0:c0:22:9c:38:
                    4f:69:40:b0:60:5f:fe:95:a8:be:fa:8e:c5:90:c2:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C4:39:F2:BE:98:81:01:CA:F7:53:C2:E7:04:DF:74:F3:B0:F9:D2
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:42:e3:7f:9a:a1:de:3c:e4:53:63:49:2c:ea:da:03:be:
         88:c7:ad:0b:76:41:8a:2c:78:2c:3a:e3:99:06:f5:98:d8:c0:
         2b:ea:22:2a:1c:a5:a1:bc:da:56:d8:74:4f:d0:ce:8b:49:4d:
         a6:74:a1:9f:3a:f4:7d:85:f1:8d:6d:85:69:9d:0d:d2:e9:50:
         33:42:c1:b6:3c:89:eb:e8:ca:12:20:d9:3e:e0:f7:44:44:58:
         e7:22:f5:44:2a:70:69:dd:81:5c:95:9c:e3:95:a0:78:47:a5:
         25:3e:fa:dc:3c:c4:41:7c:18:66:4d:e4:a2:22:2e:d5:d8:71:
         41:6c:40:48:2f:03:ee:be:c6:51:1f:56:27:fb:2f:49:1d:8d:
         a8:8a:3b:0f:6a:bb:53:1f:f4:91:a4:ff:b4:78:fe:46:1a:fa:
         90:39:7e:cb:ea:7d:76:a7:83:ad:63:4a:34:dc:13:d4:b4:dc:
         02:94:83:4e:11:35:64:e4:73:78:cb:cf:de:1a:2c:7d:28:b8:
         5e:7f:50:17:1f:98:82:45:23:fd:66:a6:8b:72:f8:aa:3e:88:
         e0:42:ca:83:60:5c:97:00:5a:ff:41:8a:b9:3c:9c:76:b2:e9:
         16:1b:07:5b:7d:98:47:33:ff:96:db:3c:3c:80:f4:ff:92:9a:
         cc:ab:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----