Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          wOr5oKsmZz0Q+NasJV/Z/iUOSIXWfWWqL5UfRO+hizo=
Subject key identifier:   9F:63:44:4D:DF:F4:D9:2E:AA:50:AB:21:83:80:29:A3:F7:E9:15:D6
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       0194BBCEFF17AA4662F2F38022AF9DCEC811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 10:01:32 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:32 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:32 +0000
Files and hashes:         1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
                          2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
                          3: E10xkOueYhKQ1eR7LPOWSuIcvzo.roa (hash: KIbGq9l2ACs69klxSYFwy1pM7+lK9YBNLqZhV5z4mZM=)
                          4: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: ZD8FTgiHjLWp1QdYvALM8pbt9U9EAnkH7LguzX6DLU0=)
                          5: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ff:17:aa:46:62:f2:f3:80:22:af:9d:ce:c8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Jan 31 10:01:32 2025 GMT
            Not After : Feb  1 10:01:32 2025 GMT
        Subject: CN=9f63444ddff4d92eaa50ab21838029a3f7e915d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:fd:c6:b3:54:32:21:a6:49:ee:21:03:ff:
                    74:4f:ba:b7:f2:6f:51:fe:c8:85:4a:4b:9e:93:be:
                    bf:8e:65:2b:ab:31:ae:3e:19:2d:8f:5b:95:28:33:
                    56:22:18:94:f8:4e:dd:96:32:fc:69:b2:e7:29:57:
                    ee:9b:ef:92:32:fe:6b:05:f0:67:0b:ca:ea:0b:f9:
                    8f:9f:5d:c6:08:19:5b:37:af:ab:3f:32:38:28:3b:
                    fb:c6:09:89:9f:80:2b:85:4d:82:91:95:51:b2:66:
                    13:16:44:b6:53:1c:7c:cc:98:34:73:a8:ec:b1:b7:
                    de:bb:f2:09:e0:58:39:3b:b1:69:52:e5:28:31:99:
                    57:0f:2a:14:0f:06:88:5c:cb:e8:90:78:0d:3d:a6:
                    3d:7b:b1:d2:12:64:82:fa:e2:17:24:10:3d:d6:3c:
                    f1:d2:9f:0d:da:09:35:2b:e7:57:79:68:a6:94:56:
                    2d:27:70:3c:08:c3:65:4a:5f:85:7c:50:1c:0c:5e:
                    fc:e8:7a:13:89:f1:c3:ad:ff:67:eb:70:1c:ac:cb:
                    0a:3f:31:ed:02:77:45:c5:db:a4:02:75:41:e0:3f:
                    d2:82:61:00:fa:1a:62:48:33:53:d5:f7:f3:67:84:
                    b7:0d:f6:07:e9:80:ed:d4:dc:42:6d:1c:e2:43:c1:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:44:4D:DF:F4:D9:2E:AA:50:AB:21:83:80:29:A3:F7:E9:15:D6
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:fc:5a:b9:eb:27:7c:2b:23:4f:13:9d:41:0f:17:17:82:
         04:fd:9d:ca:c7:f2:3e:bc:a8:61:93:6f:4a:7b:fc:d5:95:cb:
         4e:e9:25:b5:2a:f6:88:f2:2a:40:5e:c8:db:5c:44:b5:7e:b3:
         5b:b0:02:1c:d7:da:c4:0c:3a:7f:6c:bf:db:70:a6:58:17:35:
         b3:ff:50:7f:5f:33:b6:f3:3b:66:f1:1b:27:8a:ba:39:f9:41:
         cc:69:63:41:d2:64:94:83:34:99:c9:ab:77:f8:61:df:66:5b:
         80:ba:2f:da:ea:ed:7b:c4:69:cf:54:6d:29:81:a4:0c:4f:01:
         7c:33:47:dc:07:d8:18:93:fe:f6:49:7b:2e:15:85:7d:b4:35:
         88:56:32:99:14:10:f1:b9:42:ab:a0:fa:0e:9b:3a:78:ba:85:
         7c:2b:98:52:ce:41:79:23:90:84:5c:4e:52:ac:47:38:84:d9:
         67:28:87:26:26:14:93:cc:00:b0:fd:d3:32:81:57:32:b8:a9:
         17:42:7e:f4:51:7a:d5:5d:6c:17:6f:b0:ed:f9:bc:11:fb:d1:
         59:f5:e6:85:11:bc:e1:ed:7b:6d:12:45:8d:a8:f3:ba:36:25:
         07:52:c4:2a:41:64:8a:8f:3e:56:ae:20:0a:b4:3d:a0:e1:af:
         4a:76:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----