Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          OzsCaDpAnD8CHEbVCYfY3AY6gQJDW8jc5a4cNtenSC8=
Subject key identifier:   95:98:D5:57:69:CC:70:A9:9A:56:5B:29:EE:F3:30:9D:71:7E:C8:31
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       0194BC3C660D1A4362140ED5B8545294E310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          0F48
Signing time:             Fri 31 Jan 2025 12:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:02 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: a3xngUfTWM4zjC5rxRN/b0NjIwDY26sjWjZEh9w8NxY=)
                          2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=)
                          3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=)
                          4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=)
                          5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:66:0d:1a:43:62:14:0e:d5:b8:54:52:94:e3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Jan 31 12:01:02 2025 GMT
            Not After : Feb  1 12:01:02 2025 GMT
        Subject: CN=9598d55769cc70a99a565b29eef3309d717ec831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:b8:d9:e4:93:f7:f0:04:fc:bb:fe:92:33:
                    c4:93:e4:19:6e:82:1a:10:99:1f:7a:2a:59:4a:c6:
                    bd:e2:e9:92:83:37:f2:90:81:e3:02:5a:d3:b2:f6:
                    c5:cb:e1:d1:b0:14:72:9c:5e:1f:1a:32:58:e9:4b:
                    7e:38:10:7e:11:6b:fc:db:3a:36:2f:d9:75:12:96:
                    70:86:69:80:8a:40:16:8e:76:f0:ce:e2:ba:a3:82:
                    72:a3:f9:7e:ae:29:6e:d0:62:d2:16:57:3a:df:62:
                    67:31:27:cd:41:d2:89:11:68:9b:03:67:6a:c5:84:
                    b6:ba:50:b3:76:3b:ad:6f:48:a7:62:2b:08:a5:69:
                    28:da:38:24:10:05:73:42:55:87:db:ba:c4:7f:c9:
                    56:bc:7f:db:e8:3a:99:df:8b:fe:93:41:75:cf:c9:
                    5a:d4:cb:73:3e:2c:b1:88:79:18:a0:a6:83:0d:4a:
                    e5:98:18:80:e2:87:34:c6:20:29:36:78:ab:87:31:
                    f8:bc:38:a1:96:e4:d6:1e:a7:f6:b9:13:fa:17:5f:
                    3a:18:9b:82:9f:e1:eb:a0:0f:ad:c6:cc:5c:29:b6:
                    c6:74:af:d3:26:cb:72:d8:c8:ce:64:db:95:d9:3f:
                    c4:59:cb:da:e1:7b:d0:46:71:29:ac:72:9d:b2:1d:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:D5:57:69:CC:70:A9:9A:56:5B:29:EE:F3:30:9D:71:7E:C8:31
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:39:0f:85:37:f2:e8:5e:1e:28:b4:f6:47:9f:d3:aa:7e:18:
         58:44:aa:4d:33:44:4d:f0:a9:ab:9c:04:e9:1c:30:ad:83:90:
         46:5e:20:22:ef:72:4c:c4:4f:a4:0e:43:2d:4c:29:4b:2d:cc:
         c4:01:d6:99:d1:9e:68:c1:d1:37:63:b6:40:fb:c9:f5:da:da:
         a9:fc:b2:c2:b1:24:41:e0:34:01:54:48:ce:b9:8c:61:1a:3b:
         b6:7e:8e:f0:d6:e4:f2:ed:8d:51:d1:bc:60:7e:a0:f7:64:69:
         28:0f:3a:ad:99:62:cd:d1:a1:17:2f:b8:d1:50:c7:a3:61:31:
         c5:65:b0:61:94:94:e2:2b:f8:63:1d:b2:17:c9:47:39:ef:25:
         aa:e0:30:bd:ab:f7:c7:de:0a:63:e8:b9:79:11:bd:c2:0d:3c:
         6d:bc:6c:df:4a:2e:7f:d6:ed:ce:31:25:09:e7:f2:81:d3:6e:
         53:26:fc:bf:3c:0b:47:2f:da:f8:64:d6:7d:34:98:c7:6f:e3:
         f9:5d:15:69:95:de:13:f4:69:42:c7:85:c8:8c:e4:71:bf:d5:
         42:fc:85:65:23:7b:59:58:60:00:2b:a7:33:b9:30:3c:cd:70:
         5e:f8:77:f0:c4:55:8d:a8:de:4d:53:fe:44:0a:3c:1e:b4:c4:
         5c:2d:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----