Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          WPnFqnGAof6Pqhl+DQDSALccWLqoKbazvo8nKwhC0y0=
Subject key identifier:   8B:95:3F:6D:82:A4:B1:95:21:1B:0E:C3:99:EB:50:E7:A4:94:0D:55
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       0194BD1747D109CDB7419475E9FD516802EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          145F
Signing time:             Fri 31 Jan 2025 16:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:06 +0000
Files and hashes:         1: 7CibcdueYrPjmHYpOA8ieFPoHO8.roa (hash: TJ7sllFVsu/+isY01jt2ACv/l+Q6MsSOECQrv7JNg78=)
                          2: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
                          3: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: CNVwj5RJSlfSIBL8pZ4pNjo66KjZku5uMAHN5LWqQ7E=)
                          4: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
                          5: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
                          6: pK0zNVVROWwSBYXkm-_AZ9cWWms.roa (hash: w5rywyoxW3AL5tWJwQte8wQhxyh0QhNZOHhznEPJBbw=)
                          7: vNOS5vUWCqJEMFsm4Huo1TSEvCc.roa (hash: yDPHPi4lOHCdMJ+/kRIvQ07jiloiQq/r5yFG565XkNs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:47:d1:09:cd:b7:41:94:75:e9:fd:51:68:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Jan 31 16:00:06 2025 GMT
            Not After : Feb  1 16:00:06 2025 GMT
        Subject: CN=8b953f6d82a4b195211b0ec399eb50e7a4940d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:bb:bf:7f:c1:7b:08:ee:37:2a:09:f1:ea:
                    37:a3:c5:61:4e:99:77:a0:39:2e:ef:09:4f:bf:85:
                    fd:9c:3b:fb:c0:e0:29:ad:5f:ef:99:2e:1b:d6:58:
                    2a:2a:19:4b:b3:36:cc:3a:7b:b7:a5:b0:d3:6d:ba:
                    f8:a9:8d:26:fc:45:04:3d:5c:88:00:f7:28:a8:18:
                    1d:7e:81:e5:51:96:bb:11:06:da:a0:02:93:07:e5:
                    37:ed:6a:c0:b8:2c:60:c7:17:f2:f7:c0:7a:25:c0:
                    2b:8b:61:e2:05:eb:57:5a:fb:d9:4e:99:75:32:d0:
                    29:c7:6c:0b:34:40:d4:ff:73:48:0b:96:f3:7a:7d:
                    02:61:6d:10:df:67:5b:22:25:0a:0f:97:99:a1:af:
                    48:d3:1e:d1:59:44:7f:7d:7f:d6:9a:12:78:38:c0:
                    07:ec:bb:59:1c:3c:68:8c:3f:9e:6e:9a:4e:3d:6d:
                    c4:23:c3:62:df:1f:3a:32:6a:50:25:c8:e3:88:b8:
                    b7:f2:cc:d6:c6:d3:fa:ef:dd:2f:e3:48:15:27:13:
                    22:9d:d5:3b:76:e0:40:66:96:17:20:14:67:63:44:
                    40:fe:c0:50:98:f3:7d:ba:34:d2:51:18:39:4e:2f:
                    a6:f7:a9:60:45:26:fb:19:c5:64:0b:81:40:1b:4d:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:3F:6D:82:A4:B1:95:21:1B:0E:C3:99:EB:50:E7:A4:94:0D:55
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:9f:a4:bf:da:d7:2a:34:53:9c:3f:f9:95:bd:18:52:2c:
         c2:9f:cd:4f:e2:5a:41:f5:1e:f9:c2:a4:1e:23:58:0c:d0:3a:
         81:07:66:15:5e:4e:77:90:e4:58:d9:3f:be:1e:e2:2a:ef:da:
         f7:10:bb:89:f0:b3:5b:9b:c6:39:6c:d2:d2:43:d4:2f:a4:03:
         17:bd:e7:63:a8:a6:06:a6:0e:9b:35:75:9f:db:ea:f5:24:e2:
         3e:72:17:de:4a:c5:ef:24:e7:6b:ec:0d:7a:c8:96:3e:f9:07:
         be:eb:30:14:1b:02:ea:9b:89:ba:b6:8e:a8:82:21:66:7d:17:
         26:42:38:17:e3:f1:59:82:d2:c5:4c:62:0a:c0:b1:e4:75:13:
         f2:6d:9b:d6:a8:fa:d5:91:23:27:f5:b3:2b:c9:98:a5:ba:d0:
         c8:50:02:79:0b:c5:45:ac:a5:43:ac:bb:1c:08:73:b1:48:2a:
         28:4f:6c:c2:18:fe:7a:40:71:6d:2f:d5:db:24:d3:19:84:ff:
         6b:84:5a:47:72:6b:a3:f0:f6:9a:72:34:3d:e4:31:b5:ef:12:
         41:55:47:72:95:08:c4:54:30:32:b0:ea:da:25:6b:4d:04:f7:
         d6:d9:39:3b:5b:f6:80:4d:4c:15:f1:5f:2d:31:b5:f7:4a:5e:
         1d:cd:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----