Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          Z4duiNCjXP2qDafgF1bGWY7HdvBHAgoOZ4n0982Aaqk=
Subject key identifier:   D1:86:40:49:15:19:12:64:52:AF:2D:13:B1:2C:19:9C:50:2C:B7:46
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       0194BD17D3DD5313925B0D37FB605C1CCB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0897
Signing time:             Fri 31 Jan 2025 16:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:42 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: uZpbsDhkCjmD7qEBlQntp57fOPxZ1cr6oJx61nVcWfA=)
                          2: 9bzay8DjASkJgeZB2kwc03IZl1E.roa (hash: YnIRrZnkb+ZaEUQ60KogsTVA40VhsogIgFHewsnR6g8=)
                          3: KmjbiHimHyCSJqDdxyTHZkugEG8.roa (hash: Zrhax2xy9NJstkGQJu2b3a8/0keBQS8DGEbXxifWfvU=)
                          4: sRfOMDtXEOJHKDPkg1fl6drHb14.roa (hash: OPssx4HcgdB0D4pn+Z4AVIamXsKn+0ENmWUN4IAnizk=)
                          5: ubczNdByBOFEzjOfXGNUERLx6Wo.roa (hash: tqIV/Xp5is3Az+5RTmCD8At4/sPjG7925jxe55yccsg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d3:dd:53:13:92:5b:0d:37:fb:60:5c:1c:cb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Jan 31 16:00:42 2025 GMT
            Not After : Feb  1 16:00:42 2025 GMT
        Subject: CN=d18640491519126452af2d13b12c199c502cb746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:d6:55:a3:3a:90:9b:c6:fd:d8:3b:9b:9d:
                    2e:a5:56:80:d7:2b:a8:b2:e8:fb:37:82:ff:01:98:
                    f3:62:2f:2b:3f:29:a8:8e:74:40:0b:2b:1f:6a:90:
                    db:5f:18:73:ed:f7:7b:64:3e:0c:49:45:74:f9:bd:
                    b3:24:61:f5:81:a9:60:89:ab:77:d1:a5:be:61:3c:
                    e5:ff:c0:d0:13:61:88:ad:4a:09:0e:82:61:40:c9:
                    e5:aa:cf:65:9b:50:a5:94:b1:44:05:ae:46:a1:58:
                    40:b8:52:c5:9a:ed:07:73:89:9b:bc:4d:58:74:df:
                    b4:0d:f1:56:26:d7:b6:6e:02:64:ec:f9:c9:55:6d:
                    ad:22:8e:49:9f:0c:0b:cd:12:8d:0f:74:39:77:29:
                    59:a7:cc:b0:7b:52:3f:72:ff:68:71:58:19:b1:55:
                    7a:e4:17:f6:3c:bb:49:d0:28:61:5e:73:a2:69:47:
                    ec:68:f0:d3:53:5b:8f:49:b8:d1:e6:bb:d4:ca:68:
                    1a:7e:3b:2b:d2:94:a2:12:8f:54:64:8b:f5:7c:31:
                    b5:67:08:f3:a4:45:d6:2e:44:12:cf:5e:cd:79:05:
                    98:26:eb:c3:85:e4:51:b4:5f:3b:68:20:e3:a0:87:
                    ab:a3:d6:20:c4:9d:15:3e:36:c4:79:e6:9d:75:f1:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:40:49:15:19:12:64:52:AF:2D:13:B1:2C:19:9C:50:2C:B7:46
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:fa:fa:b1:22:1e:c6:3c:05:af:34:05:3e:97:19:03:d1:
         83:4c:b2:fc:42:40:27:75:22:6f:f9:60:c0:87:2f:b5:a1:3e:
         b8:f2:34:9f:c4:e1:e3:3b:cb:ca:a5:18:c9:d7:ae:ed:3a:c0:
         ba:24:73:58:a2:65:fc:62:b6:99:cf:88:06:0d:aa:15:e1:f9:
         f9:c4:e2:5a:9f:ae:91:f7:de:47:d1:03:77:c2:a2:ec:43:8f:
         9b:00:71:c7:91:6e:c4:43:1c:84:ac:7e:6e:28:1f:d4:6f:f8:
         fb:c1:49:7d:25:9e:88:ed:68:c3:ca:a5:26:0b:d4:87:22:29:
         a4:06:2d:f1:dd:3b:0c:2b:b1:04:99:53:cc:71:9e:9d:39:84:
         d3:ac:2f:5c:ea:ad:ca:32:1e:62:45:90:0a:4a:1a:c0:77:25:
         e2:6f:29:a9:cf:a8:d9:11:9c:e4:cc:cc:de:c5:49:b5:57:54:
         9f:67:3f:6f:ea:6b:c3:47:54:f2:53:f6:7b:be:32:1c:ff:03:
         ee:01:96:00:a3:82:a6:c5:bf:c0:19:7c:06:dd:b0:8b:58:e7:
         e1:24:41:4b:44:67:f4:0e:6f:99:17:7f:f8:67:bc:d0:8f:9e:
         03:a8:6a:14:b2:8d:0a:32:85:0d:85:e4:f9:b0:d0:0d:cb:b2:
         cb:11:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----