Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
File:                     swfIfntuKU8nAHkO7xnoKTnYXNY.mft (raw, json)
Hash identifier:          X+ZuxwUB3q8oXtFnx0dHIelhi/K4ckPBVbKkpkX8N/M=
Subject key identifier:   6D:73:3F:AB:66:C5:13:7C:3B:0E:04:C2:74:D6:EA:A0:F5:95:5C:C4
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       0194BD17777A0EF8315E15047C59369ECC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
Manifest number:          112B
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: 7FzoSqKZlb5kD6vPPTk2SfC27nM.roa (hash: 6aAGYHU1rCi9sNjHbIL9N9TC7WU4O97UeTWhOeOg/Oo=)
                          2: DCsIzUY9MCA0JaV6Og8Z-7mZrek.roa (hash: fdCemzvEyH44ROybDOkOmBmBhHkALSGBPuIIm5TTIXY=)
                          3: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (hash: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=)
                          4: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (hash: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=)
                          5: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (hash: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=)
                          6: swfIfntuKU8nAHkO7xnoKTnYXNY.crl (hash: yfaitlL7IpotOPuuguoJT/ZMUWLwU6gs+HyqJdMChgw=)
                          7: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (hash: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:77:7a:0e:f8:31:5e:15:04:7c:59:36:9e:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=6d733fab66c5137c3b0e04c274d6eaa0f5955cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:c9:06:49:40:eb:db:2f:94:f3:fe:16:47:
                    fa:18:d1:27:f4:33:0e:74:78:26:93:92:0b:ba:8e:
                    44:82:7d:26:1a:38:f0:a3:d3:4e:1c:53:3d:2d:c0:
                    96:cb:f6:44:3c:a6:23:9e:23:df:ad:ab:06:83:de:
                    62:57:e4:9e:39:b2:ab:aa:47:6e:02:7f:d8:6d:5b:
                    c2:52:66:ac:2f:1c:8c:cf:99:62:ad:8f:a1:e5:38:
                    b8:84:c0:31:c4:98:b2:a2:c4:fd:66:9e:38:78:8c:
                    c1:59:c7:89:99:a2:02:6c:c1:c3:32:bc:32:75:74:
                    fa:a9:91:39:4b:d5:ad:0f:fc:7b:40:c8:ca:ac:0f:
                    6f:12:59:68:4f:7d:04:75:a8:c0:e8:1d:ee:2e:47:
                    b2:99:b1:8b:fe:e8:b3:23:d5:17:17:74:72:f5:26:
                    3f:53:08:d8:64:64:a6:4f:e0:a0:e5:58:37:73:3e:
                    dd:7d:f0:59:b5:54:67:f1:8a:2a:df:20:0c:e1:38:
                    38:8f:41:6c:62:4f:61:ad:97:76:73:42:68:ed:5a:
                    36:d6:dc:1a:40:a6:f4:fe:38:71:8e:9e:60:db:07:
                    27:c4:1b:8a:77:df:15:a5:32:cd:3f:a9:98:b5:f9:
                    f7:e2:8a:6a:2f:cf:80:27:c9:ef:2e:22:4f:04:e7:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:73:3F:AB:66:C5:13:7C:3B:0E:04:C2:74:D6:EA:A0:F5:95:5C:C4
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:83:1c:a9:27:7b:83:f2:59:36:87:94:58:e2:d7:2d:c1:76:
         45:b7:3e:a7:a2:0f:2c:03:db:2d:31:b9:0b:be:7c:44:3e:b1:
         33:6d:28:2b:9a:f1:0d:1d:ba:b2:5f:79:39:1d:54:de:16:c2:
         0b:50:37:0b:a5:b6:cf:6f:77:eb:33:4e:48:97:57:8c:b6:9f:
         d5:dd:42:5e:66:7e:d0:4d:b7:89:9f:ba:d9:e5:15:f6:a6:9f:
         26:d6:08:b9:41:97:c3:0c:55:02:d6:30:51:1b:33:36:7e:b7:
         15:57:04:ca:a4:d8:af:e8:14:a9:3e:a8:56:df:a8:c2:b9:26:
         d1:1c:b5:f9:93:64:e4:00:34:3c:60:3d:66:15:96:12:6d:8f:
         a7:4d:93:ce:52:07:a6:c4:fc:d2:29:e9:82:e0:fd:b1:99:ea:
         18:be:79:ae:9e:4e:1a:e9:e9:40:03:26:e8:00:24:c2:26:b7:
         73:cf:b3:f2:b7:48:84:98:af:20:7d:d0:8d:19:66:48:ad:f3:
         3f:49:47:a3:0f:3c:4d:64:ce:4d:42:da:b9:53:e9:d6:6c:33:
         5a:28:42:3a:1c:0a:69:27:5d:a6:3e:23:45:62:33:74:42:e6:
         36:77:f2:34:56:ad:2e:74:8f:97:30:81:30:99:d2:ee:0d:c7:
         09:ff:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----