Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          HGeE8ore+yw8ykUAkF70/j9El8XKFgYU7H3W9x/LYys=
Subject key identifier:   D6:4F:81:44:90:F7:41:0B:49:B0:3C:0A:04:9C:94:13:AF:78:9D:2E
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       0194BD1774BCFD971371F1E727F60C651F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          0BBF
Signing time:             Fri 31 Jan 2025 16:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:18 +0000
Files and hashes:         1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: UN3S7da2sqj0IvDGUTY+4BfvS+4EuMNRFVNvCnMP/iY=)
                          2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=)
                          3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=)
                          4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=)
                          5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:74:bc:fd:97:13:71:f1:e7:27:f6:0c:65:1f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jan 31 16:00:18 2025 GMT
            Not After : Feb  1 16:00:18 2025 GMT
        Subject: CN=d64f814490f7410b49b03c0a049c9413af789d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:b2:5e:94:9d:d8:55:4a:f7:c5:9d:37:45:
                    39:06:5d:f7:28:e0:31:5c:24:ac:63:ed:9e:a6:03:
                    4f:36:b3:0d:bb:ce:f5:ee:ba:a2:91:d7:76:f7:d7:
                    a2:ad:33:a2:43:c4:25:f7:6b:9a:a1:0c:db:f4:9f:
                    37:85:d5:63:c3:ea:dc:7e:59:ef:ae:a1:a2:e5:80:
                    08:e8:d6:8f:47:6e:24:da:74:1b:69:dc:2e:8e:49:
                    10:f6:43:c8:60:98:8a:39:4e:cb:b7:a4:5f:44:d2:
                    dc:64:58:da:7d:93:9f:5a:ed:4f:ec:b0:67:6e:e1:
                    11:43:b3:bf:fc:1a:5d:cb:6e:46:62:ca:09:44:ca:
                    f6:55:c8:c5:43:8f:96:34:82:c8:c6:6c:16:41:11:
                    eb:a4:14:bf:2c:74:9e:4e:03:75:ab:f6:b8:51:59:
                    b3:77:eb:c9:5f:1a:fc:0f:ee:8c:7d:c6:eb:fd:fa:
                    9d:2d:9d:c9:f6:29:a4:1b:45:2d:49:95:cb:19:0d:
                    99:47:83:00:4c:17:dd:d5:55:1e:ba:e3:b8:8d:10:
                    99:59:20:9b:d8:d6:84:fc:5e:9e:5f:34:6d:c8:4b:
                    46:44:05:c1:fe:4f:b5:b5:f5:d4:32:23:99:99:7d:
                    43:de:9c:bd:71:e1:cc:08:f5:3a:49:57:b9:3f:db:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:81:44:90:F7:41:0B:49:B0:3C:0A:04:9C:94:13:AF:78:9D:2E
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:b8:64:36:50:64:6a:88:95:a7:7a:de:35:51:cc:fa:2f:
         82:97:fc:97:3f:61:67:fb:b8:ad:6c:51:07:6a:09:1f:07:5a:
         30:fc:4e:0c:92:26:e8:52:5c:7f:bd:c8:5e:2c:98:0e:b1:9e:
         4e:84:b8:21:51:04:ba:63:99:49:6e:be:b6:31:aa:d0:14:d7:
         4c:ec:1a:07:dc:5b:3b:3c:58:32:2a:fb:d0:d3:af:0f:fc:fc:
         a9:18:57:ff:68:42:7f:9c:d0:c7:b3:6f:53:78:b4:59:d6:3a:
         d5:d7:4d:3e:ca:ae:1a:ce:c9:f7:2b:32:1c:36:40:d8:78:f9:
         6c:a5:69:8f:61:5e:7b:d4:90:db:9a:9d:af:cd:2a:75:b0:76:
         43:cc:0a:0d:7c:35:5f:04:6c:28:00:0e:e4:25:33:96:16:4b:
         2e:40:5c:54:92:28:ad:c2:b3:e0:3b:ec:01:77:d0:45:db:97:
         95:4f:60:5a:f2:35:27:fd:b9:3f:a2:af:1c:55:8e:5b:ef:25:
         2d:79:7b:07:a5:e1:82:32:71:cf:38:27:48:83:3b:bd:72:7a:
         d7:dc:62:90:9f:24:17:53:c1:3a:9c:36:a4:02:33:fc:47:7d:
         33:da:de:55:ba:4e:0d:8b:a7:a6:60:d8:56:70:c8:be:4c:92:
         70:a2:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----