Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
File:                     CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft (raw, json)
Hash identifier:          WqrMooaUjXmBUhCiswaCPPmqKjKYCezce1vSQnQELxg=
Subject key identifier:   2E:A0:CC:18:D3:C7:C7:F2:96:BF:07:17:66:A4:EA:76:C0:C8:80:AF
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Certificate issuer:       /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial:       01939AC5770DC5A3323EE494B793F9ADFB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
Manifest number:          0BB3
Signing time:             Fri 06 Dec 2024 07:00:52 +0000
Manifest this update:     Fri 06 Dec 2024 07:00:52 +0000
Manifest next update:     Sat 07 Dec 2024 07:00:52 +0000
Files and hashes:         1: CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl (hash: Tq3pvadVYhGbiQIINa5YsZkqng6w2Pq8spzgLo4Tyrw=)
                          2: KmQLXSMs_5aM5clCGXYUAIZuDaU.roa (hash: e463FBGgJ6GdCX1aWMV0J724CoCighITo++ybgu3xC8=)
                          3: Tnv9tm27_aRw7gIu_4dLSm7uZTQ.roa (hash: ws+faqUn44taqtfl9OSJtYMKTJrksdnBu2trOoYcgVw=)
                          4: aU6VQGsUIKK43zEV9OBVpSYOHxo.roa (hash: qhiKoRYVSj7bpwccZvcm3wYiP3VCymqnt6CJF1KXABQ=)
                          5: l_ScJkwYKewxtYg8QlHHPgeYeOM.roa (hash: 8hyiyuVYFwIu+zr/PLLYY+h3cIS9CApRVhFEhVP2IkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:9a:c5:77:0d:c5:a3:32:3e:e4:94:b7:93:f9:ad:fb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
        Validity
            Not Before: Dec  6 07:00:52 2024 GMT
            Not After : Dec  7 07:00:52 2024 GMT
        Subject: CN=2ea0cc18d3c7c7f296bf071766a4ea76c0c880af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:0e:25:bc:d4:11:a1:94:57:f6:a5:2e:93:
                    7a:de:8b:2a:86:a5:17:13:eb:05:89:67:b7:1c:b4:
                    dd:f6:74:c0:97:4b:3d:4f:9a:20:5b:a8:97:36:40:
                    1f:0a:8d:c8:80:e1:a5:62:87:62:32:ae:2d:48:a5:
                    7c:26:fb:35:10:fb:16:a1:19:05:63:0c:3d:b1:57:
                    de:a7:1b:ba:17:7d:98:18:a3:b9:12:b6:05:a4:6d:
                    24:01:be:2c:1e:4a:73:bf:31:cf:5d:03:d5:d9:83:
                    72:a1:91:b1:fe:a7:5c:79:fb:9b:35:eb:6f:b0:45:
                    21:67:39:37:97:bb:ca:ad:3d:12:79:5b:cd:1e:be:
                    56:55:19:85:a5:10:63:31:45:3c:e0:d5:46:2d:8e:
                    fa:e1:57:49:c6:14:32:87:e2:88:83:cb:87:6f:9e:
                    f7:c4:42:32:13:af:d1:7e:f6:b4:b9:82:17:83:6a:
                    8f:ed:47:84:a3:76:b8:18:cd:2b:f5:97:88:28:05:
                    bf:b4:1e:54:a7:f3:cf:47:25:25:f8:69:7d:52:4c:
                    26:17:bc:71:2a:75:22:92:75:64:8b:e6:d4:68:1b:
                    ec:22:c2:84:78:72:64:a9:c8:3b:4d:60:4d:0e:d4:
                    33:d5:a1:27:79:ba:de:4e:ec:10:3d:9c:c1:86:5c:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:CC:18:D3:C7:C7:F2:96:BF:07:17:66:A4:EA:76:C0:C8:80:AF
            X509v3 Authority Key Identifier:
                keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:a4:7b:d9:b2:1f:b5:ac:87:1f:98:dd:c9:24:1d:e4:26:
         27:db:aa:b4:5b:06:1e:4e:39:df:6a:87:54:bd:8d:45:e8:77:
         3e:2b:0a:5e:79:d8:37:e3:0b:7c:75:cf:5e:0c:42:f7:ec:c7:
         f1:36:c2:b7:6d:a0:4e:66:38:36:5c:fc:01:45:0f:55:e1:c2:
         aa:17:2c:1d:be:99:bf:88:94:66:e4:40:b7:a4:d6:4d:04:fa:
         c8:18:b5:24:25:2a:90:a0:70:f7:ef:3e:02:67:37:c7:bf:40:
         4b:34:79:92:9c:7b:7b:b0:81:ea:52:c9:37:e8:32:11:3f:96:
         7d:43:35:a5:9c:eb:6d:3f:b5:17:53:aa:d9:28:58:f3:58:75:
         d0:e6:6b:86:f1:8d:3a:9f:8f:0d:f1:c4:26:3a:2f:8d:df:e0:
         b7:c5:bd:3e:80:42:d8:15:57:88:fc:67:72:5d:12:bc:d9:65:
         99:56:25:ae:d3:48:a7:50:9e:06:1a:1a:f9:75:58:40:9b:fd:
         fe:7d:cd:1a:04:45:c7:52:a2:26:c1:d1:54:a5:1b:4a:fa:25:
         17:39:09:a4:f0:1a:40:ca:93:83:1b:c1:bf:af:0e:cf:48:b9:
         53:3f:36:b0:33:b1:f2:5e:b2:b2:cb:68:29:4b:29:bc:61:91:
         55:45:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----