Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/005c5d-a0f7-46d0-818c-9b2371770df5/1/Cfs7wPRibhiMxYNtz59JId2hkh4.mft
File:                     Cfs7wPRibhiMxYNtz59JId2hkh4.mft (raw, json)
Hash identifier:          BroHLX8J9j+E/bKxJ1bn0lE4dqi0dUZNdraM4G3stXk=
Subject key identifier:   0D:FD:46:B5:1A:92:BD:BD:33:C2:84:50:A6:9F:EA:4F:65:D2:B7:FD
Authority key identifier: 09:FB:3B:C0:F4:62:6E:18:8C:C5:83:6D:CF:9F:49:21:DD:A1:92:1E
Certificate issuer:       /CN=09fb3bc0f4626e188cc5836dcf9f4921dda1921e
Certificate serial:       0193B33CB879ECCACE16767EF52BF9E04DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfs7wPRibhiMxYNtz59JId2hkh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/005c5d-a0f7-46d0-818c-9b2371770df5/1/Cfs7wPRibhiMxYNtz59JId2hkh4.mft
Manifest number:          13A2
Signing time:             Wed 11 Dec 2024 01:02:01 +0000
Manifest this update:     Wed 11 Dec 2024 01:02:01 +0000
Manifest next update:     Thu 12 Dec 2024 01:02:01 +0000
Files and hashes:         1: Cfs7wPRibhiMxYNtz59JId2hkh4.crl (hash: Mekc8trVrnp4ZgbynZOf3Qp+6/z9kKnoR0rXciJvqGA=)
                          2: F5A4s9EBMYGIUFMLi1ebIQcfW80.roa (hash: gkhJEmsfOi1C5PeK73SjII2Rt9+htMjKTHD/ZtAa9qE=)
                          3: VuFkwCa7FMLei1zg85W2eyVPXss.roa (hash: kWWG9y1qAOHRkh+lgduzsCeVCuT+/fIIhkH8J/AWmT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b3:3c:b8:79:ec:ca:ce:16:76:7e:f5:2b:f9:e0:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fb3bc0f4626e188cc5836dcf9f4921dda1921e
        Validity
            Not Before: Dec 11 01:02:01 2024 GMT
            Not After : Dec 12 01:02:01 2024 GMT
        Subject: CN=0dfd46b51a92bdbd33c28450a69fea4f65d2b7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:56:b4:08:1c:57:03:36:67:d1:b2:c6:be:
                    9f:76:4b:ee:f9:63:32:20:43:8e:30:7e:9b:3b:c2:
                    65:7b:90:a9:75:10:ec:9e:95:8f:a5:10:1c:f3:5a:
                    d7:e0:b1:15:73:e7:d4:3d:20:4f:d4:88:28:71:9b:
                    f4:de:7b:13:2c:88:be:6c:60:28:1f:7a:12:b3:8e:
                    a0:40:9d:37:cf:f6:35:28:0c:9d:b1:96:75:96:4b:
                    73:b5:0e:f4:dc:5c:a3:fc:d9:35:42:b3:b5:50:68:
                    0a:18:43:9d:83:02:57:5a:f3:e7:1a:aa:47:fc:be:
                    13:67:d7:bc:ff:6e:e4:c7:d9:0c:c2:84:fe:9c:c2:
                    b9:f3:2c:49:cf:cd:aa:1c:2d:a8:fc:04:29:7c:90:
                    49:cd:ad:5f:cc:38:4e:35:96:8f:bf:ac:ef:b3:12:
                    55:43:50:a4:37:12:ab:9e:cf:39:04:dc:36:7c:d6:
                    e5:20:03:9c:2a:44:e7:ab:7a:8b:cf:6d:26:91:c3:
                    37:e0:30:f4:73:23:57:c3:57:1f:2c:43:78:a8:8b:
                    0e:cc:7e:af:eb:b4:d4:4e:b3:f3:3c:92:3b:b3:ec:
                    05:96:4b:1a:4d:e8:bd:ca:66:6a:f7:3b:57:d7:b4:
                    f0:b1:1d:ca:b9:cb:2c:c8:7b:aa:98:80:e0:10:76:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:46:B5:1A:92:BD:BD:33:C2:84:50:A6:9F:EA:4F:65:D2:B7:FD
            X509v3 Authority Key Identifier:
                keyid:09:FB:3B:C0:F4:62:6E:18:8C:C5:83:6D:CF:9F:49:21:DD:A1:92:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfs7wPRibhiMxYNtz59JId2hkh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/005c5d-a0f7-46d0-818c-9b2371770df5/1/Cfs7wPRibhiMxYNtz59JId2hkh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/005c5d-a0f7-46d0-818c-9b2371770df5/1/Cfs7wPRibhiMxYNtz59JId2hkh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:38:21:87:33:17:1b:0e:25:07:6e:e3:c7:99:82:62:3b:8e:
         5e:74:48:b4:39:04:ef:aa:9b:9f:9d:d4:0c:3f:9a:17:47:09:
         fb:07:b5:6d:5c:19:fc:60:ed:58:be:57:8d:4a:74:7d:a1:26:
         52:d8:5a:e7:77:00:92:da:83:c0:28:44:de:b4:91:52:ec:2c:
         bf:04:05:a2:6c:92:f7:ec:1c:91:c0:26:4f:7b:4e:30:5a:a7:
         d0:42:17:37:a7:86:6f:60:3f:51:26:fa:aa:06:88:e3:a3:49:
         06:10:db:8f:42:79:dc:a2:95:15:51:eb:38:6d:73:90:0e:ae:
         3f:05:b6:24:fb:b8:2f:e1:15:6a:87:cc:93:66:3f:07:43:19:
         38:97:50:b5:27:f3:18:af:5f:ab:87:6a:47:b3:ad:cd:16:39:
         ab:d2:d6:c0:bc:d4:25:18:77:3d:a2:c9:0b:1c:f1:9e:17:90:
         44:32:26:27:07:0e:98:e7:01:e4:c9:e2:6d:9d:ee:66:dd:28:
         80:d2:a9:3a:96:79:57:12:31:e4:c7:f5:ea:fb:6b:25:27:17:
         cc:32:08:89:26:4e:f5:52:aa:36:65:1d:c3:ed:b5:a6:0c:be:
         1e:55:ec:be:1e:7a:16:22:ad:e6:89:d4:0e:46:6b:bd:dc:39:
         13:28:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----