Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.mft
File:                     M8Z2lGNp9UjOYhj-Rz89pNGl0ag.mft (raw, json)
Hash identifier:          xsVUf9nZmynH7NgWTLe58A8VdKTzKkLgngD8on+s0DE=
Subject key identifier:   11:36:47:98:07:C2:50:FC:30:B6:72:5F:E0:9D:01:CD:AC:2E:F8:D6
Authority key identifier: 33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8
Certificate issuer:       /CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
Certificate serial:       0191DA193D87CF2A1DEE29707C1984E75C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.mft
Manifest number:          0D5F
Signing time:             Tue 10 Sep 2024 04:02:52 +0000
Manifest this update:     Tue 10 Sep 2024 04:02:52 +0000
Manifest next update:     Wed 11 Sep 2024 04:02:52 +0000
Files and hashes:         1: BDyymbsjeaXh6sAAW96PaMDpU8k.roa (hash: JpjxDI986t3xeytsaVZpmbPTCoP9CxAC01IU6aXnGxw=)
                          2: M8Z2lGNp9UjOYhj-Rz89pNGl0ag.crl (hash: SH/Kg3nEN9ObBBlN89d7YNhnbvpDChWgF3FtV7kQU8c=)
                          3: TDSrLGqoXMHvDHsfCVgDPJfSel0.roa (hash: FVbAezXQjOfIDAgGC1Vkn5+tBjxCF9snF2Vg3d/N1bA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:da:19:3d:87:cf:2a:1d:ee:29:70:7c:19:84:e7:5c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
        Validity
            Not Before: Sep 10 04:02:52 2024 GMT
            Not After : Sep 11 04:02:52 2024 GMT
        Subject: CN=1136479807c250fc30b6725fe09d01cdac2ef8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:30:15:01:9f:4d:9d:7c:48:05:08:aa:fb:
                    63:12:9a:62:55:07:e0:1e:8b:95:96:53:70:b8:b1:
                    cb:80:45:55:cb:55:20:0e:bc:69:9b:c6:d7:fa:b6:
                    cf:a6:36:30:fa:10:ca:cb:f1:44:a5:ef:e7:07:dc:
                    bc:2d:8f:2d:4c:16:39:d8:5e:73:aa:db:0a:39:13:
                    d5:11:c5:f0:00:e5:cc:d3:ba:04:92:cf:0b:5b:32:
                    b6:a2:02:c6:77:c7:83:41:92:49:3f:51:d4:28:66:
                    09:57:fc:44:67:0e:60:83:35:cf:5c:ac:c8:a9:56:
                    e3:6d:5f:17:18:7e:62:de:8f:22:f4:70:26:0d:e4:
                    43:9c:77:56:ae:6c:ec:60:4d:0d:af:ec:9b:fe:08:
                    2a:f6:4f:f3:9a:7d:fb:56:3d:13:4a:db:b8:0e:cd:
                    86:92:7c:72:5b:f3:32:57:12:d7:73:a2:e2:b5:78:
                    1a:c1:85:30:d0:a5:35:8f:8c:15:ae:c3:21:3c:c0:
                    3d:77:fb:5a:56:77:3d:b0:9e:3c:2c:08:b0:e8:24:
                    8c:27:b4:10:c4:9f:1b:6b:dd:47:34:4b:9c:29:3f:
                    7f:72:da:af:64:8f:0c:2c:3b:fd:8e:cf:15:bc:60:
                    47:26:fc:f5:b5:d1:2f:59:9a:af:6e:23:8c:09:b7:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:47:98:07:C2:50:FC:30:B6:72:5F:E0:9D:01:CD:AC:2E:F8:D6
            X509v3 Authority Key Identifier:
                keyid:33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c6:69:24:00:31:b3:b0:1a:78:2f:96:8a:07:66:d3:ec:b1:
         be:19:6f:73:09:f5:b4:20:74:c5:34:96:bc:31:0f:da:f5:44:
         65:a5:23:4b:27:c8:51:a9:ca:33:cd:66:dc:00:0a:9a:39:fa:
         fd:a7:7b:0f:53:ce:79:46:c8:a8:b5:d5:77:49:22:39:5e:61:
         79:1c:5a:55:ce:18:f6:04:da:49:ad:cd:ba:fa:38:4a:2f:1f:
         97:45:3f:8e:f5:66:75:12:82:bc:32:18:e9:62:8b:dd:a0:c5:
         62:78:38:5e:52:0c:93:c7:f5:7e:ca:26:bc:52:4e:57:fe:0c:
         66:0b:b9:49:71:4f:13:7f:66:c9:33:a7:bd:62:85:11:20:61:
         c9:c4:de:3a:5e:95:99:ad:e1:0f:64:03:44:b0:05:b1:2d:79:
         b0:cc:a4:8a:23:27:24:36:0e:89:63:85:ea:02:6b:80:a9:f0:
         39:8e:e6:30:a7:a2:87:f8:8c:a2:ae:22:31:31:fe:99:a7:ec:
         2a:f8:66:16:72:f2:08:0d:d6:6d:51:7a:a0:fb:79:fe:04:f1:
         c9:17:19:6a:b7:52:d2:62:34:1f:f5:26:9a:79:80:fb:4a:33:
         21:ad:73:c3:0c:c9:3b:38:15:7b:aa:7c:0e:6b:4a:fd:43:59:
         fe:e3:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----