Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
File:                     GvFqPPgRZyGvrYweWz6DopWc65k.mft (raw, json)
Hash identifier:          jaminbW4uWZAm1TJNN8E+FmMGJNPGKPDajl3u8qqLCg=
Subject key identifier:   8C:A8:66:3A:2E:4B:FF:C9:9F:08:C5:DE:E3:7F:A1:A5:7E:5F:FA:DD
Authority key identifier: 1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
Certificate issuer:       /CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Certificate serial:       0193E3150B3F7C3927914083CE0CCD8C33A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
Manifest number:          0B98
Signing time:             Fri 20 Dec 2024 08:00:27 +0000
Manifest this update:     Fri 20 Dec 2024 08:00:27 +0000
Manifest next update:     Sat 21 Dec 2024 08:00:27 +0000
Files and hashes:         1: 3M8ohd4vZsoKlPACyKdzUGtkgrU.roa (hash: NriHifjaJM/ZNQ2f3LLNISQiISu1fzsqY4Jv31tLHmo=)
                          2: GvFqPPgRZyGvrYweWz6DopWc65k.crl (hash: b2/56z91Jw8bzClGq+QTpnhkTZ1U55DNbb/O18g3plc=)
                          3: XIayUu2C62hwdRNhnKrB9VYomZ0.roa (hash: kuV/UXmInbcFbXhlPFftVp7zRawdtjmfM+9dJArQ0jQ=)
                          4: zmBhEe6G9U1599jVEFw8wusHNDQ.roa (hash: XeqbZWQCFUM7QXNVWUxMIPVFjN9gyZBOvIIuO4a6/CE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e3:15:0b:3f:7c:39:27:91:40:83:ce:0c:cd:8c:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
        Validity
            Not Before: Dec 20 08:00:27 2024 GMT
            Not After : Dec 21 08:00:27 2024 GMT
        Subject: CN=8ca8663a2e4bffc99f08c5dee37fa1a57e5ffadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:52:68:7a:7e:aa:0b:1b:0e:04:25:25:c3:
                    43:69:bd:4d:6f:ad:5f:b3:ae:48:22:f3:74:c7:5c:
                    ba:c0:81:75:a6:9e:df:d5:8b:5e:42:42:ac:fc:a9:
                    83:e1:6a:25:29:29:2f:b6:9c:59:ca:99:e4:22:07:
                    aa:40:ff:d1:60:13:b4:ea:9f:66:34:e5:7a:81:42:
                    5c:ab:72:f0:2a:76:9a:96:5a:60:0f:39:fc:9b:ce:
                    e8:78:91:11:8d:59:0c:5e:50:ae:b6:b2:e0:27:37:
                    a4:c4:67:2b:fe:d1:0b:01:d9:2c:69:33:67:3e:8d:
                    03:75:0a:3b:d6:56:67:62:fc:fd:a0:c4:bb:06:9b:
                    e5:dc:03:06:0e:4f:df:87:3a:33:de:79:42:c1:b6:
                    5f:0f:19:b0:e4:d9:c6:8c:76:c1:bd:cf:85:63:e8:
                    e5:c9:82:3d:64:34:72:f4:fd:87:60:f2:c7:ed:fb:
                    e1:03:51:18:33:93:dd:f2:7e:11:01:b2:e7:a8:2e:
                    0a:9d:b3:c8:30:3f:e8:00:75:b3:f5:50:68:ee:bb:
                    27:a0:56:fd:e2:02:87:54:78:44:c8:6d:70:05:40:
                    88:78:40:13:6d:9b:e9:04:84:5f:10:ce:a8:6b:a0:
                    81:a9:6c:b1:e1:b3:b5:54:d1:6e:af:dd:ab:f7:f0:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:66:3A:2E:4B:FF:C9:9F:08:C5:DE:E3:7F:A1:A5:7E:5F:FA:DD
            X509v3 Authority Key Identifier:
                keyid:1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:81:3f:0c:58:cf:ee:2d:7b:6c:84:a4:09:1e:77:f0:9a:
         59:00:c4:20:c8:86:7e:dc:00:9e:46:07:f3:90:4c:f3:79:ac:
         d0:69:15:bb:ea:03:8d:e0:09:a9:e1:52:12:2f:b1:09:be:b7:
         92:e7:75:40:84:6b:00:46:4b:bf:2f:b7:d4:9c:bb:9e:10:21:
         61:25:36:c6:ee:48:ac:91:25:7c:23:cb:a2:25:d1:72:22:75:
         6b:1d:cc:64:22:6f:47:a3:cd:b9:80:a3:b7:3d:71:2f:61:58:
         30:3c:02:45:3d:ea:7a:06:9d:d4:d2:a7:22:5f:9d:ca:26:5e:
         2b:ed:fc:12:64:68:3b:d7:29:30:ac:de:c9:0e:44:c7:a7:87:
         0b:9f:9a:da:4b:ed:a4:30:1b:1c:e1:9e:b9:e6:f4:da:8a:3c:
         42:28:32:8a:2c:35:58:a1:4b:ac:03:ec:74:fa:52:21:49:02:
         c6:27:e5:73:d8:43:40:ed:de:64:4c:e0:13:73:e2:73:21:79:
         1c:a9:24:ac:1a:7b:83:c5:72:8d:8d:ca:45:3b:c7:18:34:c6:
         1e:24:2d:f1:61:72:d3:d9:50:d8:a4:98:80:ae:b5:37:50:cb:
         aa:63:15:4f:ed:9a:ac:49:53:c5:ba:a2:a0:09:89:50:8c:02:
         c3:d1:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----