Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
File:                     KeUoQqbixQwOLA9duJHdLZZW-v0.mft (raw, json)
Hash identifier:          PI/avpCeKdGwL+avkBkl4RAp6nsB36RNQFPxPW3P7GE=
Subject key identifier:   43:2A:00:80:05:5F:FE:27:97:68:CF:52:D8:A0:C8:71:1E:63:1B:C9
Authority key identifier: 29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
Certificate issuer:       /CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
Certificate serial:       0193493AE22A12BA12783B5DB7E133EE463E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
Manifest number:          027B
Signing time:             Wed 20 Nov 2024 11:00:15 +0000
Manifest this update:     Wed 20 Nov 2024 11:00:15 +0000
Manifest next update:     Thu 21 Nov 2024 11:00:15 +0000
Files and hashes:         1: 02UNUsIQyfpAbMMmvTUZ33TeAmw.roa (hash: RXwzkMXiWEIN9cpmS0j+E/p8BQSPaf5OEf8dEqFXk58=)
                          2: KeUoQqbixQwOLA9duJHdLZZW-v0.crl (hash: tekFj06sa9Yc1+nv7ZouD9kgiWEkqoyj6SXQ9TpLkj8=)
                          3: M0jPGazvff9Ux3NIuCmO24EtQXA.roa (hash: td5TKaMyv4i6JkPKN5xIyTcHESx+WHZpKCjwvcocQj0=)
                          4: tnkdqfzvl9cIEK3LRFyQyZn83Z0.roa (hash: LxAAM0FivlGbdfmDD/Jv/CGMf/d6mOeXCB6StNV1L6E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:49:3a:e2:2a:12:ba:12:78:3b:5d:b7:e1:33:ee:46:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
        Validity
            Not Before: Nov 20 11:00:15 2024 GMT
            Not After : Nov 21 11:00:15 2024 GMT
        Subject: CN=432a0080055ffe279768cf52d8a0c8711e631bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:57:8f:a6:78:b5:15:f2:67:7c:4d:b6:54:
                    56:a7:0a:5a:71:ae:74:30:a0:55:ff:1c:5b:55:0f:
                    ec:f6:b5:93:a5:9c:90:f6:be:3a:bb:6d:51:2c:71:
                    4b:35:0c:68:d7:a1:09:8a:56:de:ce:b3:e9:a7:b2:
                    86:27:c2:bd:77:bf:cb:3b:4b:4d:d7:4a:d4:e7:6f:
                    ee:aa:dd:04:f9:1a:cc:5f:72:b4:4d:5c:74:89:84:
                    55:2b:d0:2e:49:d1:f6:38:29:72:eb:0c:9e:f4:f1:
                    d3:6a:d8:89:b8:d1:17:d4:f2:b5:21:4e:b9:c4:fb:
                    26:40:7d:b9:3b:71:c4:e9:17:2e:c7:34:6d:74:56:
                    5b:e6:e9:13:ae:6d:49:9c:ee:60:79:47:dc:cf:90:
                    9d:04:7d:e7:0a:cf:be:66:4a:10:b4:82:dc:e4:a3:
                    94:a4:32:59:07:49:ce:3d:08:71:a9:6c:26:d6:15:
                    ce:c3:82:4d:27:88:a3:25:51:da:db:e7:3d:a5:11:
                    f1:6a:bd:39:a8:65:e9:da:a7:1e:fe:dd:e6:73:cf:
                    bd:d8:f4:18:c4:2f:1e:a4:84:01:4c:e6:27:68:96:
                    f7:5a:c1:ea:3f:54:8b:9a:a1:2d:53:5d:27:e9:97:
                    7b:d1:08:22:ca:c7:43:4a:24:d2:f5:e3:07:36:09:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:00:80:05:5F:FE:27:97:68:CF:52:D8:A0:C8:71:1E:63:1B:C9
            X509v3 Authority Key Identifier:
                keyid:29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:d3:fb:45:b8:a2:73:f3:4b:59:33:d9:5c:6d:52:e8:3d:
         55:5a:27:61:91:58:a1:bb:5e:b4:7b:dc:f5:4f:7c:0f:83:1d:
         0c:d2:9e:48:ff:4c:07:53:0d:b4:00:33:0f:42:cf:f5:d5:f6:
         5e:5b:0f:54:ac:fc:01:bf:99:78:16:ed:0d:bf:65:f2:30:60:
         a0:18:0c:e5:64:6c:0a:0d:14:99:3a:8f:d1:c1:be:d5:07:da:
         7a:eb:19:6a:18:5b:11:ae:2c:ce:02:03:84:ed:e9:c1:d9:c5:
         4c:9e:cd:2b:8f:0a:cc:99:e5:5d:dc:ff:6a:4e:d0:75:47:4f:
         ec:1c:12:fb:0a:be:98:e6:7b:3a:b9:b0:0a:36:3b:9f:76:0a:
         a7:fb:8a:15:2a:d3:a1:e0:8a:d9:5e:7c:da:2b:7c:dc:28:fc:
         b0:ab:72:16:c4:86:40:6d:c2:c9:c5:f3:be:6f:ad:e6:dd:f9:
         19:f5:a9:4f:b3:1c:f8:37:5d:bb:81:9c:58:a1:3a:a8:d2:25:
         a4:dd:8f:ae:dd:27:10:dd:c4:38:26:71:43:33:d9:9d:db:b2:
         e4:0b:3f:bd:5c:0d:ad:e8:75:9e:77:88:ce:32:2b:cd:09:d8:
         f5:6e:44:f9:06:09:30:6e:4c:ad:1c:e0:60:b9:42:1c:11:c0:
         e8:49:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----