Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
File:                     2f2qHAH51r-3yaAN4AlCpGY2A2U.mft (raw, json)
Hash identifier:          KhAfKdJ/L1xJWK7c7uf6XBA8iS1HISkrAHRLRRGRXCs=
Subject key identifier:   6C:E9:2C:04:76:83:EF:07:14:18:10:25:AB:87:9F:DF:47:7D:A4:95
Authority key identifier: D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65
Certificate issuer:       /CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
Certificate serial:       01948F63F4258E7AC59725601F767FD7A8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft
Manifest number:          089A
Signing time:             Wed 22 Jan 2025 19:01:19 +0000
Manifest this update:     Wed 22 Jan 2025 19:01:19 +0000
Manifest next update:     Thu 23 Jan 2025 19:01:19 +0000
Files and hashes:         1: 2f2qHAH51r-3yaAN4AlCpGY2A2U.crl (hash: kWAtYHwsuWOmUkuazx/wvf321K9cin/lqpaoo5byoOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:f4:25:8e:7a:c5:97:25:60:1f:76:7f:d7:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fdaa1c01f9d6bfb7c9a00de00942a466360365
        Validity
            Not Before: Jan 22 19:01:19 2025 GMT
            Not After : Jan 23 19:01:19 2025 GMT
        Subject: CN=6ce92c047683ef0714181025ab879fdf477da495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:99:ef:f5:17:b0:51:62:0d:ae:d2:b6:3c:
                    65:fb:98:f3:db:7d:80:d2:a7:14:29:8d:b9:87:28:
                    09:5d:8e:00:91:e3:9a:5b:ca:96:bb:05:bf:47:68:
                    df:0d:e3:7b:56:fb:55:52:4d:5a:09:cd:3c:e3:76:
                    f4:b7:85:0f:87:0b:ff:5b:d8:5f:9a:e0:e9:72:c5:
                    70:86:f4:50:7f:5f:29:71:43:9e:80:55:6e:b6:05:
                    2e:88:e8:5d:fc:ab:af:29:a2:73:98:6a:ef:3a:18:
                    a4:77:13:f7:be:d5:59:a0:b6:ba:8a:71:c3:e7:77:
                    6d:16:9a:99:c6:fb:4b:49:50:fa:e9:f0:8b:c1:85:
                    4b:6e:c8:7d:61:69:63:2d:6e:75:9c:e4:3e:a6:7e:
                    6a:8e:93:ce:9d:c2:1b:c9:ba:06:5d:2f:48:5d:c4:
                    d6:0f:f6:5d:a7:14:ee:44:44:3c:d6:45:41:94:85:
                    e2:0f:28:6e:8b:83:63:f4:75:38:f9:fe:8d:f9:45:
                    06:37:5a:a2:03:35:95:8d:6b:ae:0d:f6:25:21:11:
                    62:91:4c:2e:ba:03:36:ce:8f:a2:37:bd:79:9f:0d:
                    eb:ba:20:b4:86:0f:d3:e9:6c:7e:80:3b:2d:95:66:
                    1f:41:c7:d7:62:39:2e:08:a4:76:b6:9e:71:f9:94:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:2C:04:76:83:EF:07:14:18:10:25:AB:87:9F:DF:47:7D:A4:95
            X509v3 Authority Key Identifier:
                keyid:D9:FD:AA:1C:01:F9:D6:BF:B7:C9:A0:0D:E0:09:42:A4:66:36:03:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f2qHAH51r-3yaAN4AlCpGY2A2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bb040a-c802-4960-8dbf-b9baa9f061fe/1/2f2qHAH51r-3yaAN4AlCpGY2A2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:18:be:eb:46:89:93:78:5b:65:91:7d:d2:94:e3:0c:6a:60:
         1a:ff:3d:cb:f1:36:48:04:dc:07:04:df:f9:8b:8f:cb:91:dc:
         05:e2:eb:00:dc:ba:3d:f2:7b:9d:6d:c0:42:5a:fe:36:1e:fe:
         fd:84:42:a2:84:01:04:63:76:1c:a7:78:cb:0b:54:1c:4b:0e:
         1f:8f:03:04:3e:34:7e:6f:f2:0c:8a:24:b1:62:50:eb:b9:e1:
         ce:4a:a0:b1:19:59:dc:8d:be:71:f7:78:f2:f7:c3:6a:e3:d5:
         c9:01:f2:34:47:5c:4d:f4:30:79:15:27:43:f8:01:0f:90:68:
         b6:e9:87:24:a7:de:b4:13:9e:d0:73:89:0b:34:0d:2f:24:ae:
         dd:51:28:49:bc:4e:a7:f7:86:81:29:21:cf:c6:9a:f4:04:1a:
         24:77:83:2a:bb:dc:68:de:43:7d:c5:ae:63:4a:8f:ad:2b:31:
         bf:9a:8f:ae:f5:7a:b4:61:15:52:1d:57:65:fd:ed:21:53:ee:
         59:59:ce:4a:6b:22:28:c9:03:30:6e:8a:6d:5b:d5:45:2c:d9:
         9e:21:61:57:16:c2:e2:f2:5b:98:bb:54:1a:41:38:f3:95:35:
         21:3a:ec:d1:8b:23:95:f1:c4:c1:76:2c:f2:e1:17:67:ec:10:
         9c:a2:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----