Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
File:                     _gyfMOO0bVC40b95udHbhPJRNLo.mft (raw, json)
Hash identifier:          5Vcw3oYO2MIBGQbAXwqGC9FkrP8FX4GtBUioJB5veUA=
Subject key identifier:   AA:EC:96:A5:29:7A:20:54:81:29:24:21:E8:F6:86:3C:A1:00:0B:DC
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       01922945B7DD96AD782A80BC2D4D3A2A3084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft
Manifest number:          0A10
Signing time:             Wed 25 Sep 2024 13:01:27 +0000
Manifest this update:     Wed 25 Sep 2024 13:01:27 +0000
Manifest next update:     Thu 26 Sep 2024 13:01:27 +0000
Files and hashes:         1: NXGee85ErSqoPHit0HbEI9RiTXA.roa (hash: mrQojEodQoPywO1DCX1hNHlcS314pUQ+hShQlzfdTpc=)
                          2: XXKSMBfdtj4wckKpZqtviuU7xFg.roa (hash: AnVa68j0ow0iry2rgLMUfSnCOuwaBZQrrfYMJBvfaO0=)
                          3: _gyfMOO0bVC40b95udHbhPJRNLo.crl (hash: Ozfx9ZbcesM8N+gZQOU3b2v4RJGgpKCofg+183aGlRs=)
                          4: ne7u7zrQx9h3GyUCTzVtTKZz5yc.roa (hash: 3jTE7nHCoy0u9yFZiKr5iAaof29Zj8WJDdeH8FAjGpc=)
                          5: s8LVsFvaOxwp2E4b-2DaV_21w1I.roa (hash: P95qrYxWkT8pnUh8iTszvyQhE+gKTkiqgI76lRaKS6Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:29:45:b7:dd:96:ad:78:2a:80:bc:2d:4d:3a:2a:30:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: Sep 25 13:01:27 2024 GMT
            Not After : Sep 26 13:01:27 2024 GMT
        Subject: CN=aaec96a5297a205481292421e8f6863ca1000bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:61:fa:26:6a:aa:ad:f5:f3:d2:86:16:e1:0a:
                    ab:ef:9e:41:43:60:81:60:38:41:ef:23:f1:82:e4:
                    6e:11:fa:f2:ff:e4:d8:79:46:7b:af:3e:e4:75:a0:
                    52:eb:ac:ca:fb:0d:76:10:12:15:91:bc:21:d8:b6:
                    38:00:c8:5d:81:62:91:0f:fb:12:ed:73:61:78:53:
                    3a:54:bf:45:23:a4:7a:1a:f0:06:91:7f:81:18:86:
                    84:21:79:1f:b1:ba:48:81:31:9e:d1:66:e2:10:f0:
                    c5:ff:31:8c:24:e9:1b:73:a4:5d:c0:16:f1:d1:dd:
                    8f:b7:0b:39:ad:6c:98:d2:2d:4b:bf:df:70:4b:f6:
                    a6:0b:6d:75:ae:9a:03:93:73:01:44:28:ff:96:dc:
                    a8:99:00:ec:f6:4c:bf:bc:11:99:88:af:47:f0:4e:
                    4a:a3:25:1b:40:60:40:c5:52:4a:9b:e2:fc:bd:3f:
                    72:4c:71:53:74:59:aa:de:67:e6:7e:0b:33:ed:bd:
                    2c:d0:0b:ac:3a:47:b7:2f:32:44:d0:17:64:5c:0c:
                    2d:b9:76:ce:3a:fc:2e:f3:7d:57:55:c2:c9:9a:93:
                    40:8c:1e:72:13:07:78:8c:28:81:0a:74:46:00:71:
                    fc:ce:ce:e9:1c:66:7d:92:3f:bd:c4:b9:97:a0:e0:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:96:A5:29:7A:20:54:81:29:24:21:E8:F6:86:3C:A1:00:0B:DC
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:02:29:d4:c4:45:28:e0:8e:fb:6a:06:67:e6:a5:db:62:60:
         d7:e6:01:c2:64:b3:8e:47:d8:eb:c4:9c:f4:f6:67:e5:80:47:
         9d:15:41:f0:bf:1b:53:45:6e:37:05:a7:8c:45:09:29:87:69:
         35:cc:45:4d:55:d1:52:e7:15:00:a5:8b:af:28:db:37:7c:d1:
         9b:9b:c3:e6:98:eb:c1:0e:9e:9f:58:24:2f:2c:60:4c:e0:b9:
         02:93:3f:11:63:a6:4b:75:97:8c:3f:d9:8d:9c:d7:8c:76:67:
         23:60:4d:ba:81:a9:60:41:90:73:00:e2:80:39:0f:48:85:15:
         e7:27:58:f8:f8:0e:56:d8:1a:7c:7c:0f:a8:a0:06:5d:a8:48:
         64:5c:54:4e:23:12:55:af:d6:fb:51:b8:6f:40:ca:af:26:2a:
         fc:6c:a1:c6:ae:b7:83:44:ff:3f:3b:3d:c0:14:25:bf:29:45:
         66:fe:49:10:69:96:05:29:08:4e:53:12:51:c5:35:51:19:49:
         cf:ca:6c:1a:27:ab:39:2f:30:a2:dd:a7:de:80:f0:d8:ce:ee:
         2a:27:08:0d:b7:6c:e9:9f:ab:e5:98:6f:77:56:7f:eb:e0:d4:
         c3:a2:ca:82:2a:b4:0f:7c:8f:d4:0f:da:73:c2:81:66:26:71:
         bf:2d:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----