Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          BT3o4rAFlQLNJp52aO2jCC6Y7EzMw+QktaJDd6bllNs=
Subject key identifier:   10:38:68:2E:A6:A0:B9:7B:3D:77:0E:54:B7:12:76:DD:5C:9C:7A:96
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       0194BCE088384AB03506CB00D6AD80DAA335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1440
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: 1ppTyuwYHEt3lLnOv8MhH8YIOrAwP301YjKbaWJrsD4=)
                          3: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          4: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:88:38:4a:b0:35:06:cb:00:d6:ad:80:da:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=1038682ea6a0b97b3d770e54b71276dd5c9c7a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:08:da:17:e7:49:58:0f:1e:e2:97:0e:03:
                    1d:bc:74:d2:3e:56:f8:e0:2a:20:1b:58:c8:de:b6:
                    fe:24:35:2b:f4:d5:73:a0:9d:55:4a:e0:0c:9d:ff:
                    48:de:be:ea:ba:3d:10:c0:36:b7:d5:d4:3d:58:11:
                    e9:46:8a:fe:82:10:4e:64:56:0d:96:a8:9d:b2:f0:
                    7b:15:4a:ec:21:b9:f4:71:65:5e:73:66:17:11:19:
                    26:da:2b:9d:54:97:29:5e:1e:56:f8:29:be:55:18:
                    6b:80:21:9e:7b:92:53:8b:e2:30:98:b8:06:28:2c:
                    7b:f9:3b:26:e7:ef:72:41:57:14:8e:c6:46:f0:7d:
                    b3:af:18:67:48:54:ba:d4:23:42:c1:75:85:04:27:
                    16:2a:59:9f:00:c4:f3:74:ef:27:65:52:6a:d0:a8:
                    44:ef:57:87:4e:59:88:14:ca:7a:93:02:61:e7:50:
                    1e:c6:24:47:bc:b6:b8:af:4c:5a:ff:eb:87:73:2d:
                    a4:ad:d9:6d:93:7b:f0:0c:d3:ef:11:8e:06:f3:7f:
                    20:03:83:28:f2:f6:25:b7:85:04:09:12:3a:02:f7:
                    48:52:61:6f:dc:9a:b2:19:f1:26:73:a0:b4:3d:3a:
                    bd:d4:b9:e7:e4:42:5a:13:49:4b:f8:2f:3d:8c:43:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:38:68:2E:A6:A0:B9:7B:3D:77:0E:54:B7:12:76:DD:5C:9C:7A:96
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:67:60:5d:2e:c9:b8:0f:df:03:c6:6c:3d:ff:9e:fc:06:e7:
         06:71:21:15:26:b7:f9:f9:2d:c7:09:62:1b:fb:65:74:dc:ba:
         7e:3b:d9:42:8d:c6:99:b0:08:4a:a2:68:ac:22:fe:c2:76:be:
         37:82:63:1f:fd:5c:3a:28:fa:8b:3f:b6:82:b4:22:f0:eb:81:
         6e:c1:90:c3:75:39:a3:3e:ce:c0:b8:4e:36:9a:5a:cb:d8:1c:
         2c:29:e5:5b:de:58:3b:2c:b4:36:d1:d0:6d:91:7d:8f:14:b1:
         bf:f7:69:0c:3e:22:50:73:e3:17:45:04:56:6c:18:04:9b:ab:
         43:d8:b0:90:37:90:af:09:16:f1:2e:b7:e2:f1:a4:12:98:2a:
         54:98:70:c3:9c:0e:9d:be:69:0c:58:72:01:e3:22:ee:3d:e5:
         43:90:7f:1a:6f:89:06:49:fb:7b:19:e5:1b:03:48:9c:90:b7:
         a1:0c:a2:27:31:47:21:fd:9a:2b:43:7c:5e:4f:d7:78:44:b2:
         98:48:3c:fc:9a:41:6d:5e:03:5d:64:ae:6a:37:73:5d:eb:17:
         6d:00:ec:21:28:f6:20:3f:95:06:7e:d6:1d:59:5f:a8:29:b5:
         c8:36:b7:04:61:06:96:05:f0:73:78:7e:67:13:63:bc:4d:54:
         dd:b8:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----