Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
File:                     7qArGX269963Tgon2dTs0_rh6O0.mft (raw, json)
Hash identifier:          7sWR4HgJ/0r9u7rvT86mUFYK8X91f4uZ5rt9Zcyrlos=
Subject key identifier:   C1:51:32:A2:6A:6A:EF:1B:CB:16:8C:D3:DF:2C:DC:E3:81:04:BF:7D
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Certificate issuer:       /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial:       0194BC3C6F0BCB9ED298E2D15E575C02B5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
Manifest number:          1446
Signing time:             Fri 31 Jan 2025 12:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:04 +0000
Files and hashes:         1: 7qArGX269963Tgon2dTs0_rh6O0.crl (hash: 6QljQ7gZ9oD/HoayWkzMDta9IzHvYHwDydg9Rhq6Ijk=)
                          2: In5a058jiz4_lFdMRA1YAO5upWI.roa (hash: gZZd9sSv/P6mDkr914Plrtz+0eGChqMObEYXk/TeIT4=)
                          3: NxsBpjDsWy9v0RWMdQHyTsw07lc.roa (hash: leheEhbDI4XfsGyTiSLU6x5xDwKD07q9ll4YmYgHG4Q=)
                          4: RQkXqsrplw0zjDsXai-BBXwMLBo.roa (hash: 8ubhZZt/B5qNdYxUcXc1uAYTFsQNty/CaNvlBt65c8o=)
                          5: aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa (hash: yU020JUGihSFwGMLXiDxQbplODmP3bvw7D4/kPZyPGs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6f:0b:cb:9e:d2:98:e2:d1:5e:57:5c:02:b5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
        Validity
            Not Before: Jan 31 12:01:04 2025 GMT
            Not After : Feb  1 12:01:04 2025 GMT
        Subject: CN=c15132a26a6aef1bcb168cd3df2cdce38104bf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:7c:54:58:71:34:84:2e:35:80:56:31:aa:
                    66:81:ae:7a:f3:be:3c:c0:c4:7c:a8:6a:28:3f:fb:
                    62:89:39:07:78:95:b8:86:cb:48:e1:4c:4b:16:9c:
                    0d:ea:c7:87:05:09:d8:a5:52:cb:8b:d2:b5:ed:52:
                    71:23:80:34:40:ca:b2:54:bc:c4:73:6e:f0:d3:f8:
                    d6:54:a8:bb:e9:67:e7:9a:5d:27:c0:ff:69:8a:2a:
                    7d:45:51:dd:53:64:92:c4:3f:4a:24:12:67:93:86:
                    ea:73:cb:3f:b7:12:25:db:67:6e:e8:bc:87:41:e4:
                    0d:d4:fb:83:96:59:ca:c5:59:7b:a2:64:5e:1f:d6:
                    9b:91:a7:3d:90:cb:9f:cc:48:0d:dd:b1:98:e6:76:
                    41:32:63:55:2c:be:b7:f9:6a:d7:61:9f:a8:95:46:
                    60:c7:88:5b:65:ed:8d:2a:c0:e3:27:37:79:e7:fb:
                    93:46:b4:7f:a5:3c:b8:f0:ac:32:41:c5:4f:e9:69:
                    f8:96:8e:7a:da:dc:13:9c:66:36:e0:f5:78:b8:6a:
                    ba:1f:eb:76:dd:46:54:08:15:ea:15:e0:85:ff:b6:
                    3f:aa:57:e6:c1:56:d2:4b:e8:d2:06:63:bf:6d:70:
                    d3:05:57:a7:7b:43:96:45:3d:ba:e3:4f:dd:5c:e5:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:32:A2:6A:6A:EF:1B:CB:16:8C:D3:DF:2C:DC:E3:81:04:BF:7D
            X509v3 Authority Key Identifier:
                keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:88:20:cb:9c:f2:89:8a:b1:d2:ad:a2:7c:d7:e6:2a:09:
         97:6e:d2:09:be:78:e3:cc:78:61:f2:35:bc:f1:94:ed:d0:be:
         ee:cc:92:bd:de:50:b5:37:c8:d0:7b:9d:62:34:d9:58:c8:96:
         bd:47:68:e9:b3:6d:95:a7:74:95:f4:cb:19:ef:96:35:67:37:
         53:df:c3:61:21:40:26:4e:db:da:a5:db:01:5e:e4:bb:12:49:
         40:8b:12:71:70:83:52:c0:73:58:e7:be:66:38:f8:2d:86:59:
         0b:3c:1a:49:7e:13:8f:42:9a:95:76:55:3c:80:39:93:93:36:
         ad:ff:cc:38:77:3d:86:15:45:90:53:c4:54:11:98:8b:c6:11:
         1c:70:b2:f9:38:c5:88:36:73:7b:1b:8c:17:f1:08:7c:a9:d7:
         a1:af:24:bb:1b:d0:5f:92:14:c4:a9:95:3c:47:43:ef:87:d2:
         02:91:ef:b0:2d:55:07:11:1e:18:2e:35:e3:c7:03:8a:4f:04:
         3e:b3:64:5f:ea:15:4f:d6:d7:69:6e:a1:c4:67:e3:29:97:ec:
         78:a3:92:8a:3b:c9:7e:e9:c0:fc:56:10:06:ba:e5:5b:7b:57:
         30:8b:da:bb:05:e4:84:70:32:46:a1:b4:81:f5:16:d9:96:9c:
         74:69:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----