Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File:                     1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier:          XOu3DQE6gVuEgYrWajx/FbWuKI/5b9QgNAe/lnx880M=
Subject key identifier:   04:E4:9F:3B:EB:BD:29:40:E4:8B:AA:19:7A:5D:9F:49:DD:6B:8F:EA
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer:       /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial:       0194BCE093F25C58ABE4C2451CBF70E48A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number:          1453
Signing time:             Fri 31 Jan 2025 15:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:21 +0000
Files and hashes:         1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: lepufLeU0jzYg+MwPhs+eVDjedG4IC5qeiIPkW8fbO0=)
                          2: 2Ksn55yLgCkUTD5aLOt0Y8z_PQA.roa (hash: YGbzAqhxgCQickL+xdM1b5h2KIGE4igLXR/EObDj07M=)
                          3: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
                          4: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
                          5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
                          6: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:93:f2:5c:58:ab:e4:c2:45:1c:bf:70:e4:8a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
        Validity
            Not Before: Jan 31 15:00:21 2025 GMT
            Not After : Feb  1 15:00:21 2025 GMT
        Subject: CN=04e49f3bebbd2940e48baa197a5d9f49dd6b8fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:07:6e:39:2b:c2:f4:19:69:74:02:05:5c:
                    21:4b:ca:3a:b2:57:59:5a:5c:ca:13:8d:99:7b:6a:
                    98:52:53:0d:54:30:6d:cc:54:84:eb:5a:fb:4a:5e:
                    5a:7a:f6:27:7b:eb:61:0c:fb:90:d1:3d:c1:e9:1f:
                    aa:ca:0f:68:58:a3:b7:27:f1:ad:07:a7:61:9f:f3:
                    6b:e3:e8:a4:7d:93:75:2f:8a:91:32:d3:23:ac:9b:
                    83:14:1c:d9:eb:e6:78:71:00:1c:87:00:e8:0e:8d:
                    64:d1:aa:b1:2f:40:c5:6f:5a:eb:67:09:ca:a1:a3:
                    30:1f:1b:53:90:5e:dd:60:e8:9d:4b:30:2d:6e:1d:
                    ae:fa:f2:ee:22:f7:ad:3c:0f:ea:23:18:e5:91:6b:
                    25:07:fc:3d:e0:df:c4:dc:74:c4:54:a4:a1:bc:7e:
                    66:1f:6d:0f:28:80:a4:49:63:f2:d3:b6:43:0b:df:
                    9b:96:99:e6:53:6b:8b:fb:bb:3f:f1:11:f3:00:89:
                    a5:36:96:d4:75:87:83:fa:ef:3f:e7:20:d5:68:bd:
                    5c:ac:3a:2e:81:a8:96:86:cb:9f:10:db:3f:bb:4f:
                    90:e8:b3:06:8b:71:78:2d:8e:87:cb:ba:d4:c6:73:
                    db:c8:8c:09:ed:12:bb:75:2f:0d:5a:a0:db:32:d4:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E4:9F:3B:EB:BD:29:40:E4:8B:AA:19:7A:5D:9F:49:DD:6B:8F:EA
            X509v3 Authority Key Identifier:
                keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:bb:1c:3c:1c:b7:d2:b6:2b:d5:58:37:7a:4e:22:7f:1e:
         46:8a:67:be:6f:13:f8:ad:a9:c6:ea:fa:fc:69:0c:ed:80:26:
         05:c0:be:37:1e:31:82:7a:24:02:82:eb:01:a0:a5:7e:2f:54:
         e8:71:9c:6e:80:4b:27:ea:d5:41:41:65:2c:fc:ad:b3:8c:e2:
         17:ab:e9:ce:12:6b:7b:62:8d:8e:da:fe:18:a7:6e:4a:1d:90:
         cc:91:61:b5:78:97:6c:ea:1a:88:a4:e1:a6:eb:8c:be:c2:6c:
         f1:e3:52:52:80:b4:00:50:04:2a:8b:96:86:8d:74:91:be:93:
         a3:2d:ab:8c:6f:40:d1:5f:d6:0f:44:9e:ae:07:d5:9b:8a:9e:
         bf:9f:82:0f:b4:f0:19:d2:d1:fb:73:1b:57:bc:1f:82:3b:8c:
         0f:a3:f7:55:a4:cf:df:f8:85:4f:b8:42:d4:09:09:1d:74:51:
         59:11:a3:f5:7e:0a:1b:b6:e8:ff:9e:c3:1f:95:59:91:07:c9:
         7f:78:7c:65:95:0f:ec:e2:df:1f:a6:52:69:b5:24:65:54:21:
         de:0c:a8:d0:cd:b7:74:00:51:8d:a0:a2:f4:d4:55:50:ef:9a:
         ad:b6:83:e6:89:90:0d:7c:29:0e:23:64:05:37:0e:eb:35:c6:
         95:63:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----