Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          0k7Vc+UqkahXNN+ioge6aYL26yoQ9QknjXlY+CL90L4=
Subject key identifier:   E4:31:8A:D2:1E:56:96:C7:5F:7B:F8:72:F4:B3:F5:17:EE:6C:FE:01
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       0194BBCE0C2798D8A3896AAAC5BF9069F97F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:30 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: EcpfmGrBYCMlA66FSnBwg39Y5mwP7j76Q6mRA2MXkOc=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:0c:27:98:d8:a3:89:6a:aa:c5:bf:90:69:f9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Jan 31 10:00:30 2025 GMT
            Not After : Feb  1 10:00:30 2025 GMT
        Subject: CN=e4318ad21e5696c75f7bf872f4b3f517ee6cfe01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:39:b2:95:4e:ed:b5:af:78:7c:ed:40:87:
                    34:58:2e:56:64:51:f1:17:4a:20:30:f4:9f:61:2b:
                    92:57:b4:30:a2:02:33:17:96:89:6e:dd:e4:e8:ff:
                    e6:2b:7b:d7:e3:0e:27:77:9d:35:d7:70:8f:bf:a9:
                    ef:6e:3c:a0:27:18:c6:9c:14:2a:21:00:6a:83:7b:
                    19:6f:88:22:63:59:d5:79:79:d1:ae:9c:2d:af:8f:
                    30:16:14:e4:bc:a1:ef:a0:41:37:98:e2:6c:29:ef:
                    19:18:24:13:ec:62:30:4e:be:0f:55:e7:fb:7f:1c:
                    fc:69:bf:de:cd:25:da:7c:ed:6c:41:5b:9b:3a:e8:
                    6a:1c:e1:df:3f:a5:01:5c:95:4a:7f:16:da:7e:57:
                    71:d1:70:6c:ad:d3:9c:5e:0b:ec:fc:24:c3:95:6e:
                    34:4d:84:72:6e:09:55:49:5c:f9:ad:1d:c5:f0:e4:
                    43:2f:4b:d5:b9:2e:7a:b0:11:95:d0:8d:98:af:78:
                    7e:c3:ab:f8:22:1d:ea:67:fa:11:44:51:2c:2c:9f:
                    1d:ad:b6:45:90:33:38:d0:b0:6b:0d:eb:54:84:00:
                    a2:82:73:b5:06:00:a4:03:e6:d7:ed:56:13:6a:29:
                    a6:d2:b6:e4:51:1d:db:c4:10:0c:ac:c6:63:31:08:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:31:8A:D2:1E:56:96:C7:5F:7B:F8:72:F4:B3:F5:17:EE:6C:FE:01
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:37:19:8f:e6:67:f2:1f:cb:51:43:cc:6d:7e:0d:eb:b8:50:
         15:67:da:80:76:88:8c:b8:70:d2:d0:e7:8a:5e:e0:85:53:c5:
         89:0d:ed:c3:a4:23:ec:99:63:40:9e:f5:2a:f7:4b:d6:31:c0:
         ce:c6:23:bb:81:5a:74:da:59:58:66:3e:40:c0:a3:12:eb:fa:
         25:34:33:04:bb:51:86:b3:87:2d:36:8b:8b:49:b8:87:10:4c:
         e2:f2:71:b5:d3:54:74:66:91:e7:4e:55:05:5c:5a:7e:53:62:
         56:59:95:e1:16:65:0d:4f:5c:8c:ac:92:20:a4:7c:19:5a:db:
         6f:39:cf:c0:5e:c1:d2:0f:ec:e7:84:39:27:88:a4:2b:a3:75:
         63:d0:9f:1d:7b:a6:9f:94:c9:d2:a1:dc:3c:de:44:65:f0:18:
         10:8d:e7:c4:af:e7:73:a3:4e:79:bd:7f:47:66:fe:49:cf:2c:
         ad:64:0e:7d:d0:b3:fb:a0:03:0b:60:a5:ea:0d:70:61:f8:52:
         35:06:a3:68:18:ff:ce:4f:d6:1e:f7:70:62:a5:85:a2:4d:6a:
         e1:7e:0f:9d:4b:ea:80:0c:b0:9f:89:a3:17:34:54:39:b6:92:
         7f:c0:73:ef:7f:d4:b8:ec:8d:8a:e4:14:00:4c:a8:7c:03:e3:
         9c:a0:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----