Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File:                     QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier:          hEmJ/PufVWw0klo5psSJgCifwIlqSWSB5SW1mpltSMI=
Subject key identifier:   96:2A:A5:AB:78:09:42:18:9F:76:A7:0A:3A:01:97:C8:F6:86:1A:6F
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer:       /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial:       0194BBCDC576DCF442BC478D413954CAAD27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 10:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:12 +0000
Files and hashes:         1: OBn58ZJwEh4MhAnhsFAWGGJLifI.roa (hash: 168HaFL19xy+6TCd3GYc8l6QrgMbWSIwNLv5YeyfQ/w=)
                          2: Q0GMmj0TLNZKmzThv89XKbeW0UI.roa (hash: JZ14w91MZvqFvHWvtqxAYRsNPtiKbIaz1hieDnidrSg=)
                          3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: wJsArAuV+OftVcDyDAo5fKXD7w+qbP1m1Pqz5ot9CBM=)
                          4: QY8orDNDFtPRatFK02MXIdps050.roa (hash: NiooW7R3ctbGvF0POc0TxPmXz9RBOYgCBww2xqBcPpU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c5:76:dc:f4:42:bc:47:8d:41:39:54:ca:ad:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
        Validity
            Not Before: Jan 31 10:00:12 2025 GMT
            Not After : Feb  1 10:00:12 2025 GMT
        Subject: CN=962aa5ab780942189f76a70a3a0197c8f6861a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:7e:66:80:61:b3:2e:e4:e5:b4:79:14:dc:
                    21:aa:1a:75:2f:81:ad:cf:6e:35:9f:36:ed:e6:2f:
                    9d:b8:f0:86:bf:3c:ee:62:b7:c3:5d:66:68:b3:3f:
                    ff:01:03:8a:82:9c:3b:f7:8e:ec:30:d7:44:10:de:
                    d7:39:f2:0c:1b:8c:69:4e:66:9d:68:d5:59:47:c1:
                    79:0b:84:3d:01:02:8a:67:3a:14:c3:2a:52:75:ed:
                    72:dd:17:ce:10:a1:bb:78:f6:d0:85:00:d5:76:d9:
                    8b:3c:30:8c:2c:44:ad:c2:db:c0:22:b4:0c:55:e1:
                    78:d0:e2:31:59:8a:24:11:cc:4e:6c:39:9f:f1:ad:
                    84:93:ae:20:f1:9e:2f:ab:bc:b4:b5:75:18:7e:b7:
                    d2:c1:83:50:83:f0:97:d3:74:41:29:fb:71:66:34:
                    49:7b:7f:2f:3c:ca:af:de:4c:62:66:7b:3a:a5:01:
                    46:67:29:9b:c2:84:e8:f3:74:ee:9f:af:6d:55:06:
                    29:8d:5d:65:1f:2e:bc:6f:a6:1d:0c:c8:89:e7:bf:
                    3f:c7:8c:58:8e:71:37:22:0e:b7:57:fb:c3:3d:1e:
                    1d:f8:14:8a:ac:e3:6b:7f:ec:30:0e:4f:23:48:60:
                    71:45:7f:04:1c:be:6d:7e:f3:c1:53:7e:6a:d9:f8:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:A5:AB:78:09:42:18:9F:76:A7:0A:3A:01:97:C8:F6:86:1A:6F
            X509v3 Authority Key Identifier:
                keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:07:92:62:0e:28:3e:74:59:41:f4:dd:fe:86:f8:3b:60:e7:
         bf:33:1d:e8:7d:84:db:1a:50:f0:5c:3c:f8:05:c9:eb:1a:76:
         81:16:3c:bf:cb:d4:1c:56:8e:90:75:e8:c4:9e:2c:68:45:c5:
         5e:5c:09:2b:21:dd:85:34:21:3a:89:5a:71:34:b3:36:b8:21:
         c8:07:a4:d5:2c:67:7e:08:48:d8:5c:db:3a:8a:01:a5:bd:4e:
         03:7d:8b:9d:5c:12:63:8b:a8:58:9a:67:7f:8e:91:25:ce:11:
         6c:ad:77:71:79:60:3c:67:9f:24:09:3c:d9:58:06:8b:6c:55:
         29:8e:ed:6a:6d:54:ab:3b:e3:a5:d2:a7:e2:83:f2:bf:33:37:
         28:f9:c9:20:eb:5d:76:3c:25:09:1e:8d:6f:43:31:9e:04:0c:
         89:5b:81:92:49:56:62:a6:a9:82:fe:2c:6b:b5:74:5f:9a:f4:
         9d:56:78:ce:53:5b:12:1d:79:fb:25:8a:e5:8b:8d:17:4f:bf:
         9e:cf:01:59:79:e4:6a:4b:64:d8:37:73:ad:02:39:6f:49:9b:
         5e:1a:4e:96:98:58:f7:a8:b4:27:60:8e:b4:3b:3b:f7:50:33:
         55:56:c3:df:b6:85:d3:47:5d:b0:1b:6c:df:1f:43:fd:e1:69:
         0c:31:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----