Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File:                     rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier:          M5a1ZPVWl2dGAr4dFrSpgTZCH3zlwfJOIruwTOTO2Uc=
Subject key identifier:   95:57:B9:B8:5C:7E:49:57:E4:E0:F5:11:4F:D1:4D:BD:71:0A:C3:89
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       0194BD856597AA143EFEA49C49DEA00E1266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number:          0961
Signing time:             Fri 31 Jan 2025 18:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:23 +0000
Files and hashes:         1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
                          2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
                          3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
                          4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
                          5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
                          6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
                          7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
                          8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: /ot4YHVMb95jFeuu/ARICUyk6AZLCP8XEDRF2/hHgZE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:65:97:aa:14:3e:fe:a4:9c:49:de:a0:0e:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Jan 31 18:00:23 2025 GMT
            Not After : Feb  1 18:00:23 2025 GMT
        Subject: CN=9557b9b85c7e4957e4e0f5114fd14dbd710ac389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:7b:6f:be:6d:23:28:07:17:49:bf:4e:bf:
                    c9:88:67:fc:65:8f:45:1c:f8:b9:e1:95:85:46:8e:
                    75:d3:af:2b:8f:dc:96:9f:02:75:c6:a5:8e:dc:a4:
                    cf:77:0c:90:28:d2:a1:b0:7f:fc:6c:0e:d8:5f:17:
                    ed:75:e9:d8:12:9a:1d:ee:59:e2:fd:21:a3:99:14:
                    22:6a:84:29:b3:06:34:11:64:9d:01:6c:e1:bc:ef:
                    6e:36:80:8f:71:e2:e5:9e:06:08:78:18:aa:44:f4:
                    98:a3:4b:78:7d:5a:49:f3:63:bf:bf:b9:3f:45:35:
                    58:01:70:22:f8:9b:71:ef:90:2b:0c:80:ab:6e:2b:
                    1d:16:b3:80:1a:a3:cc:89:d9:fa:33:79:dc:87:32:
                    69:e9:97:51:8f:2c:d1:d0:15:fb:20:40:e5:ec:3a:
                    7b:a5:24:83:bb:53:35:aa:90:87:b5:6c:64:33:4d:
                    e1:c1:f6:95:4a:0b:e5:84:c4:0a:b3:b2:1c:0f:18:
                    3d:b8:6c:03:3e:64:84:31:78:b1:2a:8b:01:a7:8b:
                    79:0a:c5:07:62:40:fc:76:a3:71:43:d7:c8:43:97:
                    17:5b:45:88:c0:9f:fb:5f:d7:44:1c:60:fe:71:55:
                    46:af:e8:ce:57:9d:8f:b1:58:25:95:e8:b8:dd:34:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:B9:B8:5C:7E:49:57:E4:E0:F5:11:4F:D1:4D:BD:71:0A:C3:89
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:98:ca:cc:68:f3:ed:a1:69:34:1a:64:c7:83:fb:a0:17:
         f2:87:58:67:d4:53:5c:17:f6:78:a3:61:f2:87:88:12:42:c6:
         cb:22:6d:82:8a:9b:84:5d:23:e3:37:43:42:37:10:8b:0a:30:
         18:20:57:d8:2f:0e:1e:b0:e7:44:01:d7:f8:46:1e:d2:22:88:
         fe:1a:76:74:a3:a2:0b:23:2e:dc:a0:a5:75:98:b9:c2:e5:1e:
         85:57:64:3d:f0:70:d5:d5:d9:27:3c:73:9b:96:b2:50:c2:3b:
         93:ed:eb:31:e1:13:f7:3b:2c:35:9a:ea:ef:63:a6:0a:03:a1:
         95:9b:99:f1:eb:6b:e2:09:c2:d3:58:aa:b5:75:ae:9e:dd:0b:
         4c:91:0e:70:86:05:e9:50:c5:62:5f:2e:82:b0:44:5c:46:c8:
         9d:2d:d7:3a:78:ae:34:06:1a:e2:96:be:cd:10:5a:c5:61:78:
         15:e8:46:9b:cf:dd:e9:29:cb:12:b0:16:62:ec:eb:ff:1c:d7:
         54:85:9b:2c:26:91:97:fb:7c:d3:64:f1:e8:08:59:bb:97:ec:
         6e:88:f7:a8:13:58:89:ac:08:3b:10:d1:cc:c4:44:5d:14:fb:
         c1:b2:0a:0d:8d:33:86:48:b2:5c:ea:13:0f:87:ce:ec:98:2b:
         66:36:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----