Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File:                     QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier:          y1q6fzTuKsEdxpWiRfWCCleR/n2L7DxffIU+qE1oPBQ=
Subject key identifier:   1B:E1:95:B7:08:1D:1C:AB:50:74:A7:17:2A:30:8C:AE:1D:D1:47:65
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer:       /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial:       0194BC3BE410D56386A3AC73D0D38159673B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number:          02F9
Signing time:             Fri 31 Jan 2025 12:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:29 +0000
Files and hashes:         1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
                          2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
                          3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: D9JWexvfnfBMiud9rJukf4akAii20bfi6qGaWI0P9g0=)
                          4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
                          5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e4:10:d5:63:86:a3:ac:73:d0:d3:81:59:67:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
        Validity
            Not Before: Jan 31 12:00:29 2025 GMT
            Not After : Feb  1 12:00:29 2025 GMT
        Subject: CN=1be195b7081d1cab5074a7172a308cae1dd14765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:f2:2e:1b:fa:e6:62:e8:43:ed:16:89:dd:
                    4f:c6:e1:d2:c6:fe:5b:9e:8a:63:be:04:81:b3:26:
                    66:15:c5:23:55:98:cc:6a:6b:97:9c:33:64:34:92:
                    6e:3c:f6:c6:61:8e:ab:3a:47:75:8c:b4:9a:cc:87:
                    3a:15:67:9a:d8:db:bf:d8:4e:74:db:3f:ca:51:c5:
                    54:bf:f6:19:9d:d2:85:bb:e7:11:9a:0a:5d:92:d6:
                    25:1f:06:86:93:36:7b:2b:d8:21:2c:ac:da:c1:8c:
                    fc:89:10:d3:62:90:f4:fb:c1:12:fc:1a:bd:35:3b:
                    7e:28:fc:34:65:d1:6a:14:0b:f6:2c:7d:ae:a9:e3:
                    8a:51:8c:27:ce:0a:9e:2e:ed:f5:62:b6:23:e1:ed:
                    27:89:82:67:fa:71:d7:80:d8:6b:95:78:4e:7e:09:
                    6c:f0:cd:0c:21:22:42:4a:ac:27:5f:e5:bc:5a:fa:
                    d2:f6:d5:ad:a0:f8:f1:a4:9e:9b:6d:ac:b6:d8:a8:
                    c7:28:1d:e0:ef:da:60:fb:98:e7:fa:1c:d3:66:5f:
                    b7:27:9a:89:74:57:bd:90:ea:3b:95:10:80:59:37:
                    83:dc:f0:a8:69:77:f6:5c:d4:23:e2:5d:56:a4:77:
                    5c:1f:7f:cb:86:b0:ec:f4:83:ae:2c:5b:47:8c:3d:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E1:95:B7:08:1D:1C:AB:50:74:A7:17:2A:30:8C:AE:1D:D1:47:65
            X509v3 Authority Key Identifier:
                keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:7e:5a:00:8d:7c:93:ca:59:2c:a9:32:90:8a:d1:e4:b8:
         5c:ab:6b:9f:83:70:b2:33:ff:a4:62:cb:4d:96:44:af:e6:57:
         63:41:73:ca:87:86:cf:2b:31:53:99:36:0d:62:3c:2e:37:8e:
         08:fa:98:8a:be:42:09:f6:8c:24:54:54:1b:17:bf:96:31:e1:
         b5:4f:b1:22:0f:bc:33:aa:32:1e:0f:a5:32:c3:8c:21:c7:22:
         8b:3b:8a:05:6f:d9:c4:68:b0:80:97:22:0f:19:f6:b8:09:80:
         e1:a2:5e:78:5b:96:0e:17:90:89:68:10:c6:4a:ec:ca:79:14:
         df:d0:2f:e6:87:77:ef:c5:78:45:21:95:b8:c6:7f:e7:82:94:
         e5:bf:47:89:48:49:e9:9a:0d:28:a9:24:43:99:bf:5e:e4:1b:
         93:9f:99:d8:e9:1a:41:1e:75:04:ca:9d:21:e8:40:a2:b8:d3:
         c2:27:e3:89:06:ed:80:72:5d:ff:53:de:45:75:e4:0d:45:55:
         5f:b9:02:46:50:c2:0d:53:21:43:4a:4c:e3:04:a7:45:74:84:
         c0:90:fe:8f:56:23:3f:f0:11:56:a9:12:51:75:4d:95:5f:9c:
         46:f7:a0:bf:ed:11:0b:c2:21:34:a1:79:41:02:45:e6:9e:c5:
         50:13:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----