Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          JyoAu79TzMEZMkUdpTY9fs7WDsGYcpUN+3i/SnOFVEg=
Subject key identifier:   7D:9D:3F:C8:22:FA:26:3F:22:5C:A7:54:28:51:71:E6:B5:3A:25:58
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       0194BC730AAB539CEAA92F8CFCCE33B3E092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 13:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:43 +0000
Files and hashes:         1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
                          2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
                          3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
                          4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
                          5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: u9jMOVtutJ9mJ2RckAsMmeW37XUKEwK6EtPwee3EDnY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:0a:ab:53:9c:ea:a9:2f:8c:fc:ce:33:b3:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Jan 31 13:00:43 2025 GMT
            Not After : Feb  1 13:00:43 2025 GMT
        Subject: CN=7d9d3fc822fa263f225ca754285171e6b53a2558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:66:e8:66:ea:0f:3d:88:ce:62:04:a2:6d:
                    81:23:bd:76:8f:98:cd:0f:34:d2:ca:05:c2:c4:2a:
                    86:54:cd:12:ec:f3:91:1a:79:bd:45:bc:1c:57:84:
                    6f:cf:29:b0:2d:74:bb:a3:66:2a:7f:7d:5a:a1:d1:
                    1e:b3:3d:56:84:2a:5c:f3:d5:d0:21:71:0f:b1:0e:
                    22:d5:87:b7:2b:73:cc:7f:59:d0:ab:19:07:f0:c7:
                    bc:64:e9:71:d3:3a:4f:fc:cb:95:98:50:61:49:b3:
                    4d:ea:8a:0c:6f:3f:b2:f4:44:dc:8c:dc:c9:15:f8:
                    de:1a:13:a6:46:14:5d:35:96:f5:e2:c8:43:3b:ce:
                    7a:04:d5:8a:ca:c5:f1:37:e2:5e:d6:fb:09:c6:ce:
                    21:b2:0f:12:f0:88:50:61:2f:fd:ec:38:39:d2:2c:
                    d4:13:92:21:88:aa:7e:2b:68:cd:8e:b8:72:e0:2b:
                    09:e2:d9:c7:e3:d9:f1:9c:7a:8b:c3:84:3a:db:eb:
                    33:8b:ab:68:e4:eb:f7:9d:11:aa:24:2c:b5:0a:94:
                    1a:b6:30:62:f5:ba:19:a6:92:0a:db:7b:4c:cc:ff:
                    e9:1a:8e:03:49:a4:13:37:33:88:01:05:79:ca:a0:
                    6c:f4:3b:3a:86:25:8f:2a:f1:39:a9:2e:ea:34:08:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9D:3F:C8:22:FA:26:3F:22:5C:A7:54:28:51:71:E6:B5:3A:25:58
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:87:6f:db:ce:cc:3a:4f:47:9b:7c:2e:8e:9a:3e:98:98:
         05:b8:8f:f4:98:22:95:70:f1:77:78:c5:5c:54:75:dd:7a:21:
         98:e8:2d:8a:91:8c:8c:a3:ab:ec:ed:5a:12:f9:63:29:9f:c8:
         6c:5b:23:9c:dd:0d:8a:48:d6:ee:d4:57:8e:e7:2e:0f:54:aa:
         9d:9a:aa:ec:15:b1:2f:02:30:fe:c2:89:72:a3:35:6c:8c:14:
         9d:80:40:bd:42:a1:1c:19:eb:d5:90:a7:37:51:45:78:70:06:
         80:7c:98:ab:6d:9a:c8:52:4e:11:fa:62:90:f3:c0:a6:d9:82:
         ab:86:0a:70:1e:34:03:c0:7a:cf:a7:41:22:41:26:f3:60:63:
         40:58:18:17:7b:1c:68:e8:24:48:82:a7:87:04:fa:23:a0:36:
         58:db:46:7f:d3:16:e7:e6:18:9c:a1:86:fe:a1:a7:ac:2b:58:
         55:a9:e6:2b:a4:8f:38:75:de:b5:8a:6a:4d:b4:7f:bb:29:27:
         01:ea:11:f5:ea:64:2d:ea:14:51:45:ed:7f:06:20:41:45:35:
         5b:db:8a:05:92:80:51:e0:65:79:17:6f:9b:b1:55:2f:30:79:
         33:c3:b6:fb:ad:41:99:c4:7b:6c:d6:5d:2c:42:10:1f:9e:aa:
         c2:cb:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----