Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File:                     4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier:          AoH99/JvQAz/Wluql4WysizW+TLw5hGS27UBsj26y0s=
Subject key identifier:   01:AE:DC:9D:58:97:FD:07:ED:B1:9A:C7:4C:48:98:D1:AD:6B:55:1F
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer:       /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial:       0194BBCE6DB593B0F0BD7ED47CB6F64F37E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number:          0A72
Signing time:             Fri 31 Jan 2025 10:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:55 +0000
Files and hashes:         1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: PctB7bffW7laC44AbLI+Z/3NJTDaF1aY+7zhighGJN0=)
                          2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=)
                          3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=)
                          4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:6d:b5:93:b0:f0:bd:7e:d4:7c:b6:f6:4f:37:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
        Validity
            Not Before: Jan 31 10:00:55 2025 GMT
            Not After : Feb  1 10:00:55 2025 GMT
        Subject: CN=01aedc9d5897fd07edb19ac74c4898d1ad6b551f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:88:b0:77:f1:3f:ba:38:09:c9:5a:5c:7a:
                    a9:6e:49:df:ed:14:84:22:ec:99:e8:af:23:21:67:
                    a2:8d:4d:14:11:e3:55:72:35:e9:64:f5:be:8c:af:
                    c3:49:de:fa:88:45:f8:d6:3e:6b:45:b1:5b:f7:0a:
                    e8:40:74:d9:55:48:7c:8a:cb:41:09:d6:a1:a2:6d:
                    77:bc:e9:31:a7:05:1d:ef:4b:50:e3:c2:90:f9:5b:
                    9e:d4:b6:18:27:ad:b5:b7:0b:1d:50:33:49:75:72:
                    27:32:ea:a5:f9:6f:38:d5:11:04:ff:d7:51:0c:f3:
                    54:41:41:54:b7:2f:2b:47:ae:3f:fd:fa:60:40:57:
                    5f:f3:e6:64:8f:cb:27:4b:0e:2a:33:cd:55:cf:d0:
                    a0:67:76:6d:a6:3d:56:bd:44:11:31:89:c7:b4:5d:
                    bd:2e:b3:28:97:4e:33:ae:e8:38:af:4f:92:a6:a6:
                    7f:f1:a9:b3:13:59:87:4f:81:19:d8:bd:b7:41:b0:
                    5c:f6:32:6c:e8:d8:af:48:ad:83:72:61:c9:ce:71:
                    25:86:bc:2c:6d:c7:4a:ac:41:ed:a7:d1:fd:fc:9a:
                    74:8b:7f:3b:c8:eb:e0:98:70:6f:61:aa:86:a0:24:
                    db:e5:a3:7a:77:30:6d:ff:80:06:6d:86:7f:3a:9e:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AE:DC:9D:58:97:FD:07:ED:B1:9A:C7:4C:48:98:D1:AD:6B:55:1F
            X509v3 Authority Key Identifier:
                keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a3:26:ee:98:d4:39:56:c1:bf:55:b9:f3:4d:06:70:49:99:
         8f:64:95:05:1e:93:86:5c:d4:81:5d:9e:54:d0:9a:b3:db:94:
         8d:7a:57:61:d8:90:6e:ec:cf:f5:df:75:58:e4:8b:b5:ff:b2:
         54:8c:7a:a3:1c:28:62:5d:2c:61:39:68:e2:97:8d:36:2b:be:
         46:6a:89:2a:d8:b8:48:a4:44:a9:3f:10:82:6b:8a:b4:11:ec:
         95:36:ef:96:fe:52:fa:2d:86:a9:ff:40:c1:e5:8d:02:fd:10:
         6e:95:ce:8f:2e:6a:16:91:2a:2c:14:93:6d:b2:39:06:61:7f:
         fc:b5:75:49:a2:36:71:ce:c0:bb:87:03:17:ea:70:bc:c6:a8:
         47:f0:69:de:46:b3:8a:93:fc:fe:78:16:34:e7:fc:ed:4d:7f:
         7e:eb:67:f8:52:09:7c:1c:e6:a7:c7:01:54:7f:c3:b5:43:86:
         cb:e1:1e:61:23:4b:4b:d2:37:84:f0:55:9f:2f:8d:51:2c:40:
         37:2b:f4:24:02:a8:a3:05:99:67:cd:ad:25:89:08:8c:66:37:
         61:b6:2b:98:a3:0e:9f:d0:e6:16:67:15:70:e0:6c:3e:5c:7e:
         23:ad:e7:c8:be:5f:b1:d3:0e:64:91:f3:38:42:87:a1:dc:84:
         1b:bc:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----