Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          ux4LxTjkF3Tn7RX3sZ3oR9Fh3j9g/yE83ZLR10OfL70=
Subject key identifier:   66:8C:F2:E1:D0:C9:74:89:6B:72:E7:92:E6:CA:3F:8D:F4:46:68:79
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       0194BD858A6997F14AB4BC6331AFE84C96D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:32 +0000
Files and hashes:         1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
                          2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
                          3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: mwGPc1Ki1hV9vPmmhB5w3i43F8bc8zR77Qf1hFa8Zw4=)
                          4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
                          5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:8a:69:97:f1:4a:b4:bc:63:31:af:e8:4c:96:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Jan 31 18:00:32 2025 GMT
            Not After : Feb  1 18:00:32 2025 GMT
        Subject: CN=668cf2e1d0c974896b72e792e6ca3f8df4466879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:c5:2f:48:6d:88:4e:69:d7:98:02:3b:e3:
                    d3:34:a6:10:a2:93:8c:37:ec:d9:2a:d3:8f:b8:9a:
                    79:44:d1:b9:24:39:57:ed:aa:bc:bd:59:bc:43:7c:
                    71:61:d5:e2:df:f0:6b:59:77:e2:15:87:ec:d9:ac:
                    f2:1d:5e:67:3b:2e:11:22:4c:a7:49:3a:d1:af:3f:
                    86:e6:ad:6e:f7:1a:d2:b5:58:1c:79:8b:f2:e1:d6:
                    8a:73:e4:f2:f9:08:7b:c0:32:cc:e1:54:dd:77:ad:
                    73:92:7d:b7:be:37:55:fb:8f:e0:b7:d0:7d:b8:5d:
                    33:f6:d0:2e:62:51:67:c2:16:d9:cf:26:b4:26:01:
                    b0:31:37:d8:61:84:1d:8e:81:dc:e9:0c:dd:b0:e8:
                    b7:0d:e4:07:c9:5d:20:e8:69:71:5d:7e:ba:4e:04:
                    22:09:4a:ae:25:c2:cd:9a:ed:b6:fa:f1:23:9a:0d:
                    6b:e0:bb:5f:d0:4c:e6:37:16:b0:72:20:fe:54:a6:
                    e1:7d:d9:98:27:14:36:71:44:c1:48:6a:af:88:3f:
                    f1:ec:0d:27:2a:d0:34:9a:a5:99:20:3b:3c:8b:fc:
                    07:fd:50:ad:4d:d5:de:2c:93:5b:98:c5:db:f4:a7:
                    f2:f8:c6:41:3a:7e:2e:b7:8c:99:f8:2a:35:af:fa:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:F2:E1:D0:C9:74:89:6B:72:E7:92:E6:CA:3F:8D:F4:46:68:79
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:9e:65:03:49:60:91:81:22:10:b2:7a:31:0f:08:dc:66:7f:
         c0:c7:df:e2:ec:22:8d:fe:c2:66:3c:30:1d:0e:20:21:05:0b:
         cf:eb:ab:30:3a:6b:1e:6f:23:30:76:8b:8a:f9:af:93:ad:39:
         d8:2c:88:6b:89:bf:2f:5d:70:21:53:d8:9c:9f:b6:3a:75:48:
         a4:13:f8:39:f1:89:d6:54:a6:77:9e:3b:68:a5:e2:af:3a:89:
         86:bd:dc:c2:d8:14:ba:c4:5e:8a:79:9b:68:03:14:36:f8:2e:
         fa:de:f5:e3:8c:92:91:b4:9b:51:fa:c2:77:80:2a:80:51:dc:
         69:01:5c:6b:de:7f:6b:26:65:04:22:57:78:6d:e9:f1:35:99:
         23:83:63:2e:f9:71:cb:0a:11:b2:c3:5b:b9:c2:cb:b3:ee:bb:
         1d:08:2b:b6:fc:20:13:b8:27:0e:2e:71:38:6f:b9:27:2a:a3:
         87:8b:7e:ef:7d:46:c3:82:e1:87:bd:38:40:6b:b1:dd:6e:ab:
         1a:16:d5:de:19:1d:e7:07:82:8c:dd:b1:da:44:2f:2a:53:5c:
         a3:54:09:05:26:ce:31:01:4d:d7:a8:13:e2:3b:a8:2a:ba:41:
         40:49:9d:01:87:a9:74:e5:9d:f7:23:b1:47:4f:0f:70:f3:52:
         e3:57:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----