Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          4v+iCwYkNsJMEVSPJ2Ljs/75L4KiIDu22uNwoUHAwoQ=
Subject key identifier:   F1:E8:20:9F:B9:BA:34:26:0C:90:29:F0:27:FD:4B:A1:58:3C:A3:61
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       0194BD4E9F651515BCB8EEA88F974CC30F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          0DE0
Signing time:             Fri 31 Jan 2025 17:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:33 +0000
Files and hashes:         1: LcUYT5oYCnIlb4BWDoSlk32d2MM.roa (hash: jVA2zeCexldZLAA7C+SoiCtcqgabKoDcHk+AmuKbioQ=)
                          2: MWUNq-ftYkXKNHhiuPmUDR8aNAY.roa (hash: sRHJK0hHdEHRSKSboElSRlINRVoo+ylHVvGY64QPq+U=)
                          3: _ASEE_JbkNj9mLPsLIOdutxmpec.roa (hash: xn3yAMk/HU2tD26MclTTMfVdBRfDTr+I4yIe98ZiI9s=)
                          4: _laJgtoCkPl5eR0TLeAoHL13wFA.roa (hash: 68CEJu/QyQez19ZJF79FAv4ZOVYzwbC1EOPidbXwzek=)
                          5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: lso4myS0AROtOqn9lczWOfN+e3iA/Dq0IxnbesQdAtA=)
                          6: beDTfoEw8JrpyA7o-7IsGMLO3qQ.roa (hash: JijN8NLmhAHCAt1CbtDEM+Af0+4e4xafU2Z2Ic6jOkE=)
                          7: h6aw1cr0Nrd2-vFEci9qy9nq5zo.roa (hash: JZMjRlvf7ulsvy201Z/Ej7k3IK0f7QJ4wxduLVnKfYU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:9f:65:15:15:bc:b8:ee:a8:8f:97:4c:c3:0f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Jan 31 17:00:33 2025 GMT
            Not After : Feb  1 17:00:33 2025 GMT
        Subject: CN=f1e8209fb9ba34260c9029f027fd4ba1583ca361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:de:64:2c:39:11:b2:9e:5e:6c:79:36:af:
                    f6:ed:93:b0:43:2e:a0:89:0c:57:51:ee:3c:13:e2:
                    ed:8e:aa:cd:85:69:4c:7f:87:e3:33:e0:16:a1:f3:
                    01:9c:89:6d:17:64:a8:6e:fb:2b:ca:d7:e2:a9:29:
                    2e:d8:40:15:51:9f:1f:3d:ff:b6:b7:78:dd:1c:19:
                    89:01:0f:e2:a6:79:d1:9b:b0:d8:80:7a:f8:5c:1f:
                    b8:44:89:49:cd:5e:01:f2:b0:2f:75:71:5c:80:c6:
                    04:3c:81:5e:a8:1a:26:d1:9e:1f:87:86:15:6d:75:
                    fa:4e:a3:5d:f1:5b:06:cf:99:95:7d:1f:c4:0e:7c:
                    9a:44:24:bc:0d:b2:21:c6:d0:20:a8:51:d5:2a:89:
                    7b:0f:b8:fe:61:9e:a0:b7:d7:88:b9:fc:de:9a:e5:
                    23:46:ea:6c:d7:b9:d4:a6:db:47:8b:cc:94:4f:e9:
                    4c:81:5c:36:f1:10:af:0f:eb:ba:19:a2:d3:2b:c1:
                    67:50:44:bb:0f:2a:7c:fa:e7:24:89:99:c7:45:ab:
                    2d:b4:b6:69:7f:b0:6a:38:57:6d:a6:2b:db:d7:13:
                    55:52:d6:26:11:de:c5:5f:c1:80:24:79:0f:50:f5:
                    4c:03:5f:36:06:d0:69:35:42:07:f0:92:b0:1a:ba:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:20:9F:B9:BA:34:26:0C:90:29:F0:27:FD:4B:A1:58:3C:A3:61
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:08:76:50:67:19:fc:25:b9:93:15:71:fb:30:2e:b4:6e:0e:
         b7:a2:7a:a1:be:12:4c:a9:37:40:ef:c0:8f:1a:d2:48:6f:3a:
         08:4e:76:dc:10:de:5e:d9:4b:95:4e:2f:d2:b2:39:e5:0a:ad:
         5b:d4:9a:0f:d4:41:0e:e5:54:06:40:9e:b4:82:ef:c9:89:3b:
         fb:95:6f:01:56:32:67:2f:71:78:4d:f2:4e:70:5a:e8:6c:0c:
         d1:4e:e7:9e:eb:12:86:ea:bd:7c:bc:26:09:29:ec:e5:6d:24:
         8c:a0:44:aa:0b:39:82:e5:5f:87:50:af:79:05:dd:b4:c3:2b:
         5b:ac:2d:0f:90:9c:29:25:9d:4b:b6:a3:47:c3:15:b5:f5:97:
         15:5b:fa:de:f2:cf:45:98:23:78:5e:41:ad:47:a6:51:99:2c:
         11:df:2a:f3:dc:32:12:50:eb:91:52:d9:3a:a2:1f:8c:87:20:
         60:61:30:cc:06:0e:39:87:43:29:cb:13:98:39:49:15:75:20:
         6c:3a:c6:50:b4:b6:59:04:f8:6b:95:12:a5:62:1b:3b:81:aa:
         35:96:0b:52:31:6c:60:f2:e7:d4:87:c5:08:80:8c:d4:43:ca:
         e0:a0:14:bc:49:6b:a6:3a:d1:d2:75:11:ca:65:66:f7:ed:45:
         d6:96:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----