Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          DqgM+y5dI2UfgL9TWCfOfgODYvx82+HHa4D8Bmi3PAo=
Subject key identifier:   E4:8C:C7:A7:AE:2B:15:2E:63:78:31:B9:4F:17:0E:2D:18:54:86:36
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       0194BCA9BF3965BDD55BBA449EC102636C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          144A
Signing time:             Fri 31 Jan 2025 14:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:28 +0000
Files and hashes:         1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
                          2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
                          3: BBiB8HzGvEVcQkOJI5jhpWlZSDA.roa (hash: GEYg6WE/hxTPJN2KMxXx9/lvb81Mjtx3QTnff60w6hs=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: 85m4Ia8DRtbz2c8PM9PjdsNbPla9+BBPM5TtRH9NKPw=)
                          5: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
                          6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
                          7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
                          8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:bf:39:65:bd:d5:5b:ba:44:9e:c1:02:63:6c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Jan 31 14:00:28 2025 GMT
            Not After : Feb  1 14:00:28 2025 GMT
        Subject: CN=e48cc7a7ae2b152e637831b94f170e2d18548636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:1d:f5:ae:59:11:ca:71:2b:77:3f:55:10:
                    ff:0b:c2:be:be:e4:44:7f:fb:15:b4:b5:df:51:35:
                    b1:10:ae:d1:41:56:e7:3a:aa:d5:43:67:aa:d0:3a:
                    08:a0:dd:80:ca:f3:52:47:d1:53:12:c5:01:c0:97:
                    fb:03:cd:8c:9d:f1:3a:a0:b4:10:0d:a2:08:af:bf:
                    f3:d2:74:58:ee:d2:1a:aa:e7:c6:3c:f7:81:6c:49:
                    de:44:74:b5:6b:bc:5f:3c:69:29:46:0e:0e:0c:c1:
                    ce:68:94:44:bc:87:da:ee:a2:ee:37:4c:02:47:fb:
                    0f:7e:54:19:ad:30:76:f6:7d:20:33:cb:57:b0:11:
                    42:00:7d:61:7d:9b:6e:47:ff:7c:02:bc:de:e2:b3:
                    1b:bb:37:ec:da:30:49:85:fa:7f:23:e7:c6:6b:0b:
                    fc:90:b4:64:9a:59:17:8c:f0:66:ed:41:8a:aa:bb:
                    2c:61:be:29:55:bf:63:01:be:a8:34:a5:97:a0:cf:
                    4c:a8:0d:66:64:89:ac:37:fa:b0:9d:65:13:ef:a0:
                    ac:1c:5e:ed:d4:bb:37:02:dd:08:f7:71:b0:50:a9:
                    24:c3:02:b5:4e:d0:14:af:f1:c7:16:ce:8f:84:66:
                    76:2b:72:df:45:50:69:e2:9b:5e:a0:2a:20:2e:f1:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8C:C7:A7:AE:2B:15:2E:63:78:31:B9:4F:17:0E:2D:18:54:86:36
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:1d:9d:8a:ad:f3:6d:bc:40:29:69:42:7b:7d:4d:de:5d:
         35:f1:49:b7:70:42:f2:ca:07:3b:92:4f:c8:a8:8d:9f:22:24:
         6e:7c:14:66:f9:ce:8b:96:38:fa:60:2b:0c:10:8d:aa:0f:6d:
         38:e8:d3:bc:58:f9:00:87:3f:ee:06:43:93:f1:ea:79:d2:2c:
         7c:d3:69:01:95:63:98:bc:85:58:43:10:ca:43:75:c0:fe:31:
         05:e4:2b:70:a5:c6:8c:3e:66:83:80:34:60:97:b6:34:69:bd:
         aa:4a:50:52:0b:1c:3d:91:31:64:8b:69:2e:7a:9a:29:ec:6a:
         92:35:2f:66:81:28:9e:cd:e2:ed:7b:e4:7e:cc:92:14:f5:3c:
         3e:a6:95:f2:9c:18:d8:eb:d9:e3:07:bd:66:93:df:23:b2:f9:
         72:b5:2b:60:67:c8:e1:92:c8:b2:51:75:d1:92:58:2b:4c:11:
         71:65:5e:4f:31:cd:e5:ac:04:de:88:51:92:e4:1f:2b:26:7b:
         70:a8:4f:df:6e:6a:06:51:c2:bb:aa:2a:c8:58:9e:34:d5:00:
         69:d6:58:10:bb:ce:28:e5:39:07:f2:c3:3d:49:c5:b3:98:18:
         b0:1a:c7:4b:fd:2b:32:dc:b4:e3:70:04:19:1c:e5:09:e6:2e:
         17:cb:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----