Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File:                     qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier:          61k45oYp5IGsd1SsvcMN3VBGx+/LZ1z3uDvmcwX4Am8=
Subject key identifier:   BB:1C:D6:35:81:28:20:91:DD:70:25:E0:A8:E9:81:0D:12:53:54:20
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer:       /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial:       0194BC3C010A0D792C4C7DF399E9A5DEA7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number:          0EEE
Signing time:             Fri 31 Jan 2025 12:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:36 +0000
Files and hashes:         1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
                          2: g_WJ1Q2GyVj2D5mwLA6Id73qHro.roa (hash: 3Vw0Xqb+0QwKqB2bM3G/6hEiWo1+ZtSCbV9YwE9dtBI=)
                          3: mh-ONtUS47UArhvvP39W8pcq56g.roa (hash: j9SUcEVdvW5MWPOk4jmX4Ipmlx1SrBIjpyPTosAgwoo=)
                          4: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: 23x2UkRuuCUwnoJ0c5J0HyoP9wZ+yEMtwdpo7drJdCE=)
                          5: uVhtiaC0YLqNXnV2u82vXhT_usg.roa (hash: ab5v2WBt5zDGN5W0wlqpaj8k/O6kUpjOkh3TFFpdT9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:01:0a:0d:79:2c:4c:7d:f3:99:e9:a5:de:a7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
        Validity
            Not Before: Jan 31 12:00:36 2025 GMT
            Not After : Feb  1 12:00:36 2025 GMT
        Subject: CN=bb1cd63581282091dd7025e0a8e9810d12535420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:d1:ee:e3:27:65:c7:5c:09:52:9c:fc:5b:
                    21:45:86:13:27:14:81:48:bc:85:5c:54:9d:14:ad:
                    58:4c:46:78:e7:33:38:ac:01:42:14:6d:4b:c4:f2:
                    db:b1:dc:e1:80:36:98:90:d0:f1:28:d1:b7:5c:ca:
                    28:2f:24:1b:e3:8a:0e:48:49:33:1e:e2:e4:dd:9d:
                    0a:8c:53:d4:d2:1d:07:f5:04:bb:31:48:c0:45:7a:
                    75:11:a2:87:fe:b9:eb:1d:7b:fb:1b:d1:ce:7f:3d:
                    f7:1c:d6:cd:e9:eb:e3:d3:85:28:c6:ad:43:b1:5f:
                    63:7b:20:b1:ab:c7:85:43:18:b4:b4:e8:ed:0d:5a:
                    79:1b:e0:04:89:c4:08:e7:91:d0:59:9b:fa:df:59:
                    0d:97:85:47:1b:1e:b4:cc:71:2d:43:13:15:6c:1f:
                    6e:e0:85:49:f7:46:fa:ce:04:f2:00:2b:c4:a0:70:
                    83:37:0a:28:d6:e9:34:42:d8:d8:f5:28:9c:8f:4c:
                    48:e0:44:e5:c9:4f:6f:18:f4:0c:5c:fb:4b:cf:16:
                    31:3c:4c:ff:e6:8e:07:84:73:df:8f:23:54:4b:3c:
                    78:2d:96:de:29:3b:a6:e4:4c:ad:54:09:3e:95:b1:
                    66:78:06:0e:38:87:45:83:20:2a:77:f8:3b:53:eb:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:D6:35:81:28:20:91:DD:70:25:E0:A8:E9:81:0D:12:53:54:20
            X509v3 Authority Key Identifier:
                keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:0d:09:74:f9:0f:a7:c6:8e:85:17:57:b0:35:89:4a:e3:
         11:d7:e2:cb:dd:11:b9:1f:30:e5:cf:0f:e0:8e:71:04:00:57:
         b6:26:9d:33:e2:4f:0b:b1:f1:65:9b:65:fb:b6:04:cf:e9:17:
         7e:e9:82:e2:29:96:40:4e:92:81:5c:1c:f3:b3:73:4b:b2:e8:
         48:8a:c7:57:55:10:bd:cd:bf:eb:de:45:7c:84:76:15:c0:1e:
         06:a8:58:b2:1f:de:9b:78:4c:38:c5:88:4d:22:60:a4:ee:c3:
         34:02:9e:b8:cb:30:7b:50:a5:59:6a:a3:68:60:b9:ca:85:b1:
         94:91:2c:87:76:80:1b:5a:85:b9:fa:1e:66:d7:b2:f2:3b:8f:
         5d:69:0f:83:11:a7:07:68:a9:b8:c0:af:ce:5c:81:67:e1:06:
         fe:6f:f7:4a:06:bf:d6:c4:15:13:b5:e6:44:d0:66:d6:2c:5a:
         95:bc:73:fa:eb:a5:2e:75:c8:50:5f:d3:df:1b:d6:97:ec:25:
         aa:f9:30:ef:48:8b:25:fb:e5:10:f3:97:c9:38:07:b4:23:33:
         0e:da:b0:89:46:c6:24:58:79:10:c7:67:3e:e8:68:eb:97:6b:
         a9:84:c8:c8:75:23:65:1c:7f:e2:c4:d3:22:ad:03:7a:40:04:
         ea:9d:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----