Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File:                     TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier:          qoJ2q0SorcymHqHB52n7ekkPnoS/z0IkaEKXriatO7c=
Subject key identifier:   AE:4B:FF:44:91:9A:F9:2A:E9:17:34:BC:B7:16:06:7A:39:11:7F:77
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer:       /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial:       0194BC72A28C2355C62DB6A55E4204B776E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number:          0EE0
Signing time:             Fri 31 Jan 2025 13:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:16 +0000
Files and hashes:         1: NETt5LyS--lV9_ycDBmp9TmpxP4.roa (hash: rz60bepxWIT7kbaafyZ48rHU8Vmg6Vvtzt7Ebp5hgDU=)
                          2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: 4x0j/HpeXaLlWdn3h7CDaYwQRk+7q7OWWH63osIP7Js=)
                          3: YU0ymXaczDxniPQtB_xa4RTEU2Q.roa (hash: +3YrNwFP0+tuTgevzTw2FGRwOLOaLfupz3GSxL5OXLE=)
                          4: e99v7pEfrFm4Dg1SnIaNO39I8Ws.roa (hash: GWy1k4OaIi0pC/Ap0hgLnIy0Gp664zirmOTGWdfBTaE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a2:8c:23:55:c6:2d:b6:a5:5e:42:04:b7:76:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
        Validity
            Not Before: Jan 31 13:00:16 2025 GMT
            Not After : Feb  1 13:00:16 2025 GMT
        Subject: CN=ae4bff44919af92ae91734bcb716067a39117f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:bd:6a:d3:5f:6f:bc:08:15:de:a9:ec:9a:
                    8e:dd:56:2d:7a:c3:61:6c:d1:5b:82:55:23:73:14:
                    f1:03:85:85:4c:35:80:ec:7a:75:bf:8e:4b:74:1d:
                    72:2d:76:25:0d:0e:fe:d0:02:e5:b8:6a:eb:f8:26:
                    7f:0b:4e:ac:9e:d0:9c:86:5f:3a:61:03:97:fb:5f:
                    f3:49:bf:59:71:f9:f6:dc:1f:89:ca:8c:74:f7:79:
                    e5:62:53:33:73:a7:75:5a:ef:ed:32:7d:57:97:60:
                    50:49:4f:6c:2c:af:ff:f2:84:e3:7d:d4:2a:ed:db:
                    e8:92:b3:63:87:d9:01:71:cd:d2:4d:8b:36:7a:15:
                    f4:e8:fd:1d:5e:c2:e9:6c:a3:9d:69:b1:5f:1c:eb:
                    a7:45:92:b1:58:b6:49:00:f5:ae:0e:79:60:0b:46:
                    90:89:28:f9:21:ed:f7:b5:1a:5a:3d:b7:1a:89:0c:
                    5d:ec:3b:87:af:21:9d:b9:bc:78:95:77:5f:7b:2b:
                    40:ab:1d:c0:f8:d3:02:f1:c6:20:78:09:74:a2:fd:
                    6d:96:ab:e4:d4:a8:b0:a8:f0:a1:48:43:a8:d0:fa:
                    fe:09:b2:a8:36:4d:53:74:07:43:05:8f:94:29:c1:
                    a6:fb:0c:f6:5d:6a:c4:7b:9e:05:b5:7d:ec:73:70:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4B:FF:44:91:9A:F9:2A:E9:17:34:BC:B7:16:06:7A:39:11:7F:77
            X509v3 Authority Key Identifier:
                keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:f2:be:52:fb:00:f5:87:f5:e8:b3:9d:10:c2:eb:98:ea:
         37:ee:16:1c:1c:45:45:a3:cf:42:55:2c:f3:85:25:59:76:35:
         3a:fa:6d:6b:55:4b:86:46:9f:c6:03:2d:22:06:4b:e9:d8:5c:
         8e:94:f7:e6:6b:72:aa:f3:e0:84:4c:1f:d5:41:3f:e2:c5:e5:
         40:d7:8b:bd:82:55:81:be:b5:2d:51:e2:72:e6:c8:71:32:4e:
         d9:64:25:90:3e:5a:5f:5e:f3:d8:db:a9:c2:ff:1d:05:28:58:
         0f:3b:7c:af:08:02:b5:be:43:b3:ff:9a:0b:2d:18:4d:0d:01:
         d2:e5:29:a0:a1:80:3a:af:bb:a8:83:d9:ab:f9:7d:2f:a2:a9:
         b7:65:e3:16:ae:9d:23:e1:df:fb:f1:e8:82:1f:b6:55:d3:d6:
         ca:a2:81:be:20:d2:94:b9:b3:bc:2f:2c:8c:37:dd:e3:e8:07:
         e7:d9:65:75:e4:89:95:75:b1:0f:38:e0:51:1d:a8:5e:50:e3:
         9f:81:9c:61:d4:af:78:3b:9e:64:e5:73:fe:e2:ed:61:69:d6:
         34:f0:2e:ce:b0:99:ed:77:ef:16:74:2f:74:99:3d:b0:ec:8e:
         0d:f4:55:18:4e:fa:2c:c2:28:3a:49:b7:a8:f2:c3:6c:7b:cc:
         07:ee:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----