Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File:                     1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier:          4c646J1EG8u/UckYmr09v5MM00XixAAtHoadA2ZaTwk=
Subject key identifier:   D5:88:C3:A2:63:2A:1A:67:BB:40:18:6F:0D:34:41:6F:D2:C0:73:61
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer:       /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial:       0194BD8580C613126BCC51FE428B527000A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number:          0670
Signing time:             Fri 31 Jan 2025 18:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:30 +0000
Files and hashes:         1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: 5ZA1JEBL7DW7DaBB4aCq4ic98GWEK63O6WE79YqGsq4=)
                          2: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=)
                          3: IosBMyCwhJpK9xWG1hvvXMqJa78.roa (hash: IYmZiNnkFwPxUpuPBI4TiPPkO8hQgA4aXIJpQwDNzpw=)
                          4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=)
                          5: WJoZ3Cyd9hGNWW7azIwgdgzOVS4.roa (hash: 4VZTAKZBwZm9hthBlF7ANdxLjE6ybka+xW9+Dectll0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:80:c6:13:12:6b:cc:51:fe:42:8b:52:70:00:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
        Validity
            Not Before: Jan 31 18:00:30 2025 GMT
            Not After : Feb  1 18:00:30 2025 GMT
        Subject: CN=d588c3a2632a1a67bb40186f0d34416fd2c07361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:f5:cb:fb:30:3e:f7:a4:d6:86:b6:2f:a9:
                    26:43:bd:c2:4b:08:e9:48:c7:3a:f3:59:53:c6:d7:
                    67:f2:b1:64:b6:5a:70:cb:8d:17:c4:2c:58:e4:f7:
                    6e:fc:4e:ca:f6:2c:01:8d:52:52:30:52:e2:39:3c:
                    fe:c4:63:92:20:ab:a5:0e:01:5b:55:a1:db:56:be:
                    dd:80:f5:dc:f9:f7:d1:39:08:64:50:8e:29:ad:5a:
                    1d:81:40:8a:c4:97:49:c8:4b:41:65:b6:88:86:4f:
                    9b:8c:8b:68:7a:63:b9:5d:80:fe:19:22:41:0e:31:
                    e5:33:b5:6b:9c:b6:59:ad:79:a3:f4:d9:5f:ac:1b:
                    c9:7c:fb:86:77:d3:ee:c4:20:6c:3d:f0:1a:3b:55:
                    23:fd:1e:b7:3f:4f:02:ac:b2:ad:92:8a:c1:0e:bf:
                    ae:1e:09:58:79:b3:1d:e8:ba:8f:a3:a3:ff:83:af:
                    90:76:b5:fd:7b:53:87:09:9b:7a:e6:76:91:33:28:
                    54:1a:c5:c0:19:07:18:92:68:e4:34:18:f4:33:00:
                    ad:7a:84:73:40:aa:56:15:92:32:24:80:f0:d9:2d:
                    72:a7:c6:e3:4b:ab:00:3b:36:17:0f:49:b1:d3:13:
                    04:76:34:48:f8:be:32:f6:c0:5e:73:40:bd:ea:ae:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:C3:A2:63:2A:1A:67:BB:40:18:6F:0D:34:41:6F:D2:C0:73:61
            X509v3 Authority Key Identifier:
                keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:60:7f:03:cf:90:73:64:2c:5b:d2:0c:48:b6:72:6f:02:
         6a:1b:5f:5e:f7:21:9a:c9:93:d8:7e:02:08:82:6e:36:ff:33:
         a4:d4:37:ce:12:76:31:df:79:36:3a:a1:b8:c4:40:ab:de:ac:
         27:46:db:b6:ff:af:e5:95:e6:51:f2:41:df:06:df:64:5d:c3:
         fb:50:0b:dd:18:62:49:95:ef:f5:b7:67:93:ae:60:75:9c:c1:
         75:f1:d4:54:64:e1:9a:49:43:e6:21:95:d7:09:62:b8:89:28:
         61:07:2c:a1:d8:78:27:05:ce:48:11:71:6e:a9:64:ed:d1:88:
         ac:a2:9c:eb:47:91:65:30:e8:66:08:82:54:02:cb:da:04:24:
         ab:95:01:ce:7e:23:e4:48:79:92:0e:14:e1:bd:85:bf:d9:7a:
         fb:13:cc:35:d8:6f:49:8a:ce:83:d3:2b:64:4f:ba:76:cf:cd:
         f5:28:d5:d1:a1:c3:cd:80:2a:32:c8:73:c1:b7:83:5e:69:d4:
         24:d9:86:ec:4d:ac:41:c6:61:bf:7d:54:43:74:84:63:99:55:
         f7:16:cd:26:5f:fb:6b:19:97:c0:55:f0:52:37:a3:0a:89:3a:
         97:5a:35:a9:49:c6:95:1d:d8:85:f1:bc:95:07:94:4c:2c:d6:
         51:4a:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----