Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File:                     mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier:          vx5PmRM5tjsCjrm+Ey/BYJS+pkSmqH2ZZMbd9XMViVE=
Subject key identifier:   1A:F1:29:22:22:32:CB:E5:06:E5:2C:EC:A3:F3:68:4B:D4:E7:FF:1D
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer:       /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial:       0194BCA99DF8BAD63DD6434171E3E0A928CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number:          0238
Signing time:             Fri 31 Jan 2025 14:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:20 +0000
Files and hashes:         1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
                          2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
                          3: HC3yc0-5CpQrNBrATzfepdxNB7g.roa (hash: +ZfEEq7+M14/ZIFMcZ/U9/JKHCV50W2/biRbK4DTsms=)
                          4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
                          5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: ajQ99NRuTMZHZdHtxJLAQkUpQW6v50GyfiKiMB8Kn1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:9d:f8:ba:d6:3d:d6:43:41:71:e3:e0:a9:28:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
        Validity
            Not Before: Jan 31 14:00:20 2025 GMT
            Not After : Feb  1 14:00:20 2025 GMT
        Subject: CN=1af129222232cbe506e52ceca3f3684bd4e7ff1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:bc:85:e2:f6:40:8f:d8:f6:6f:05:f3:d2:
                    a0:91:ec:c3:d3:69:9d:07:cf:d0:e1:bf:0b:ea:a9:
                    3d:89:9d:c1:26:e3:a9:5d:44:1b:ff:63:89:87:43:
                    42:15:7b:39:95:5e:4d:35:b5:25:cc:e9:9e:24:00:
                    07:f7:7e:06:a4:88:01:e2:f0:dd:d9:4b:67:5a:7e:
                    cd:94:92:59:38:23:1e:20:d0:ab:f5:6e:2d:8c:b1:
                    0f:27:27:3c:c3:a9:37:ab:42:93:66:fa:fb:e3:ff:
                    0d:b9:a7:50:99:af:c7:d8:7d:79:f4:00:2e:ca:37:
                    dd:a7:73:45:90:9a:46:08:95:98:19:c4:25:b8:da:
                    4c:da:c9:c4:d0:e4:6e:fd:4d:7f:ba:67:a3:7d:87:
                    9d:6b:3d:96:88:69:ac:16:84:50:46:c8:74:5a:3e:
                    5a:4d:22:4a:df:66:d4:1e:4e:d2:6d:28:eb:6f:1f:
                    b8:41:84:61:94:23:34:d4:b7:94:4f:bd:f7:aa:40:
                    b8:40:dd:a3:11:a8:ba:22:92:f0:07:88:80:7f:49:
                    bb:f7:82:ba:58:ad:1e:f9:c7:06:ba:18:b1:2d:a6:
                    98:28:00:e5:81:d8:1f:23:a1:3d:cb:e3:e7:2e:ff:
                    28:94:74:2b:d2:c5:34:f2:54:f9:31:33:78:96:62:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F1:29:22:22:32:CB:E5:06:E5:2C:EC:A3:F3:68:4B:D4:E7:FF:1D
            X509v3 Authority Key Identifier:
                keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:dc:33:56:80:1a:bb:da:fd:3d:d5:f7:ac:21:ed:9b:66:14:
         f6:03:4d:30:d4:8d:dd:c9:f7:a1:54:83:31:5b:4b:a7:33:04:
         d4:c5:2b:80:6f:02:1c:07:5b:1a:20:0c:6d:13:3d:51:3c:c1:
         d8:56:45:80:e2:ba:5d:8e:fc:b1:21:8a:5e:f2:c1:f3:f2:23:
         71:4d:1c:ab:52:6f:bb:9f:44:18:3f:a1:ca:93:0a:a1:cf:c2:
         17:e3:e7:bf:f4:bc:06:41:6d:6b:e8:d1:ed:d6:cd:a4:3e:79:
         3e:56:5f:56:6a:d7:7b:c7:42:0b:ac:83:14:38:81:b9:d4:73:
         2e:df:e3:40:13:25:28:4b:2f:b7:72:02:29:f8:f5:c1:0e:f1:
         51:43:f5:de:77:42:5a:24:2c:e7:c6:8a:5d:e4:bb:fa:5f:cb:
         8a:bc:19:73:31:19:2d:79:54:fd:cc:80:a1:de:ee:c4:a1:37:
         e3:38:2e:6c:b6:ac:d7:32:b0:f4:1f:36:ff:93:a2:28:60:74:
         d5:cc:58:fc:34:35:60:61:72:07:32:95:a1:84:9f:07:b9:47:
         ac:eb:0d:2d:88:f9:6d:1b:82:0d:89:79:1a:d7:cb:6b:4e:fa:
         31:51:52:60:ba:c4:17:83:1a:05:d6:1b:1e:05:84:9a:cc:69:
         dc:e8:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----