Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          HsE4QAEcaZErtc1B7ZwBS410cRz9dHj3MkYHWG9ToHs=
Subject key identifier:   15:18:91:66:EA:35:9B:69:6C:F7:AE:40:BD:0B:02:29:A4:0C:A9:CA
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       0194BD4E5880B3B4E46EDECECED47E3F8B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          99
Signing time:             Fri 31 Jan 2025 17:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:15 +0000
Files and hashes:         1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
                          2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
                          3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
                          4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
                          5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: VlhzKVhVh/11pdlANHAmEUY5i4ggzi0STXygDPyD5ac=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:58:80:b3:b4:e4:6e:de:ce:ce:d4:7e:3f:8b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Jan 31 17:00:15 2025 GMT
            Not After : Feb  1 17:00:15 2025 GMT
        Subject: CN=15189166ea359b696cf7ae40bd0b0229a40ca9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:90:75:81:0e:22:cd:dd:f9:7d:ed:31:b0:
                    a5:93:a2:0c:ac:5e:e0:c6:64:dc:43:a6:9d:b3:8d:
                    24:1c:d8:ed:01:98:b7:6e:4f:1f:94:ae:0f:b9:5d:
                    71:9b:41:20:4b:1f:ae:4c:5f:9d:51:b2:e2:56:6a:
                    fd:c4:c1:d9:34:ad:d2:63:23:59:e8:5a:1a:e7:d5:
                    66:63:b7:ba:54:f4:6d:a2:e5:5c:7e:48:53:a4:b9:
                    09:69:20:22:64:47:42:65:46:ff:8c:6e:ec:66:c1:
                    06:34:bb:12:09:a0:63:ec:b4:3d:9a:79:a1:4e:f6:
                    f5:87:54:3e:c8:d9:9e:94:c3:1d:b2:6d:ff:72:17:
                    0a:6a:3c:96:f6:94:3e:d1:61:1d:16:ac:1e:32:0a:
                    ae:58:30:c3:21:bb:d6:db:23:4f:6f:0a:95:d8:49:
                    50:b8:d1:fc:b0:96:f6:61:5b:30:2b:e9:69:bb:2e:
                    e8:57:73:c5:37:55:2b:65:90:f7:ed:6d:16:09:93:
                    ff:a3:66:12:97:d0:74:47:75:36:66:64:c1:40:b7:
                    a6:f1:4c:4f:65:55:38:17:84:3d:e0:ac:43:59:b1:
                    5c:2c:c2:4c:cc:45:9f:b5:4b:20:32:8b:b5:e6:ca:
                    99:3c:91:d0:f7:18:80:f9:09:6e:c8:cc:eb:b1:3d:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:18:91:66:EA:35:9B:69:6C:F7:AE:40:BD:0B:02:29:A4:0C:A9:CA
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:82:59:2a:92:51:24:fe:8e:94:68:f0:3f:5e:91:8b:4b:3b:
         4a:78:6d:4d:06:19:c3:f4:3a:4e:3d:11:40:83:f3:96:52:fb:
         9f:80:7a:28:f4:8e:91:18:35:7f:97:6d:7b:dd:05:1d:a2:7f:
         b3:90:c8:36:08:29:9a:dc:5d:7c:24:f0:3c:9c:f0:61:64:14:
         75:bc:8d:99:b3:8f:81:69:19:9a:e0:68:e1:d6:50:fe:ab:3a:
         3f:23:b0:3d:ef:47:06:f0:1b:3b:42:cd:08:39:a9:ef:b5:bf:
         81:38:1e:ed:18:18:13:96:32:e3:e1:9e:6e:35:c7:e9:14:76:
         97:b3:09:a2:9f:16:49:27:2d:7d:ee:ab:32:72:13:a0:55:f4:
         2e:34:3f:12:24:42:13:81:ed:6b:9c:e2:70:65:be:e4:df:17:
         f9:64:5c:49:25:f3:bd:8e:ba:b8:0e:1f:59:03:9c:88:d6:ef:
         e9:91:e7:35:2d:ba:e2:1c:4e:ed:c1:a8:49:99:45:f5:d6:37:
         f8:f8:45:4a:b4:1c:00:5d:46:15:40:f5:1c:0a:d9:3a:36:ee:
         4b:e0:4f:5e:24:23:b1:66:14:2d:ba:99:b4:de:c0:c1:35:c4:
         9b:85:63:63:62:2e:85:d1:b1:76:b2:ea:44:03:55:c1:24:06:
         7f:b4:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----