Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File:                     4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier:          SvjzZAe5mZE0qTNvJkSP9NSSuHUV1RRzIV9PtEZCINQ=
Subject key identifier:   61:01:34:8D:61:4F:B2:62:4C:71:41:A6:85:7D:5F:27:69:AC:D1:E7
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       0194BD4E739BC3ED0E27CAF401149B11154A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 17:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:22 +0000
Files and hashes:         1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: 2xBNOs4/jhiXIlG7fBlsluqxRA8Fej3d6Ycd+TJee5Y=)
                          2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=)
                          3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=)
                          4: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=)
                          5: Tuxvba9WYfbnEvHd3kzqapBEZ_Y.roa (hash: k++irbF5tx+uarYSpIOQsyD8NQHcKQnnHY3y6c8vNEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:73:9b:c3:ed:0e:27:ca:f4:01:14:9b:11:15:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Jan 31 17:00:22 2025 GMT
            Not After : Feb  1 17:00:22 2025 GMT
        Subject: CN=6101348d614fb2624c7141a6857d5f2769acd1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:0e:ab:b9:99:e0:de:ba:c9:33:73:88:f3:
                    f8:c9:9d:8b:da:b2:80:53:8a:e4:38:9e:f2:11:5c:
                    57:89:cc:e5:92:f7:5a:60:7e:2e:66:e6:51:85:e6:
                    63:ed:38:64:d6:6d:01:58:8b:31:e3:05:96:b3:28:
                    c2:9b:1a:88:3f:af:d9:fd:bf:2d:bc:eb:0b:f3:8d:
                    91:d9:37:c4:cd:56:eb:36:87:e1:69:63:53:5a:8c:
                    22:c9:19:25:67:7b:de:3c:b4:42:a2:43:e9:fb:d7:
                    75:93:c0:3f:4b:c0:bd:e5:c8:df:94:65:3d:d1:69:
                    25:c9:5a:b7:da:4e:f8:51:93:b3:a6:30:ce:37:aa:
                    21:14:1f:f0:66:a3:d2:0d:53:f1:c6:a5:3b:29:57:
                    d8:2b:58:47:c7:e6:74:0d:e7:59:07:0d:76:25:c4:
                    3a:9b:d9:29:5a:e0:ed:0d:8c:52:a0:0c:04:2b:d0:
                    99:70:c2:e7:29:92:7f:fd:53:43:5c:aa:8a:bc:28:
                    c8:76:50:c9:1c:3a:50:5b:92:73:e8:ed:67:23:d6:
                    01:cd:55:dd:e6:e2:dc:70:77:dc:ef:9a:b1:ca:19:
                    07:88:91:0f:0e:28:aa:9e:4a:95:9d:9c:0b:94:18:
                    db:94:0d:8b:90:9b:ef:5f:5f:68:65:a4:cd:e1:a7:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:01:34:8D:61:4F:B2:62:4C:71:41:A6:85:7D:5F:27:69:AC:D1:E7
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:28:11:71:6b:2e:65:87:49:f2:82:03:99:f6:27:05:db:
         1a:ca:cb:58:73:65:0a:25:ee:a2:fc:6d:fa:1c:73:09:b2:44:
         a7:8e:29:62:23:87:d9:fa:a4:04:81:c3:3f:72:be:7a:49:b1:
         cc:3f:2e:74:d4:58:92:ea:62:c9:83:41:43:cc:ae:f2:55:f0:
         55:7b:ab:a2:0b:88:c8:df:d3:ea:e3:09:03:a4:9e:7d:86:a7:
         31:40:e7:0f:50:9f:8d:c4:45:86:a9:b7:09:90:ab:0e:7b:b9:
         ee:e7:f4:63:68:1f:a0:fe:ec:52:8e:30:c3:38:59:a7:80:98:
         95:26:e8:f7:16:82:18:47:f1:68:1a:3b:22:6b:05:7c:0b:c0:
         c7:a7:ef:c0:52:ba:6c:2e:48:61:60:aa:27:53:8a:c9:0e:ea:
         36:95:30:60:f3:54:18:4a:c0:f8:fa:87:26:6b:9f:ef:54:11:
         b4:c7:e3:ed:d0:1c:bc:6a:1b:2d:66:c5:e3:12:81:f1:8f:b5:
         75:da:e5:60:d5:51:c5:fb:9e:72:77:75:87:ca:f1:63:4d:f6:
         13:b3:d0:b3:99:51:21:4c:37:9c:1c:fe:01:69:78:2f:94:68:
         ff:78:86:c9:dc:93:be:5f:aa:d1:c7:6a:77:8d:d6:ba:ae:03:
         57:47:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----