Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File:                     8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier:          2OJjglStsuZpfrNrQeqXQqImK4js3jEUz4fz+EBau2Q=
Subject key identifier:   98:BF:1A:3E:63:45:2A:D6:0D:A4:A5:F5:81:9E:C3:1F:EC:07:44:E1
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer:       /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial:       0194BC729E2C8C179186C11D7DD9F021177F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number:          1417
Signing time:             Fri 31 Jan 2025 13:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:15 +0000
Files and hashes:         1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: jlYw4aj2x8vvh4IvjIBQDizUPUQM0RwVrj97N09eksM=)
                          2: IOLW6-jD0y2arMH-zMIZVJRZbkE.roa (hash: S6NprCW0AToClI49KC50pRU+q6xv1zGZktKZWElDFQU=)
                          3: dwFe3nH81Si_VNrtz-zJYevGIHU.roa (hash: 0rt5oMdFe3Xc4XSYtVzvaXDk0kM2jNWacI48dEFva2k=)
                          4: jwVbXCDeR3nwYGAlm9xN2kpKmB4.roa (hash: iEdaGVrMnMYhG1JWXVQ6x37AXfcN4Z18G6WNOnmwP7U=)
                          5: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:9e:2c:8c:17:91:86:c1:1d:7d:d9:f0:21:17:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
        Validity
            Not Before: Jan 31 13:00:15 2025 GMT
            Not After : Feb  1 13:00:15 2025 GMT
        Subject: CN=98bf1a3e63452ad60da4a5f5819ec31fec0744e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1d:0b:f5:02:67:fb:c6:a9:3e:90:78:94:cc:
                    cb:52:f4:75:c3:6d:09:f2:85:0c:93:bf:7b:da:80:
                    67:b1:a2:85:69:26:0e:05:02:da:d4:ed:2d:6b:85:
                    bd:12:37:2c:be:bf:0c:8a:0f:72:4a:50:0d:8e:92:
                    56:5e:ee:21:52:a4:c9:f9:4e:dc:71:1a:9c:8d:2b:
                    0a:6d:3a:d6:08:e2:ee:6b:7f:82:ab:01:da:04:17:
                    3d:d0:b4:07:75:f3:b4:75:90:f1:5b:d9:63:01:9e:
                    81:e1:96:f2:30:92:9d:55:59:ca:8d:46:d1:ce:e2:
                    02:29:65:b7:0f:cf:69:b6:1e:25:e4:9d:e3:0a:4f:
                    f4:9d:b7:2c:52:de:e0:82:80:35:db:dd:7c:c8:ab:
                    08:6d:fc:ee:cb:cd:cc:2c:36:20:f6:0d:87:ec:18:
                    d8:97:31:c9:ea:fb:76:b2:92:6f:68:13:8e:b8:75:
                    66:63:86:85:41:46:06:72:12:66:c9:29:4a:67:97:
                    93:cc:4c:37:c1:1e:d9:01:9c:2d:46:20:6a:c3:e1:
                    7e:ae:b3:c9:6f:75:31:ef:3e:8f:10:e0:b0:38:49:
                    13:ef:4c:ce:ba:f5:cf:dd:00:f6:90:b1:0b:9f:d6:
                    d1:8b:ff:e2:12:3d:b4:3b:44:bc:cf:0f:e8:59:73:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:1A:3E:63:45:2A:D6:0D:A4:A5:F5:81:9E:C3:1F:EC:07:44:E1
            X509v3 Authority Key Identifier:
                keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:55:e8:95:cf:d8:cf:bc:85:84:86:cf:84:98:ee:a3:3e:57:
         36:6d:cf:6f:ee:f8:62:58:ec:07:56:20:9f:30:57:fe:14:8d:
         ff:da:63:ca:b3:c2:5d:bb:59:60:a8:98:70:fe:13:7d:93:17:
         b7:d4:47:7f:4a:b1:5a:3f:c1:d6:c7:e9:d0:11:b8:1f:78:43:
         aa:6b:5f:6f:b3:46:f6:ba:70:60:91:6c:51:0b:da:b4:63:01:
         cf:35:ac:05:e8:98:10:b0:8d:29:7c:87:47:4a:35:83:ce:d6:
         e5:a8:be:bf:0b:3a:79:e6:f9:91:84:3e:61:30:04:56:63:24:
         0e:77:79:a6:df:b9:0a:2c:59:79:d5:e3:0a:7d:3a:b0:69:58:
         cd:ef:7c:89:f5:c6:02:1c:8b:47:60:77:21:df:c8:0e:8b:d6:
         99:32:32:d1:f0:3d:dc:71:02:8d:35:e9:d6:60:12:37:95:87:
         62:98:14:6f:ff:8b:3e:b3:6e:11:19:c5:06:4f:0c:b4:5a:53:
         e0:7e:00:af:2b:c6:4c:77:fb:27:ba:f8:6e:94:02:bd:77:f5:
         99:c4:40:61:f3:cf:be:dd:d3:fd:38:b4:25:06:64:4b:a9:83:
         10:f1:97:b1:a2:9d:c9:cf:09:ce:d3:01:3b:bd:1d:fa:10:eb:
         5e:4c:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----