Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          HZypLI6ECxIEx8UvpB3gv0jrEi0sSXiWN1+tn7C8jH0=
Subject key identifier:   CE:3C:16:1F:27:ED:FD:F6:4D:DC:10:D6:49:1C:EC:D8:D7:03:6A:EB
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       0194BC72E1106EF773E1700B1C566AAE5569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 13:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:32 +0000
Files and hashes:         1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=)
                          2: 1-lcqj9vD7HAGF9hYZHR5xyi9WF8.roa (hash: ASRwNE5wsaZaPgqmA7TRd3/PCZOiteLbTUYKuoxWQhc=)
                          3: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=)
                          4: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=)
                          5: 9zz4BCm7vVPckf1S6cDx5jHIMR0.roa (hash: F/CDCgUQPRsdCxjEM2wRlBYAwjK1tPWCUpaTuliqjdw=)
                          6: DYZ0mBJM-pwGaUEeUlFHtUfJEsA.roa (hash: PZmbDjpU40vnqNpGZtZQ//d8WX9sAWSyIRMWM0UMipI=)
                          7: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=)
                          8: IA8JIixh7pQRh3UJKX9FksmIS1w.roa (hash: BXtV8PoUvx9FxZ6Rv15VGnt7NyHSTc2MLVCm+OimTBc=)
                          9: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=)
                          10: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: HLOLz8mJq3QCCxq7qHkTIfzitr7pIeXnW3D8f5bHsuQ=)
                          11: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e1:10:6e:f7:73:e1:70:0b:1c:56:6a:ae:55:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan 31 13:00:32 2025 GMT
            Not After : Feb  1 13:00:32 2025 GMT
        Subject: CN=ce3c161f27edfdf64ddc10d6491cecd8d7036aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:eb:7b:5c:76:5e:52:0f:84:8c:ae:d9:76:
                    07:7e:a8:d3:98:ec:62:1e:ce:97:82:80:0f:ee:1c:
                    31:86:45:1a:18:7a:30:ee:60:5c:70:63:c8:a7:1f:
                    aa:6e:d8:3d:c2:3e:79:af:fe:4a:cf:18:b3:f6:76:
                    9d:f7:1c:e5:36:99:b6:38:5b:ad:16:0c:57:7a:92:
                    e1:33:c7:f9:33:7f:9f:f8:f1:8d:ce:dc:67:7f:3d:
                    c1:c9:ac:59:f4:b5:b5:9a:f2:a9:6f:81:2b:0e:e5:
                    19:82:90:95:f5:fc:97:d5:5e:02:e9:bb:25:9b:6a:
                    d6:52:89:a2:fe:c2:0f:d2:5c:fd:94:5c:ca:38:a2:
                    7b:36:6a:12:b5:51:c3:d1:96:d8:48:4a:7e:da:29:
                    a5:c4:48:4e:71:69:73:46:f1:b9:cf:4b:59:63:3b:
                    53:3f:4b:66:6d:1a:ab:cc:8d:5c:32:66:1c:9a:80:
                    58:7e:da:0b:92:c7:3e:d1:bf:50:2f:02:83:53:31:
                    d5:72:7d:8c:6a:43:32:d6:9a:78:d7:59:00:63:e4:
                    fa:d2:8f:c1:6c:de:e8:b0:79:49:2c:e1:34:16:cb:
                    9e:7e:ce:c8:dd:d1:14:2e:39:63:43:40:04:dc:fd:
                    54:68:53:27:02:85:65:6d:93:3b:e4:f9:57:3c:20:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:16:1F:27:ED:FD:F6:4D:DC:10:D6:49:1C:EC:D8:D7:03:6A:EB
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:11:64:30:3c:f9:fb:67:cd:ce:f2:d2:43:38:fe:6c:d9:e0:
         b5:23:09:bc:14:b8:cb:ad:13:c0:99:24:e5:2d:5d:07:10:ee:
         48:33:a6:d9:55:5f:2e:56:ed:9a:c6:21:dc:f4:51:ac:96:fc:
         b2:a9:16:0e:14:1b:54:e0:f1:13:4f:bc:0f:73:60:75:44:05:
         c3:d0:32:78:08:cb:d0:20:a2:45:36:5e:08:ef:85:80:d8:ad:
         c3:40:6d:84:22:36:60:40:ad:46:ba:09:25:1b:6b:ad:db:3e:
         9a:9e:47:e0:65:2f:34:97:13:20:63:66:d1:65:e8:73:25:bd:
         10:f4:29:97:1a:de:e7:fb:35:d7:de:2f:8b:a8:47:bf:21:26:
         64:eb:56:84:1c:8a:8c:b5:08:fb:9c:04:26:e5:bd:8f:3d:1f:
         a6:08:26:72:96:bf:d8:f6:71:db:52:23:44:c4:d5:5a:77:14:
         32:71:45:35:3b:5d:05:dd:0f:6e:9f:eb:ab:54:b1:c0:29:8d:
         87:74:4b:5c:e8:b3:92:e6:cc:9d:79:79:4c:76:f4:c2:2f:75:
         a0:25:79:85:5c:28:da:ef:b8:ef:85:61:af:fb:42:ae:17:2e:
         7f:d7:f7:91:48:f7:50:35:ad:b9:ce:9b:8a:83:1f:a9:db:7b:
         b6:c7:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----