Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          JI6E4vgN02nLhWvI++7EciZj67Ta11XNa+8CuLuABto=
Subject key identifier:   CF:D0:A1:C4:3C:89:EE:71:1C:95:18:D4:2B:79:53:91:FD:9C:8B:DA
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       0194BBCE21A0EA878B07449ED0D3507EC32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 10:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:35 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: 4hTxMaIQEyAFaQijy4Gpely0vT8eZ5+IOZ2WbCUWPdU=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:21:a0:ea:87:8b:07:44:9e:d0:d3:50:7e:c3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Jan 31 10:00:35 2025 GMT
            Not After : Feb  1 10:00:35 2025 GMT
        Subject: CN=cfd0a1c43c89ee711c9518d42b795391fd9c8bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a4:b4:a9:93:e7:32:13:02:af:0d:12:ad:41:
                    65:69:db:90:71:b9:d0:03:ec:72:4f:3e:9a:44:57:
                    06:8b:02:a0:5f:10:ab:bd:5a:bf:26:23:ce:8f:32:
                    bb:81:c2:76:6b:c9:5a:d8:9f:2d:b8:1f:03:ed:79:
                    e2:11:dc:bf:d3:d0:5f:f0:81:a6:96:c4:ca:af:ff:
                    e4:8f:33:d2:33:3c:e7:a0:c2:e9:88:35:01:90:b7:
                    f1:db:ba:ac:f8:11:43:b2:7c:a8:2f:34:b7:e7:74:
                    ee:51:79:2e:f2:2e:8c:73:3d:5e:3b:6e:a0:2e:ca:
                    c4:fb:d7:69:6a:ad:2f:6e:90:06:b9:6a:fd:b7:bf:
                    c0:55:db:1a:d7:0d:a0:14:c6:78:24:0c:fc:63:af:
                    5c:8c:41:f8:b5:7a:f1:20:18:a8:07:22:b1:a3:ef:
                    92:74:f4:18:57:c4:a4:e0:3d:d5:f6:86:6e:9b:a4:
                    d2:55:1e:6e:9b:c2:cb:c6:e5:72:ed:fa:1c:b8:f1:
                    6c:90:f6:0e:d8:d2:55:93:a8:cd:c1:d5:1f:ea:28:
                    9d:e1:24:03:b3:f2:92:08:a8:06:07:4d:a7:a8:9d:
                    b1:45:8a:db:22:e4:bb:4c:c6:9d:2a:b5:d8:70:18:
                    a5:79:33:46:41:14:b8:63:73:b9:95:1d:bc:41:5d:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D0:A1:C4:3C:89:EE:71:1C:95:18:D4:2B:79:53:91:FD:9C:8B:DA
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:68:3f:6b:d4:84:6b:6b:09:f7:7a:7d:19:16:46:c9:b6:d7:
         5e:1c:1b:32:1a:a2:2f:9a:e7:76:e2:ee:d6:77:43:fa:ad:78:
         a5:a4:d5:00:6f:6d:f0:33:d7:77:ac:3d:e6:c1:5b:53:78:d4:
         34:03:45:4c:4d:80:f8:81:bf:ef:c8:a7:ab:e1:85:d2:28:3c:
         84:37:d2:23:d2:37:bc:f0:79:9b:71:6d:45:f6:bd:de:6c:d6:
         e1:1e:c9:96:ee:66:61:e7:48:8d:12:42:0f:64:25:ab:90:5e:
         4e:62:de:22:34:ba:7e:a4:e1:23:3c:6c:32:87:e5:51:75:cc:
         e8:26:07:93:3e:01:91:77:8f:fd:46:7c:e4:2b:ba:75:24:31:
         1f:cd:58:9b:55:34:1b:e1:f8:a4:62:f5:99:fa:54:8c:ff:c5:
         f1:6f:80:f8:33:b7:b8:e8:41:26:da:f3:b7:15:f6:a8:4b:48:
         b4:5f:4b:b4:e7:c0:8a:3f:c2:70:2a:80:2e:92:c7:c1:38:18:
         37:47:a7:67:a0:de:97:fe:01:fe:a8:9f:68:07:62:f8:a0:22:
         d5:73:72:58:f5:93:83:33:58:9f:08:6a:a3:a4:e7:4c:3e:54:
         a6:61:0c:4e:78:4d:94:ec:17:a5:42:8e:63:fd:3f:34:7c:d7:
         68:2a:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----