Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          2uxEB5X/1RY2rAO6F8gjIwNy93bs569Sff3JMN1N+5c=
Subject key identifier:   2A:DD:38:DA:16:2F:9F:10:1E:8D:B4:6D:34:AD:A9:3C:7F:9E:51:A4
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       0194BCE07F04D0D463B8865890A80ED5FC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          026B
Signing time:             Fri 31 Jan 2025 15:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:16 +0000
Files and hashes:         1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
                          2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
                          3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: kLnZhBbc6r0YBYd5UstegAypP+soATVqHlCHDZnxb5s=)
                          4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
                          5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:7f:04:d0:d4:63:b8:86:58:90:a8:0e:d5:fc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Jan 31 15:00:16 2025 GMT
            Not After : Feb  1 15:00:16 2025 GMT
        Subject: CN=2add38da162f9f101e8db46d34ada93c7f9e51a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:a2:2b:74:df:7b:fa:c5:3b:91:8e:5e:c3:
                    9a:a1:c3:5a:e2:8c:dd:68:43:d2:04:d9:a4:aa:64:
                    0c:cd:8d:3a:4b:e9:c4:8a:f5:6d:12:ab:2b:fa:1a:
                    c6:8d:2d:c2:76:c9:19:f5:e8:a8:3f:18:2a:70:9a:
                    2e:a7:a8:0f:6b:e4:17:49:bd:b1:71:66:72:f0:48:
                    7e:a2:7e:60:48:2c:e4:88:80:93:f7:4e:17:53:a2:
                    4e:7c:95:78:de:72:89:0f:bf:28:4f:08:9b:49:e5:
                    a1:a3:e8:a4:e2:93:8a:85:fa:de:c0:2c:0b:10:1a:
                    7e:c3:53:c2:62:39:bf:8a:68:52:96:ec:80:29:f5:
                    65:92:b4:d4:58:69:99:1a:2b:68:84:0d:42:b0:78:
                    b3:a1:cd:1b:4f:88:8d:bc:af:a8:3a:1c:8b:18:35:
                    97:45:fd:f4:4f:c1:68:7d:1f:71:a1:65:e8:2e:3c:
                    8d:e5:26:3f:76:0b:1a:aa:65:1a:76:4f:76:21:b4:
                    15:7c:3e:b4:10:f4:51:f0:e0:da:99:50:a6:b7:02:
                    f0:f1:ed:77:02:db:74:cb:ed:a2:75:cf:66:59:d6:
                    9d:f0:a6:45:90:2b:51:f6:3b:e3:73:c3:eb:22:6d:
                    a6:3d:79:be:ed:43:b2:51:04:a1:95:38:97:8f:b1:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DD:38:DA:16:2F:9F:10:1E:8D:B4:6D:34:AD:A9:3C:7F:9E:51:A4
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:18:8b:35:a6:8b:de:80:3d:d8:2c:c3:ba:9b:ad:bc:f3:fa:
         55:cd:10:a7:8d:c1:df:2c:a5:56:82:de:c1:23:33:1a:9c:d1:
         1b:7a:f3:c8:a0:00:a6:a2:f9:f3:7d:03:ee:89:31:43:5d:b7:
         3a:98:46:6c:55:e2:64:67:50:67:17:89:d4:80:a6:42:ae:ae:
         eb:71:53:a0:d2:b0:99:3e:25:81:43:00:29:5d:c9:1d:0b:db:
         37:04:d5:d1:89:df:84:19:db:b1:b2:3c:30:00:20:9b:3c:32:
         60:e4:68:15:f5:ec:55:a5:72:cd:ae:f0:f8:e6:84:7d:9c:66:
         14:4a:fb:bd:c9:98:ea:21:bc:e3:11:c4:4a:40:93:24:c0:09:
         e0:d7:aa:96:5c:f2:d9:36:95:5f:1e:11:09:62:d9:7c:35:59:
         48:e6:7b:d6:db:59:47:fc:79:15:ea:2a:59:2e:bb:0c:f0:8a:
         99:70:0f:99:d0:1d:8b:00:98:1c:4b:26:90:02:c6:05:57:a1:
         7b:e1:a2:86:bd:5d:ef:0b:fb:34:ad:51:f4:d6:07:f7:5a:12:
         8d:68:7e:f7:b8:f3:dd:31:78:c0:77:bd:d1:84:91:ab:a6:ec:
         36:ab:39:97:55:05:d1:3b:78:f5:bf:43:49:99:b9:85:03:87:
         88:1c:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----