Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
File:                     C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json)
Hash identifier:          O7DT+RcPgsz40c8krbIOhj3NZ6I2qToGmQ1TSljAyOU=
Subject key identifier:   13:7E:80:B2:03:7C:36:92:40:2F:53:27:44:0F:A8:8D:A7:43:75:AF
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       0194BC3BE57DD9963710268C56690CC7EDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
Manifest number:          1447
Signing time:             Fri 31 Jan 2025 12:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:29 +0000
Files and hashes:         1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=)
                          2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=)
                          3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: qO3W5GghevJBrJNC2BcEBFP9HaMx31wszfWWcI4ga9Q=)
                          4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=)
                          5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=)
                          6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=)
                          7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=)
                          8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=)
                          9: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=)
                          10: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=)
                          11: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e5:7d:d9:96:37:10:26:8c:56:69:0c:c7:ed:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jan 31 12:00:29 2025 GMT
            Not After : Feb  1 12:00:29 2025 GMT
        Subject: CN=137e80b2037c3692402f5327440fa88da74375af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:fe:de:13:28:99:c4:fc:85:85:57:aa:5c:
                    3e:16:42:be:65:2d:9c:62:89:88:d8:13:fb:74:de:
                    9d:66:e1:dc:ce:34:aa:1f:11:a0:44:83:a1:a4:03:
                    6e:c5:fb:ea:5b:9c:d7:3f:74:e4:07:5f:b6:47:46:
                    e4:21:d1:ca:1b:a1:ac:23:ea:19:a6:c8:44:1d:1b:
                    2e:e0:bc:90:fd:22:92:22:72:10:89:f3:58:dc:e4:
                    d9:56:88:1c:7e:c3:65:3a:15:94:2a:ba:d0:fc:e8:
                    d4:90:fe:2c:33:dc:86:38:b1:a9:6c:bc:f5:0c:93:
                    e9:40:de:28:e5:d1:3d:5c:ab:4f:8c:dd:8c:b4:6a:
                    37:1e:53:a1:17:b0:a2:ee:c1:1a:68:a2:3d:f1:a9:
                    76:dd:e2:ad:a7:85:c1:a5:d4:23:68:61:19:6a:13:
                    bc:1f:26:52:b8:ec:ad:29:04:ac:c1:00:d0:35:c0:
                    4d:a1:29:ec:98:c7:65:7c:0e:43:f0:58:07:7c:41:
                    02:59:92:67:b7:88:cf:db:54:41:64:d8:1c:4b:26:
                    c0:4a:41:94:25:99:84:f5:e2:dd:38:c7:24:84:8f:
                    44:bf:e0:0a:62:1d:53:5b:a7:5e:fd:13:82:61:11:
                    bc:11:ad:4f:3e:86:88:62:ad:18:a9:2b:2f:74:fc:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:80:B2:03:7C:36:92:40:2F:53:27:44:0F:A8:8D:A7:43:75:AF
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:82:05:e6:63:d4:26:76:41:13:ba:b9:6f:41:2f:f9:49:a0:
         7b:e4:da:2f:15:d6:64:0d:cf:16:c0:35:d1:46:a8:a4:26:61:
         fb:d0:17:f5:ab:3a:6d:e4:55:4f:bb:e8:24:0c:dc:fa:34:6e:
         8f:cc:25:29:3a:f3:b3:c1:0e:46:3f:f5:8f:78:f8:fa:0b:bb:
         76:00:e4:79:ea:08:81:0f:3d:12:31:07:3b:3f:3e:b1:1f:9f:
         25:bf:3f:6a:fe:d7:75:90:53:70:a0:ca:75:f7:ec:28:f4:5a:
         64:b9:37:4e:c4:44:e9:61:56:d1:bb:5a:29:7c:60:37:e7:f3:
         2d:2a:a1:89:38:91:72:bc:da:a7:da:28:92:ca:ca:03:c6:cb:
         7b:7b:a3:b6:1e:ad:5d:f5:9d:20:e4:0e:2e:b6:72:cf:f2:d2:
         fd:0b:cd:4f:cc:ca:46:bb:09:ed:d7:51:c4:b5:55:d0:5c:85:
         a2:1e:58:79:ee:d3:fa:35:1f:af:35:97:e6:5d:6b:07:8b:55:
         48:ed:2a:59:84:05:84:21:90:99:86:5a:f1:27:7d:df:94:ae:
         17:74:56:3d:89:b8:29:1c:d3:fa:92:be:40:11:e2:28:3a:51:
         6a:d8:23:6c:20:91:e9:83:5a:7c:6c:91:69:30:55:d2:25:67:
         96:c9:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----