Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File:                     S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier:          6fP66MTuffPFu8LJ/1WbDuwlIEVVJ+7IUjD4udAi4bk=
Subject key identifier:   80:1E:83:49:87:B5:3A:68:56:FB:37:29:D3:84:40:55:4D:58:FB:00
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer:       /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial:       0194BC72BA2B58CBBFA63E7647F753147D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number:          0A46
Signing time:             Fri 31 Jan 2025 13:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:22 +0000
Files and hashes:         1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
                          2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: 5nYOo0MDqnZfGRTVG+sl88IpWSACdju22GUbNFulWzc=)
                          3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
                          4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
                          5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ba:2b:58:cb:bf:a6:3e:76:47:f7:53:14:7d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
        Validity
            Not Before: Jan 31 13:00:22 2025 GMT
            Not After : Feb  1 13:00:22 2025 GMT
        Subject: CN=801e834987b53a6856fb3729d38440554d58fb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:db:87:f8:ef:c3:1e:97:54:fd:f7:a9:ed:
                    49:db:d2:29:42:11:c1:71:63:8f:61:3b:45:28:d1:
                    20:b7:28:5b:f4:e8:6c:d7:a4:6d:6b:27:db:84:fd:
                    f4:13:a5:a3:09:b4:48:77:dc:74:7c:cb:b4:95:24:
                    31:1a:90:1c:23:b5:83:2e:29:da:ae:ad:db:df:09:
                    c1:95:35:ab:43:70:df:ce:fe:f7:0d:41:63:9a:11:
                    4b:8b:af:02:fa:fc:e9:16:98:e8:9a:33:e2:9f:fe:
                    b7:bf:5b:93:63:1d:65:b7:6b:39:d9:74:ad:c2:d0:
                    e3:dc:86:7d:3c:16:85:40:ca:3e:1e:50:ae:06:0e:
                    a8:70:6f:50:ef:33:b6:d6:e9:63:4b:99:bb:3f:7f:
                    51:9f:c6:02:e8:5e:fa:76:4b:0f:2d:66:3f:e3:85:
                    b0:01:63:95:6d:d9:ee:d4:29:bb:8d:f7:2b:b7:2f:
                    d9:ba:b4:3a:9a:04:f6:5c:e9:29:7a:3e:d9:2c:03:
                    65:54:d8:9c:51:00:87:67:3b:80:29:5b:49:19:c7:
                    fe:0f:ba:c3:08:b2:84:c5:5d:c9:63:56:05:5d:d8:
                    5f:30:2d:04:50:7f:2b:1e:18:89:01:56:04:c9:d2:
                    2b:74:18:7b:77:70:8f:85:ef:ab:ef:10:28:ce:17:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:83:49:87:B5:3A:68:56:FB:37:29:D3:84:40:55:4D:58:FB:00
            X509v3 Authority Key Identifier:
                keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:fb:95:b9:95:d6:a0:ea:63:cf:46:ea:fa:5b:ba:2b:cf:
         01:16:0d:3b:7b:48:d2:03:58:4d:8b:5e:e7:01:da:ab:9b:04:
         bc:16:5c:1d:f5:54:f9:2c:68:dc:a1:89:37:49:de:fe:3e:96:
         a7:81:7e:4e:d2:77:19:a4:b2:90:7b:f1:aa:6d:0e:70:f4:d5:
         db:d5:a3:5a:61:1a:7e:d9:9e:10:b5:1f:6c:99:1d:f3:22:89:
         7b:40:48:17:e5:01:8c:3d:93:80:25:6e:8a:8f:d8:e0:c4:c2:
         dd:ef:86:0a:ba:1b:bd:ce:de:14:49:7d:04:9a:3d:bb:f7:18:
         19:a6:d4:19:11:c0:2d:a0:65:87:4a:11:5f:1f:3a:dc:a4:ea:
         f6:92:6f:48:8a:ea:c2:65:48:c0:fd:40:58:4e:52:a3:f7:4c:
         c8:d2:9f:43:0b:37:fd:70:63:80:c7:b2:92:e3:76:63:f9:1f:
         4b:6e:5c:37:c6:e0:a3:d7:6c:10:ca:47:30:a0:1c:24:c4:05:
         1d:2c:ec:b5:e6:b8:2b:fe:7f:d8:35:a4:a2:37:be:88:2c:8a:
         82:21:b8:da:92:92:bf:de:6f:c4:9f:32:40:f8:4e:8d:33:91:
         2c:19:22:02:01:aa:54:9c:e5:ff:d8:c2:af:de:eb:7a:6d:1a:
         f1:10:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----