Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File:                     QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier:          y/IHWVwYHL+jQjpEw1mXSPBQiEa5/7NobwMPfmjA5cY=
Subject key identifier:   C6:E4:1C:7A:DB:7B:D5:1E:52:DB:2A:CE:E3:5D:88:4C:2A:08:95:D3
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       0194BCA9EC468B58AC2B9E776D268E470DE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number:          0F53
Signing time:             Fri 31 Jan 2025 14:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:40 +0000
Files and hashes:         1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
                          2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
                          3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: Wchn38FTvGbVINGlvjm8bvNIyzm7vp/ts2P+VOwtHO0=)
                          4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
                          5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ec:46:8b:58:ac:2b:9e:77:6d:26:8e:47:0d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Jan 31 14:00:40 2025 GMT
            Not After : Feb  1 14:00:40 2025 GMT
        Subject: CN=c6e41c7adb7bd51e52db2acee35d884c2a0895d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:c8:a8:e1:07:4a:16:84:a7:d9:4d:6a:7a:
                    66:c5:40:3a:d4:20:84:45:d6:3e:96:39:bf:2c:dc:
                    8a:1a:e2:3f:8d:af:e4:da:c9:01:d7:10:14:2a:c2:
                    11:27:27:94:a4:0a:1e:00:9a:2c:88:e7:ef:6f:44:
                    17:1b:ab:26:26:b3:28:6c:a9:0f:3a:93:06:1b:f1:
                    7a:c3:91:65:50:b4:8d:d7:dd:ed:57:19:09:1e:83:
                    17:24:20:13:d8:8d:0c:7c:cb:e8:30:7f:f9:08:09:
                    6d:fd:fd:92:3d:6a:e2:89:21:cc:b6:d0:86:48:ad:
                    c5:b6:51:a9:84:20:12:27:28:d0:48:a1:54:ec:a9:
                    c4:ad:c6:ef:ed:07:89:77:53:28:85:14:4c:d1:08:
                    19:9a:81:f9:77:2d:2b:07:3b:36:fc:c1:17:1d:12:
                    95:7d:15:28:7c:c4:fe:27:67:94:b3:b7:3c:16:61:
                    e3:86:c5:d4:03:d7:86:54:ab:64:b6:4d:15:a8:04:
                    cb:74:5e:65:1f:fe:03:f3:c3:76:22:30:e1:74:06:
                    2e:1a:24:52:44:7b:9c:81:5f:51:86:2f:2d:62:ec:
                    76:0d:52:0b:91:a4:2a:86:ae:15:58:c8:6a:38:90:
                    df:c0:0f:6a:8e:73:72:fd:7a:91:75:b9:e6:b7:9e:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E4:1C:7A:DB:7B:D5:1E:52:DB:2A:CE:E3:5D:88:4C:2A:08:95:D3
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:67:7b:78:e0:c6:53:a5:1d:b7:1c:b7:fa:5b:e4:6c:c4:
         45:2b:16:01:8b:8e:41:cb:40:bb:89:54:84:4e:82:e6:dc:ca:
         65:54:f9:d9:a8:73:4e:47:c6:17:a7:34:4d:b8:ab:3e:a8:82:
         ea:95:cf:42:da:12:fd:78:31:6f:de:56:17:15:a0:15:0d:e3:
         41:f7:94:c4:f0:fc:2f:b0:1b:a0:34:c9:f5:28:df:8f:c7:05:
         31:f9:4a:48:a6:9e:99:52:40:a6:34:47:da:c1:c9:a8:fa:de:
         c9:4a:d6:30:71:13:49:bf:f8:b2:4a:7b:7b:c5:28:15:5b:82:
         7e:ea:7e:ff:bb:5f:cc:da:31:03:54:64:4b:42:55:6d:de:b8:
         58:ed:eb:55:04:39:3f:5d:a7:b3:c4:6f:f1:99:f6:95:7f:e0:
         2c:4f:fa:72:b4:9d:be:eb:e6:c5:e0:44:99:55:0f:b5:6c:0e:
         a8:71:69:4c:8f:e6:56:0e:f3:db:3d:f7:09:0c:f1:d7:79:66:
         d5:f9:e4:e3:f0:c1:49:00:1a:0d:e8:cc:7f:2e:67:b7:ec:f5:
         e0:6f:b9:6e:6b:56:88:3a:8b:cf:32:b1:62:3e:3b:99:eb:90:
         45:d4:20:94:74:64:7e:51:7b:42:a4:70:f4:db:67:d6:37:1a:
         c9:98:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----