Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
File:                     G9LUY64VNG1e3Xk3uL-o4JsUN20.mft (raw, json)
Hash identifier:          RgoBJyBNez8fy+f35E+gqhlhoAfEDFEI6sjDobmki3k=
Subject key identifier:   E0:E9:A6:1F:12:CA:C4:5C:8F:E4:71:27:93:BF:38:64:FE:78:10:E5
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Certificate issuer:       /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial:       0194BC3C209D0E6ECFC99E8228C24BAB29AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft
Manifest number:          0F09
Signing time:             Fri 31 Jan 2025 12:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:44 +0000
Files and hashes:         1: 61pqBezJLAJE5VLA7yrYYgA1x4Q.roa (hash: wkbkRNJ1tewUM/PlCjzz6x80lWa3MJj4NI3f+PnCsBo=)
                          2: EpJyeK5l3AFsANhOcZBiUOqM9nk.roa (hash: jEvX43x9SqA5MKvP91NPr1LUmWhpxkfIrUnmrmVabWE=)
                          3: G9LUY64VNG1e3Xk3uL-o4JsUN20.crl (hash: c+yzfO8ATic0YTb2Skpl3uBIF6f47u9Pnhnn3+GDFis=)
                          4: XyfRuc4kupwWuvivIxyG_eB9gmg.roa (hash: KYzWwUCDT/C8f7tzUEGe7k72yVFrK9hL5A1TsIJ1sdw=)
                          5: jLqRq9df1G6zlawXTbhxNybx_aU.roa (hash: U7jgU6c2HeS0w5bhwmU3yd/cT+TakYFUUagP3qrZf9A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:20:9d:0e:6e:cf:c9:9e:82:28:c2:4b:ab:29:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
        Validity
            Not Before: Jan 31 12:00:44 2025 GMT
            Not After : Feb  1 12:00:44 2025 GMT
        Subject: CN=e0e9a61f12cac45c8fe4712793bf3864fe7810e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:33:bc:81:20:b9:a0:df:cc:53:ad:32:93:
                    b2:15:e4:e7:e7:2b:9f:d8:4f:44:a8:8e:0a:05:59:
                    70:36:17:57:55:7e:72:5d:2e:25:6d:c7:e3:56:6f:
                    f7:74:f5:c7:1b:65:72:51:5a:27:c8:21:a6:4c:57:
                    89:68:9c:05:4c:c3:cb:73:35:60:ea:bc:a5:41:64:
                    17:63:fb:44:5e:1e:9f:03:c8:f0:7d:05:ec:98:16:
                    27:96:0b:4d:84:8c:29:53:13:9d:25:55:8a:36:c2:
                    07:1f:16:9e:7d:c0:f4:a7:a9:82:d1:53:ff:e0:76:
                    58:87:a5:cd:d8:e0:b2:f4:f4:0c:c6:47:d6:92:33:
                    47:ea:13:84:ad:29:76:f0:84:89:b5:68:58:9f:61:
                    78:32:e3:7a:0e:d5:f6:bf:9d:b5:cb:b5:df:48:be:
                    8a:fe:04:4d:6a:4d:6f:ad:16:db:a5:ee:74:9d:27:
                    f9:db:c8:27:8e:39:84:1d:36:57:3c:8b:0a:1f:ef:
                    bd:b2:da:8e:51:25:5a:3a:e8:cf:ce:1c:c5:fd:8d:
                    cf:7a:61:bc:60:44:18:8a:84:91:31:02:fe:4b:3f:
                    41:21:33:2b:92:f4:3d:83:14:c7:7d:7f:5f:ca:cc:
                    91:da:ad:32:50:c1:ae:b4:4c:5a:66:59:94:4e:86:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:A6:1F:12:CA:C4:5C:8F:E4:71:27:93:BF:38:64:FE:78:10:E5
            X509v3 Authority Key Identifier:
                keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:eb:53:4c:ba:18:16:fe:fd:06:23:eb:44:b6:b9:7c:85:e3:
         fd:c5:52:2a:56:12:54:b9:6c:af:6b:8d:40:12:e3:34:d2:28:
         5b:d7:25:08:55:70:06:32:f3:d0:ec:97:5a:2b:27:26:c5:b9:
         40:07:e8:d2:3f:1b:31:eb:bf:84:5c:33:ab:d8:2f:f0:f7:b9:
         44:d5:8e:5a:fe:86:9e:32:ac:81:8e:51:41:b5:04:96:6c:d3:
         12:b3:bb:20:16:c0:5f:1c:dc:bd:cc:42:3f:9b:03:d9:42:85:
         1c:bf:22:43:6f:46:90:99:9e:dc:57:dc:ad:e2:c2:28:3c:97:
         f5:d1:21:80:25:91:34:00:90:93:92:2d:08:4e:30:75:f6:52:
         92:64:75:fb:89:b5:90:eb:87:e9:2f:59:2d:96:e7:72:19:9a:
         c6:f3:e7:1c:6d:00:ea:e9:cc:04:34:91:ec:bb:ea:e9:28:af:
         89:e8:e0:d3:18:7e:03:26:2f:8f:98:33:37:36:b5:6c:5e:67:
         d1:54:b2:0e:52:9a:b6:e7:1e:27:63:17:a6:00:5f:ab:c6:05:
         42:03:4e:8c:89:99:cd:61:f7:15:28:d9:b8:86:8a:02:9c:c6:
         34:a6:9f:a7:dd:a0:d7:a9:71:4d:e6:4f:f5:e1:97:1e:d2:7c:
         bf:08:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----