Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File:                     QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier:          95cPam3rdUGpOYg7yJjdDNMwZsfBTIyprmgrxdLoBoQ=
Subject key identifier:   C7:58:A1:31:39:EA:FB:62:84:C0:53:24:F4:37:5E:1E:BC:0F:E8:E3
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer:       /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial:       0194BCA9BD7B0A2E15F4ADF2BF06ED782146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 14:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:28 +0000
Files and hashes:         1: GYkYwSyMjSff2hGRE7TeYNMjHAA.roa (hash: L63ZPeMKf3x9Sz6aPgJwaNunh2cW66rmUBDYxNx9F1E=)
                          2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: me1coe7TQaGUeKhCyqcdyWKxkvK5NyMFmMHN8lGhiww=)
                          3: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
                          4: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
                          5: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:bd:7b:0a:2e:15:f4:ad:f2:bf:06:ed:78:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
        Validity
            Not Before: Jan 31 14:00:28 2025 GMT
            Not After : Feb  1 14:00:28 2025 GMT
        Subject: CN=c758a13139eafb6284c05324f4375e1ebc0fe8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:af:d8:e6:88:c8:80:a3:2a:27:2e:9a:4b:
                    7e:c6:5f:bd:a4:da:05:7b:01:94:34:c9:5a:c4:7a:
                    20:bc:46:26:b2:a9:da:c6:c9:89:6a:b3:bd:2b:87:
                    3a:c0:f4:a9:57:7c:dd:af:4b:06:23:06:a9:a9:c6:
                    9f:2d:3d:a9:9b:5b:56:0e:f1:e1:d0:12:08:55:c3:
                    e6:65:2e:35:ad:f6:a1:d1:99:d4:28:bc:6c:f6:45:
                    d6:78:cd:77:42:b5:4f:a6:bd:74:a0:76:0c:1c:4d:
                    49:a6:da:ed:2b:79:93:a5:6f:33:59:fa:fa:e1:27:
                    0e:d6:52:13:cd:a7:e0:f2:a0:8d:64:ee:0b:b3:84:
                    ec:78:9a:3e:8e:92:0d:ab:4d:11:81:84:0f:5f:c3:
                    0d:46:bc:8d:d2:aa:6a:0c:05:6e:e2:c4:36:f0:ba:
                    81:ac:fe:cb:dc:47:1f:63:d2:47:9a:9c:46:ab:e4:
                    40:7a:d5:27:25:0b:aa:b9:21:f2:36:ff:84:bd:b9:
                    eb:9a:13:9d:c7:d9:9b:73:61:14:5d:ac:37:78:42:
                    f2:d2:61:41:cb:f7:25:aa:4f:81:b1:c6:1d:d2:b9:
                    89:15:2e:83:ed:21:b4:df:bf:b0:f3:c3:13:21:82:
                    9e:bb:2d:df:40:e4:e5:b3:c1:55:8c:f0:3d:7f:ed:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:A1:31:39:EA:FB:62:84:C0:53:24:F4:37:5E:1E:BC:0F:E8:E3
            X509v3 Authority Key Identifier:
                keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:4f:76:45:99:24:e0:f0:f0:b0:ad:e6:90:12:66:be:59:
         fe:00:3a:1c:8e:f8:2a:d8:ac:fd:34:f1:4f:0b:bd:61:e5:de:
         9a:3e:1d:3d:da:1f:f5:48:0b:17:8b:05:01:bd:a9:af:ca:bf:
         6d:0b:5e:9a:95:24:63:44:21:a8:e7:ba:09:72:4d:21:ba:1a:
         8b:98:32:16:5c:92:ed:67:43:63:5a:5b:0f:b0:69:a6:0d:9e:
         ba:65:ee:6b:e2:f7:9f:5f:44:7d:af:0c:9a:68:8a:6a:34:a5:
         5e:36:0f:01:31:f1:37:9d:9a:f6:a4:f1:94:07:c4:1c:73:95:
         a8:14:84:6a:63:1b:78:b1:3b:2e:d1:7b:0e:d6:d7:83:2f:42:
         79:31:45:cd:4e:5a:cb:47:5c:2d:e7:fe:f2:eb:4d:14:9c:7c:
         9f:8f:ce:f3:82:3b:84:4b:f0:d0:6e:55:93:9e:97:15:a1:4e:
         0f:cf:f5:ae:58:74:65:84:15:52:72:35:c1:64:0c:0f:c1:db:
         c7:09:89:26:8d:4a:4c:d9:fa:21:20:e2:fe:fc:b7:0e:6b:c2:
         10:7a:f9:d0:cc:76:2f:f1:ef:f5:80:b6:84:4d:9b:9d:13:46:
         69:d1:d0:1b:d3:1c:90:17:56:95:86:39:7f:fc:20:21:71:6a:
         17:d2:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----