Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft
File:                     kELoOXbjX-KaAdPEOpvFlks3tEM.mft (raw, json)
Hash identifier:          anUJ3m9razEQ+tmx2Z3I7SOaaGQimb/dB8rUyLGZvcc=
Subject key identifier:   62:77:41:90:5A:AC:3A:9B:E6:6D:99:CE:56:8C:57:1C:61:46:B9:CD
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Certificate issuer:       /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial:       0194BC72EA896FAF9D7FFF1364C55C6C4C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 13:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:35 +0000
Files and hashes:         1: 4q9rw4c3CUq_nyRIO7LEOgkruXE.roa (hash: BUWjQNSVGqPXxKeiIG/ZXG8rcyWyUDhJRb4EdLgsiyg=)
                          2: 69MEYRk3KHWNU6PZCeunEy7z-lo.roa (hash: VbFRQRlaweaM8YOATERuna7Y1deHDTFSxhzV5IruIz0=)
                          3: Zi0r7nxkEIJEAa8gbmvvEGPUYyQ.roa (hash: VyaLyM0DmPadq6oON235ghfJkFa7ZjwSaZEQVAEmM6o=)
                          4: kELoOXbjX-KaAdPEOpvFlks3tEM.crl (hash: kXPSG6gXaQWEjNZujAqU3kJzgUs/MaHWnBokmEpiL08=)
                          5: xPDk5g3iPqXtBxmqurOe8EOGFWI.roa (hash: cJRWS3KQ8AblO7sJXHhVYD57y1Z4KoSNUaFxyUCeoJM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ea:89:6f:af:9d:7f:ff:13:64:c5:5c:6c:4c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
        Validity
            Not Before: Jan 31 13:00:35 2025 GMT
            Not After : Feb  1 13:00:35 2025 GMT
        Subject: CN=627741905aac3a9be66d99ce568c571c6146b9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:ec:27:83:15:2c:f0:ce:19:45:c3:f5:f7:
                    3c:20:6e:16:e9:d7:3d:9a:24:38:5c:e5:7f:1d:7a:
                    79:63:55:19:1f:95:95:b4:06:ce:56:8e:9d:d7:8a:
                    19:1f:95:1e:64:48:1c:b9:e1:27:a1:f6:74:be:72:
                    9f:5d:44:c0:48:8c:b1:db:03:a4:64:5b:39:18:0e:
                    21:5c:f3:bb:86:4e:20:bc:78:72:f6:b1:8d:ab:9a:
                    ad:9e:85:3a:53:20:d4:ff:71:3f:55:63:93:db:1f:
                    35:c4:6a:0b:49:05:11:3d:36:c9:6f:ed:c4:c9:ea:
                    85:a3:a0:94:a4:4e:cb:56:c6:bd:6c:da:51:a8:e0:
                    df:5f:d2:22:19:a6:1b:c8:68:e4:04:9f:71:38:9d:
                    f0:60:4c:f4:6d:8e:9f:3b:29:1d:b5:09:e2:fd:55:
                    74:52:2b:eb:5f:26:48:5a:61:05:cd:07:46:ef:46:
                    e3:66:93:27:26:5e:9d:ce:31:02:d6:50:4a:24:23:
                    b5:5b:6d:4b:36:3f:6d:58:1a:83:ac:35:c3:f9:80:
                    11:0b:6f:47:40:45:38:4a:1f:94:e8:01:d2:03:1b:
                    0f:04:a0:79:e0:91:6c:05:3d:98:98:35:63:83:30:
                    fc:fe:04:4e:bd:c4:0b:d6:22:b1:77:34:c7:d4:0c:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:41:90:5A:AC:3A:9B:E6:6D:99:CE:56:8C:57:1C:61:46:B9:CD
            X509v3 Authority Key Identifier:
                keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:45:be:3c:3a:01:f5:f2:93:38:a8:33:3a:c9:39:2b:1d:89:
         99:45:44:5f:c5:6c:09:91:73:a5:f6:f5:a2:67:b6:c8:4d:41:
         ea:76:57:1a:ea:fe:7c:f5:0d:9f:64:b1:e4:64:d4:53:2f:b9:
         84:f4:9b:3e:e3:4a:94:79:f7:93:b8:88:85:a8:ab:e0:69:fa:
         01:58:b8:cd:42:9c:7b:99:80:4f:fa:d7:8c:c2:48:59:f8:d0:
         76:92:1a:09:4c:d1:98:9f:54:7f:c4:b0:40:f2:0d:90:ed:a5:
         e8:c7:95:df:af:99:6b:4c:68:5c:e2:a9:bb:f8:82:a4:08:40:
         c1:e0:77:db:06:f0:b5:29:5f:7f:47:c7:e2:35:71:c1:9f:ef:
         da:d1:c8:92:f9:b6:2d:a6:ba:43:63:78:de:ad:cc:83:45:9d:
         78:a8:59:6d:88:48:b1:0c:02:56:90:81:14:12:0a:7f:f8:71:
         55:86:aa:4c:be:59:8b:87:a2:3f:05:85:83:8e:68:e2:2f:12:
         d6:7f:03:a6:c6:77:74:3f:1d:87:ae:61:47:d5:1f:cb:8a:0b:
         af:f2:49:c0:88:98:f6:21:72:78:ca:43:12:e6:86:89:96:61:
         1d:4c:04:d8:2b:b0:af:81:02:2d:49:c8:ac:97:f1:7a:91:d0:
         fe:2e:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----