Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File:                     VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier:          8BAG1K6RUP8u6JvaHcSMrDQLfrFJQAN95DMlvWLOUjM=
Subject key identifier:   1A:85:49:B9:4A:86:43:86:DE:54:4D:01:32:B9:29:C2:34:B5:B0:D1
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       0194BC73138D9AEC7807F5BC2ED90B774113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 13:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:45 +0000
Files and hashes:         1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
                          2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
                          3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
                          4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
                          5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
                          6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: GEZHUHa2l+NvRrHPQEVzxrUiefz39UqVIbUr9p1LhV4=)
                          7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
                          8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:13:8d:9a:ec:78:07:f5:bc:2e:d9:0b:77:41:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Jan 31 13:00:45 2025 GMT
            Not After : Feb  1 13:00:45 2025 GMT
        Subject: CN=1a8549b94a864386de544d0132b929c234b5b0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:64:7a:3c:79:1c:54:a8:82:b0:ad:49:a5:
                    ae:2d:9c:e6:ea:92:ed:a7:ca:5b:f8:81:b3:07:b9:
                    68:3e:ee:21:f1:1e:7b:4e:4a:21:50:7a:d5:f4:c8:
                    0d:73:68:57:33:2f:27:0a:72:17:26:da:cf:eb:e2:
                    11:27:82:c3:2b:30:23:0e:e7:a6:a3:38:68:65:6e:
                    b0:cb:90:fc:fa:63:99:a6:28:52:ae:d2:eb:98:f7:
                    51:a2:27:bc:6d:43:9a:9b:c0:ce:5e:6b:7a:24:fc:
                    05:e2:c7:bf:b9:aa:2f:3e:3a:49:6c:6a:b8:0e:b8:
                    44:4e:44:ef:d8:97:ee:b5:7e:36:88:23:06:29:f5:
                    1e:7b:99:4a:37:5b:51:1b:82:bd:7a:af:0b:f2:55:
                    9e:11:66:a1:fe:d1:b4:d1:84:23:74:9b:67:56:b4:
                    3f:66:da:0f:be:99:fb:78:eb:a9:65:a9:4e:ff:18:
                    c3:77:e9:a6:5e:f1:6a:77:ac:f9:68:4f:9d:98:b3:
                    df:5e:61:67:59:aa:dd:b6:4b:14:4f:b8:78:bf:5e:
                    b1:0e:5f:bd:b5:8e:0c:20:3c:3a:ec:e3:4a:8a:ca:
                    5f:fc:27:0b:d8:22:e8:ff:c8:1d:20:75:86:62:f0:
                    52:60:a1:c3:ae:07:b6:63:fe:0e:ba:b3:dc:bb:68:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:85:49:B9:4A:86:43:86:DE:54:4D:01:32:B9:29:C2:34:B5:B0:D1
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:2b:18:0d:f0:66:0f:60:f8:b1:cb:f6:ab:6d:87:d0:ab:79:
         49:af:1b:c3:05:2c:33:12:19:61:ff:d8:81:d2:ad:f8:ed:ec:
         7d:05:61:60:25:59:f6:d6:d3:7a:18:f2:02:6a:02:f0:ec:c0:
         e8:e2:27:d7:be:91:97:c9:03:a7:d4:a2:68:2b:49:5e:9e:da:
         1d:33:77:06:60:67:0d:12:c5:b7:14:bb:36:0e:49:1c:d2:e6:
         f0:4c:be:cf:6b:8e:2e:d4:4b:31:04:ec:0c:39:76:2d:c2:9a:
         df:f9:da:4e:34:29:c8:68:1f:2d:79:ea:a7:2f:db:c7:61:ed:
         af:31:5a:2d:0d:92:ab:01:ba:46:91:0b:71:fc:75:36:97:f2:
         39:f7:d7:72:c6:5c:20:ff:e2:a2:01:ea:f2:31:e8:3d:58:72:
         ff:2d:6b:27:70:3b:73:f2:06:22:62:2c:9d:57:5d:aa:ce:ba:
         dd:98:35:46:7b:9c:d1:03:84:36:10:02:ef:ac:6c:b9:09:c9:
         fc:23:cb:a5:56:6c:24:d4:50:04:cd:de:84:7a:64:96:16:a4:
         9d:54:46:e6:d2:29:24:11:34:a1:9e:44:10:28:fb:8e:bb:89:
         61:dd:e2:0a:b5:6c:ba:e4:88:ae:4d:73:8a:04:72:d5:81:e0:
         0d:89:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----