Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
File:                     qqthEeAEwqBE8Wi40oJzz2dE86g.mft (raw, json)
Hash identifier:          3hGLkmWEOuS6wSG3UU0CxN9r3y3dzKXaKtruMPpRBps=
Subject key identifier:   2C:B5:0C:27:2D:A3:51:16:25:ED:0E:6D:CC:56:B6:35:82:BA:7B:01
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Certificate issuer:       /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial:       0194BBCDBBF7ABC09C7BBD490EAF06CEE108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:09 +0000
Files and hashes:         1: 6QrRaQgEDEW94ibCtl94XG-cNo8.roa (hash: gVo0FFoXqD/aGsK6YPk59eIbOT2OP162DfbC2dzkqj4=)
                          2: 7urOT0b2zyplaSV17VCTc3I9rtw.roa (hash: Yw1VoqRmvMFMVO6l5Uy0jZGfW7yUlUJdkk+jB/3e9sA=)
                          3: 8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa (hash: 490w7F1y4o1yoJe8DWbaKwN62Kay5Tc/NkagYt79lV4=)
                          4: OtjJmI6Ls9Kg1YxzkMEdEkmTt7I.roa (hash: /6BLR+AdUGXWQBTgTfTbrGkLKrcJvvynFVuSv1BHLUo=)
                          5: lKv2UXEAuZ3pVmPri_cgjqsjuH8.roa (hash: 21YjP9sGrHMd/UxygO+uZmaIfIlwivtYQxl8y+y2Ni4=)
                          6: orOsP0rs2ff7STwYpI2t2_50MTo.roa (hash: o5pPTCCPZuPMBRMWmMSYExhsj/8nITrHMx5Um0qrkAo=)
                          7: qqthEeAEwqBE8Wi40oJzz2dE86g.crl (hash: pAtglb4C/Fv2Uzh0h7dD9zpGVqn6Ll2tZBrM8NfLwIg=)
                          8: v3pVfUjy4X_Jk5Ymo8xwhRDG6ho.roa (hash: WvXW8cKBuenjm6GrqbAc1s5MZXRWgg4MxpYkVeSUO6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:bb:f7:ab:c0:9c:7b:bd:49:0e:af:06:ce:e1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
        Validity
            Not Before: Jan 31 10:00:09 2025 GMT
            Not After : Feb  1 10:00:09 2025 GMT
        Subject: CN=2cb50c272da3511625ed0e6dcc56b63582ba7b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:c4:fa:70:77:a6:bf:fb:2e:ea:9e:10:31:
                    e8:b8:91:d9:e1:b4:e9:eb:c3:8f:7d:bf:bb:b1:00:
                    63:19:0e:86:b2:e1:26:80:d7:39:f4:51:ce:72:18:
                    df:3f:8a:f3:b8:05:93:96:38:fe:ef:20:12:a2:3d:
                    12:56:82:7e:b3:8c:9d:82:16:d4:78:98:48:26:f6:
                    05:1a:dd:27:69:13:55:c3:3a:93:77:81:7c:ef:bc:
                    f7:04:78:e3:7f:7c:6e:61:e7:65:86:79:21:7a:e3:
                    2b:32:be:49:56:84:68:a9:d3:cc:73:6a:ce:cb:2b:
                    5b:4b:41:86:98:75:7c:87:f7:98:5e:64:81:5e:9c:
                    42:84:45:f1:a2:1a:f9:8d:c9:55:a4:2b:c6:7d:ca:
                    f2:f1:3a:cc:8a:92:1c:f4:61:cc:b3:66:3c:34:c6:
                    6a:07:bb:ae:3e:7e:4b:00:9f:25:26:ae:5f:67:fb:
                    f1:e3:d0:68:ad:1b:53:49:ab:87:32:69:89:31:dc:
                    f9:11:b1:2f:92:44:d9:f6:71:49:88:fc:05:52:80:
                    7b:73:20:7b:7c:fa:32:5b:74:b4:69:57:b6:59:74:
                    59:be:96:fb:5a:8d:56:d9:ad:70:0c:66:dc:07:8a:
                    49:20:54:fe:b6:c4:17:ca:96:32:20:e0:7a:9d:e7:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:0C:27:2D:A3:51:16:25:ED:0E:6D:CC:56:B6:35:82:BA:7B:01
            X509v3 Authority Key Identifier:
                keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:db:f6:81:51:c1:ff:99:4e:b1:d3:30:4a:35:47:e9:4d:0b:
         a9:1e:a3:9b:7c:93:37:ba:2e:10:23:47:16:4e:51:8e:8c:d8:
         27:5e:cd:e8:dc:4f:65:84:7c:a2:dd:d0:80:6b:91:34:5c:fe:
         8c:92:8a:d6:de:48:24:57:aa:be:f6:7d:5f:a9:69:33:b3:0d:
         5b:c9:49:96:c9:50:42:3c:32:31:7f:f6:b2:f9:bf:be:54:ae:
         da:a5:27:05:e9:8e:34:d6:1b:ce:95:99:0d:a3:65:5e:4b:d2:
         cd:da:c5:88:ba:2f:4a:76:ec:d1:e1:38:d5:8d:4f:fa:d7:23:
         ee:61:c3:51:58:85:8a:6c:ec:5c:1c:5f:6f:52:bb:1f:30:bf:
         75:22:a6:00:08:74:61:63:ce:f8:ee:16:e7:be:4f:3c:dc:64:
         4e:17:1f:03:fa:74:9d:72:50:e5:e6:fa:23:d0:02:b6:65:4b:
         36:24:6b:39:26:d2:f3:45:78:df:2d:a0:fe:e4:9f:0b:08:04:
         c9:1f:5d:c1:42:e6:6d:90:28:c7:c4:65:08:ea:34:be:23:d5:
         b1:3d:0e:24:b2:69:fd:60:bc:67:09:2a:5c:0d:87:8a:30:5d:
         56:da:ee:b3:b4:cc:95:dd:26:12:2e:4f:b2:86:99:81:22:8b:
         29:c3:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----