Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
File:                     rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json)
Hash identifier:          69mHNKv1Te9BYOhMkRd3vAS3LZS2J7bEFlpajJF9mts=
Subject key identifier:   94:A9:46:39:EC:2D:37:E4:88:3C:64:D9:EC:EF:DD:80:AA:84:DC:0E
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       0194BBCE3A5BF0B38028211E37F2BACBE6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 10:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:42 +0000
Files and hashes:         1: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (hash: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=)
                          2: XA_piEc4HEvUHExh_2CSkkKu2EE.roa (hash: o4y+DZ7Kqo85gSPTmaUUa/xs87y4f7OVpkKcmJxleCE=)
                          3: f8xBUwiIZuwlbLideHYCraA5b80.roa (hash: 80zoqn9Od9Yp6Ppqm8QLXbeCtAS1Mylgf7fSAtsOaVc=)
                          4: lR6zP5U5RH-kGUiT4tee76n_n7U.roa (hash: d+2joVrqEnxO1Au13OpUY3xGwfVao9EUryyrW7jhHKE=)
                          5: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (hash: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=)
                          6: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: QVjQLLUabRg1Xzdq2JJ6sVBxlfUQDZxxgOe8WvR2fTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:3a:5b:f0:b3:80:28:21:1e:37:f2:ba:cb:e6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Jan 31 10:00:42 2025 GMT
            Not After : Feb  1 10:00:42 2025 GMT
        Subject: CN=94a94639ec2d37e4883c64d9ecefdd80aa84dc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:cb:a8:bd:78:af:f2:78:4d:35:24:76:14:
                    eb:c3:9a:b9:03:02:70:76:61:7c:f2:be:c1:50:9d:
                    c3:c7:85:b1:ab:7c:5b:ce:3d:e9:06:24:66:93:d3:
                    66:6f:e2:67:4d:5b:10:9a:1c:d6:a3:e5:e2:c2:5b:
                    49:34:08:d0:ee:80:e6:f6:7d:92:64:c0:da:57:6c:
                    45:33:e7:c4:f7:cb:31:06:08:57:51:4d:7d:13:87:
                    dd:42:a0:f5:a2:b2:3a:62:83:57:71:1b:3d:1d:02:
                    b3:3c:a3:c2:e6:a4:a5:47:b2:0c:bf:7c:44:1e:67:
                    8e:1d:a4:28:7a:5f:12:23:c6:27:e7:18:b1:69:01:
                    52:66:aa:16:70:76:5d:3b:b9:0e:c2:ca:17:9e:77:
                    51:ae:09:e3:ee:7b:b6:dd:a1:66:53:15:fa:7d:53:
                    e6:73:84:ef:27:e4:10:cc:4d:a9:43:eb:8a:22:a3:
                    fd:a0:c6:ca:a4:81:e5:fd:61:d7:50:ca:d4:cf:e8:
                    cd:7a:80:5b:0a:59:62:71:c5:aa:5b:3a:2f:ae:9d:
                    2e:7b:ab:6f:d7:da:0b:3d:b0:00:5c:72:36:0a:1c:
                    0c:37:ea:ca:67:27:30:1c:b5:be:69:bf:1f:a9:d2:
                    ee:de:79:43:09:99:b5:3e:61:1c:62:a1:e5:b4:c6:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:46:39:EC:2D:37:E4:88:3C:64:D9:EC:EF:DD:80:AA:84:DC:0E
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:3f:ff:93:d5:bc:63:e3:c4:05:0a:8f:6b:ef:9a:9f:85:fc:
         f9:b5:23:69:67:e9:5d:5f:e0:a3:7d:e7:a1:82:d8:9f:b0:a8:
         39:eb:83:6c:1b:b8:44:91:4a:60:3f:8f:39:3f:b3:d1:97:c7:
         aa:40:36:80:60:b0:d0:c5:8d:f8:a7:da:22:60:fa:f4:ac:c0:
         b4:a6:fb:06:ea:e2:c6:15:19:9b:f1:27:ba:45:a0:c1:ad:7a:
         5f:2d:42:e7:8f:cf:14:3f:0a:4f:8a:a1:24:bd:d6:f0:ad:ad:
         05:c0:e3:c8:2f:89:e9:61:de:86:95:72:e3:46:52:33:8a:b9:
         bb:5c:cd:b4:1f:6a:7e:d2:aa:f0:bb:3c:70:1f:d8:a2:09:29:
         40:40:94:b3:4b:4d:c9:f3:60:82:d1:f3:85:b9:43:04:50:8e:
         09:d5:a8:89:ae:90:21:9b:d0:9e:1a:1d:91:f4:8d:8c:76:83:
         bb:b9:7a:b7:8a:71:68:d1:24:17:7c:6e:35:ec:02:2f:ef:7f:
         ee:b3:d6:4a:63:7f:97:d9:e6:44:7a:68:9e:6d:4c:df:82:83:
         c1:f6:9c:d8:df:c7:32:6f:be:27:24:2b:ad:f2:f1:7f:cc:ae:
         11:28:53:19:1b:92:e8:12:08:92:fd:74:af:9c:27:8b:77:18:
         f9:d9:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----