Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
File:                     SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json)
Hash identifier:          znPetah1H7VjiC69EFXhiE4LC6wIZDQPSRMmb5O9pLA=
Subject key identifier:   D7:7C:E6:EF:4A:AA:31:49:28:C8:3A:BB:9D:57:1A:5A:8B:8F:8F:EB
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Certificate issuer:       /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial:       0194BCAA2B20FF331886B36A8110B3693144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
Manifest number:          0E99
Signing time:             Fri 31 Jan 2025 14:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:56 +0000
Files and hashes:         1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=)
                          2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=)
                          3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=)
                          4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=)
                          5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: exeecs42dG1s62yCPqydQ9Wc/oJ1gOOQbSl57fJrilI=)
                          6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=)
                          7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=)
                          8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=)
                          9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=)
                          10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:2b:20:ff:33:18:86:b3:6a:81:10:b3:69:31:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
        Validity
            Not Before: Jan 31 14:00:56 2025 GMT
            Not After : Feb  1 14:00:56 2025 GMT
        Subject: CN=d77ce6ef4aaa314928c83abb9d571a5a8b8f8feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:96:d4:ce:0c:92:2d:42:b8:06:6d:7c:9e:
                    6b:10:a7:d7:f9:f6:1c:1b:da:12:4f:87:a3:d2:21:
                    59:ec:77:65:67:9f:15:9c:78:a6:9d:f8:18:ac:91:
                    1e:b1:75:de:e5:05:f7:66:e3:03:5f:3e:dc:cd:d8:
                    7e:fa:32:46:ac:6a:64:e5:4b:b2:00:68:2c:51:64:
                    99:35:bb:ba:92:39:ff:e1:bc:d4:50:01:ad:05:b3:
                    75:6c:fa:8e:1e:ef:2b:bd:ba:72:6d:56:40:04:18:
                    e1:a0:25:b9:9b:ee:d9:22:49:c9:5a:45:94:fa:3e:
                    75:e6:a5:b6:e9:74:20:26:6b:47:7e:7c:74:44:ce:
                    03:b7:ca:e4:22:e3:62:63:11:07:9a:96:0b:f9:f0:
                    bb:13:3e:c4:c1:fc:92:ef:6c:76:d5:da:74:39:ae:
                    3d:60:10:82:a0:ae:6a:02:31:8c:7d:1e:91:1f:a1:
                    91:2a:3c:84:0e:3f:39:b7:bc:9d:6c:48:36:b5:86:
                    b5:37:ab:fb:c4:41:5a:68:f5:40:9b:f8:68:6c:8a:
                    85:a1:14:fe:c7:2e:22:69:b0:d0:9b:ee:db:d3:b3:
                    42:04:b0:94:b4:47:e0:5c:01:c8:12:a2:67:55:ae:
                    44:72:b2:e1:c1:2b:47:e2:14:78:c1:f3:d6:21:ee:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:E6:EF:4A:AA:31:49:28:C8:3A:BB:9D:57:1A:5A:8B:8F:8F:EB
            X509v3 Authority Key Identifier:
                keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:27:f8:11:1d:98:6c:75:6d:fb:8b:3f:59:e8:d4:f9:e7:
         94:3c:ec:57:c3:f8:53:01:bb:d4:47:be:47:5b:19:c3:a6:58:
         b4:9e:d9:8d:78:31:96:e3:8a:74:1a:f6:96:68:d7:44:f7:c1:
         af:cb:9a:f4:66:df:cb:e9:8e:38:96:4c:ec:d1:90:c5:9f:cf:
         78:3a:a9:cb:d5:da:98:07:4b:18:af:2f:ca:b7:3b:c3:1a:e4:
         a1:ac:dc:0e:16:a8:c1:a2:c3:04:eb:a4:f7:eb:24:d7:e9:ad:
         bc:0c:82:74:9b:27:f0:e9:9b:27:fe:3d:3d:55:49:71:19:41:
         d1:76:0a:f8:47:2b:55:03:25:a9:b7:99:f1:3b:44:a1:11:df:
         1b:ae:9d:4e:d6:16:6c:53:95:5d:ff:a9:08:84:24:15:c2:ee:
         cd:3e:d6:08:2c:04:c3:3f:41:5c:5f:48:96:27:87:5b:81:70:
         e7:98:eb:74:63:96:ab:8c:53:07:3a:50:93:cb:bb:28:9a:6b:
         fc:e4:31:22:89:8d:19:54:6c:6a:49:ea:a5:9a:83:80:eb:1f:
         97:b2:7c:3a:2c:67:0b:17:63:a3:52:ed:59:b8:b2:a3:49:92:
         95:5b:93:9a:6d:c7:bd:73:26:ad:02:bf:a1:47:02:38:36:ce:
         1c:3e:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----