Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          gdVTb5BWpbt7xPOGdUBQ8Nklgcy+2/H2+rGIpnBVoxY=
Subject key identifier:   F4:07:05:5B:8D:75:68:2D:E6:1E:39:63:76:FF:D8:A4:61:76:26:CB
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       0194BBCE660B559F3D611A3B8521C4945BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          097D
Signing time:             Fri 31 Jan 2025 10:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:53 +0000
Files and hashes:         1: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (hash: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=)
                          2: BmpGigL7yj_vU4YrBcCEXhWHHbI.roa (hash: Ppbu0DUb3G/J7ntuuCJmNlJLWLrlVFHUquuws77rxcY=)
                          3: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: lG5/X7Z3v+uEQDMwYbbCxxyLvz50GxWGB4C6dVmGSIk=)
                          4: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (hash: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=)
                          5: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (hash: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:66:0b:55:9f:3d:61:1a:3b:85:21:c4:94:5b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Jan 31 10:00:53 2025 GMT
            Not After : Feb  1 10:00:53 2025 GMT
        Subject: CN=f407055b8d75682de61e396376ffd8a4617626cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:67:ef:d4:7f:d9:3e:c8:17:81:92:7e:f7:
                    7a:d7:0e:a8:d4:44:cf:e4:5d:55:eb:10:f1:06:b5:
                    a7:f2:3f:f7:90:0b:aa:4a:9a:bb:39:1c:71:9c:a0:
                    29:d4:cf:27:8d:02:71:69:e1:27:cf:c0:8c:3b:32:
                    0e:d8:67:44:ff:cf:18:cc:00:45:1c:2c:98:ee:23:
                    05:c6:f6:5d:29:ef:98:41:09:3c:5f:97:e9:93:9c:
                    f2:95:67:4a:ef:c0:74:f1:97:d7:d6:df:8d:f4:2c:
                    19:21:a2:5c:6b:5b:fb:18:09:94:bc:39:6b:92:92:
                    cc:68:3a:ce:3b:94:fd:05:f9:b8:7b:2a:00:a6:af:
                    47:ec:a0:72:45:47:f8:49:de:7b:81:ad:cb:b2:c2:
                    c1:4e:78:d3:92:16:b4:6b:3c:e5:d4:a1:85:55:ae:
                    6c:ed:1e:85:a3:95:49:05:5b:58:36:c1:79:a1:1a:
                    ec:b9:f4:21:61:23:a8:36:78:4e:4c:b9:0c:d0:06:
                    14:10:98:ce:ac:a4:07:d8:89:5c:32:f4:19:df:92:
                    b9:e2:16:3b:25:7f:0b:58:1d:65:5c:08:26:be:21:
                    e4:97:0e:91:04:2a:93:40:35:58:3e:23:95:06:26:
                    24:bc:97:11:bd:91:de:e7:91:82:a2:e0:37:52:3e:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:05:5B:8D:75:68:2D:E6:1E:39:63:76:FF:D8:A4:61:76:26:CB
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:b6:c2:6a:6f:1b:b5:65:c9:dd:40:7a:4d:8a:ee:0f:8e:
         ee:61:eb:ff:17:d8:e5:a9:11:d3:4e:9a:40:c7:62:84:c9:df:
         4b:38:7b:b3:7d:bd:9f:7b:0a:57:f4:19:0d:46:8d:1a:9d:52:
         84:34:a4:05:e5:68:48:1e:00:3a:53:bd:d0:09:48:4a:a7:d9:
         e0:6a:a4:b5:e7:5e:50:bb:a8:69:cf:ee:43:7b:ab:2b:f2:b2:
         41:87:1c:f9:59:c2:a8:79:a5:9d:1c:b7:84:41:2d:38:ba:93:
         15:15:ae:f7:1e:f8:fc:e5:21:6c:07:84:0f:d4:af:3a:23:a3:
         73:ed:37:da:d3:73:0a:98:80:02:d0:71:4e:e5:08:6c:b7:b0:
         81:07:d9:00:35:be:05:ad:5e:20:cd:ed:c2:42:93:cc:fa:20:
         bc:63:b9:8c:45:e9:10:95:0f:6c:a0:09:56:52:50:24:a0:57:
         6c:fb:ad:b1:e7:31:2f:97:dd:58:34:0b:61:f7:dc:d0:5b:28:
         03:ec:dc:18:82:1f:8e:cf:70:fe:19:0e:81:d3:11:21:15:9c:
         14:bd:a5:c7:28:27:55:99:b3:dc:3c:7f:d5:b4:71:22:f9:05:
         42:cd:99:32:43:1e:19:cd:71:c1:36:8a:16:86:32:e9:2f:1e:
         ed:e0:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----