Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          r6lF4+xsbmpZ+H3+bLQWKjuK/r+aBnnsdrsRZI2SG4w=
Subject key identifier:   AA:B7:91:81:51:88:BB:76:D2:A4:54:3D:1D:73:71:9C:70:DA:41:BE
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       0194BBCED49B58C4155DB682196B893F699E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          032E
Signing time:             Fri 31 Jan 2025 10:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:21 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: Qo+2JzkmCgUAVZJDfMqkdvA0CV8fSB+/8X8l17FmmbI=)
                          2: 9QHkwH3XoDFhii5_H5-wevfnn0w.roa (hash: vBY1ZnWKVkF95bYClA+BXEDvlx1Nx1rI/kqfnvMGLFw=)
                          3: NHqj8wB10WSekKQpmh-HseccI8I.roa (hash: L+izevOgWXTJAUEusaUxSyDXId3hMIswTW9GC9CMwnw=)
                          4: VDPu88hH8S8YAOXUCG9WApGM4Ak.roa (hash: 4CZLCtvGc/kQTFKa66ISm8BXViC73GORAMW68kpOvho=)
                          5: oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa (hash: AjGNR5wRMBSzjpjmL0iwZdQfVi3IKmsNzSO+kwX6G8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d4:9b:58:c4:15:5d:b6:82:19:6b:89:3f:69:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Jan 31 10:01:21 2025 GMT
            Not After : Feb  1 10:01:21 2025 GMT
        Subject: CN=aab791815188bb76d2a4543d1d73719c70da41be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:19:9f:16:3b:ff:0c:31:ef:4a:b7:40:65:
                    a4:dc:b7:77:41:d6:2b:c8:11:bc:ae:35:59:a2:7e:
                    5d:32:93:d6:6f:ca:ad:a2:7a:62:b5:1d:1a:9c:32:
                    8d:9f:2a:0c:58:3f:85:0d:2d:62:1e:1d:91:1e:da:
                    0c:cb:3c:2b:06:08:48:56:3e:82:4e:cd:62:f5:8b:
                    ea:5f:fd:85:a0:2e:a5:47:23:48:81:12:6a:16:cf:
                    47:41:ee:e1:1a:2e:e3:4d:b9:19:95:52:b1:7a:f3:
                    64:5b:8e:f4:12:95:0b:c9:6d:5e:6c:8b:06:60:e8:
                    98:db:4c:0f:8e:97:9a:71:ad:3c:c1:ab:60:d0:d9:
                    ca:94:3e:ff:2b:86:80:0f:c9:ee:d7:33:82:d2:e3:
                    d0:49:f8:ce:33:b1:5f:f3:83:b0:af:e3:c5:c3:4b:
                    e6:66:2a:6f:43:a1:b3:1d:a6:6c:55:6c:32:a9:ed:
                    3f:fa:84:30:bd:c2:c3:0b:59:c9:97:85:49:74:77:
                    1a:d2:74:b8:a6:4a:ad:19:ef:38:e7:3b:80:a6:82:
                    2e:ef:c4:17:f1:e2:cb:72:3a:5c:b5:e0:63:53:7c:
                    47:1f:a6:e5:02:16:06:d1:14:65:d8:94:6f:e2:ec:
                    24:0a:f6:17:7b:fe:a3:f7:29:27:bc:58:16:af:b3:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:91:81:51:88:BB:76:D2:A4:54:3D:1D:73:71:9C:70:DA:41:BE
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fc:05:29:5e:a2:dc:08:a6:68:8d:45:a1:c8:15:d5:de:db:
         7e:b6:27:d2:6f:c1:af:00:b6:2c:ff:67:98:df:51:b5:9e:17:
         dd:56:35:c3:e2:47:93:fe:fb:28:4e:05:e8:2c:de:e4:f9:02:
         9f:f9:d1:2b:6d:eb:57:1e:62:f7:bf:fa:bc:67:eb:40:58:f4:
         12:e6:d2:85:5c:95:60:9c:cb:ac:6a:4d:24:fb:fa:27:ef:b1:
         12:ea:d3:cb:6f:9d:65:b1:24:54:45:b9:90:cc:d1:86:af:27:
         6a:e4:13:53:98:b0:62:5c:7d:1c:d4:7a:00:91:01:e3:7a:e0:
         cb:14:72:23:8a:9d:c5:b5:d9:84:18:16:4a:52:7a:1c:e4:18:
         34:d0:fc:cb:fa:9c:84:5d:5d:57:eb:a3:f6:65:de:b7:d8:b1:
         76:e9:30:7b:1c:e8:fd:91:b1:23:7b:24:b1:db:d3:d1:1f:fc:
         b0:3c:f8:dc:3e:52:0b:26:6b:f9:6b:2d:9e:21:1e:aa:54:c8:
         c3:cf:bb:4d:3b:70:ad:30:c3:e1:06:05:fe:39:b1:88:fc:04:
         ef:40:f2:98:db:d7:b7:88:ee:18:22:93:d6:c6:9f:8b:f6:c6:
         55:5f:b9:b3:f7:55:aa:a7:8d:ef:7b:cf:88:de:9c:f0:10:39:
         ac:69:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----