Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File:                     1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier:          ZK53bqvPQRN6JXpZn3pWtv0UARGd9Qx5Y6qz9vs87hQ=
Subject key identifier:   A0:5C:99:79:9B:F4:2E:BC:42:EB:26:9F:0E:AB:FB:8C:3D:0C:EF:3A
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer:       /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial:       0194BBCED46093D3A8573EC7A6620F6F7920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number:          1252
Signing time:             Fri 31 Jan 2025 10:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:21 +0000
Files and hashes:         1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: ku0YKc/Pizq4GE+KXO/+JHdxG4aq7b0RdVmUWdvJ4SQ=)
                          2: Dvyh8slt0GhthdsGUd3QaM0fXkA.roa (hash: r3vo3FWTvwHopH8laEenTu+4YFKUeiwfnrrZyE9YVkA=)
                          3: XqND0wzVKfotYYo_bAK0zCAmMH4.roa (hash: +F+ctZwnM5x7VbTPr/m6vshTxzt2jT9bJAwza0v8PjU=)
                          4: ei-lhbSyA6LHM30pnoTc676sVOk.roa (hash: BJvZcqOLIL3sVAhna5EPTZoiTPtvfxYPfeKNrqGIDHA=)
                          5: vTpbvCLw317pUWZPp8_hDkh88VE.roa (hash: Xc88zcdf1KorCO6RA2gqcBm66DJNRYMneNP18O1Fg04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d4:60:93:d3:a8:57:3e:c7:a6:62:0f:6f:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
        Validity
            Not Before: Jan 31 10:01:21 2025 GMT
            Not After : Feb  1 10:01:21 2025 GMT
        Subject: CN=a05c99799bf42ebc42eb269f0eabfb8c3d0cef3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:62:ef:7a:f2:73:87:d7:bb:b7:b1:b4:02:
                    06:d0:f3:e2:cc:e7:0f:eb:9e:6b:5b:ca:62:b3:7a:
                    97:8e:ce:65:07:1a:c5:09:35:b1:df:b5:02:bb:59:
                    60:d0:01:97:cc:ac:f7:00:2e:d2:5a:33:17:d3:5a:
                    fc:44:7a:b7:5f:f7:f4:5e:e1:cb:49:fa:84:27:38:
                    92:b4:3a:6c:fa:9e:10:e8:6c:f4:79:f9:52:86:91:
                    85:0f:26:5d:da:50:9e:e8:ab:94:46:cb:0e:04:b1:
                    5b:20:9e:4f:92:57:ae:76:0e:26:63:38:62:ec:b9:
                    96:79:4c:8f:f4:fa:29:82:b6:74:67:26:c7:13:c6:
                    bf:53:4d:d2:3e:9e:30:e9:c8:cd:0c:7a:2b:c8:10:
                    bf:86:f4:8c:e1:39:63:29:5b:9e:4e:b8:c2:63:94:
                    af:77:3e:a0:93:62:55:3f:7a:c4:46:c1:f5:d2:93:
                    54:e1:23:39:b0:38:5a:41:66:5c:25:f0:44:af:ed:
                    84:cd:05:dd:be:5a:57:ca:3d:a9:c5:e4:46:1a:0e:
                    a8:5e:cc:95:4d:bd:90:34:7c:d5:ef:5a:b7:04:8b:
                    30:c9:ea:f5:01:79:24:25:39:8f:5b:10:ab:2f:85:
                    b7:fb:86:01:ee:10:62:67:36:50:32:40:f1:0a:25:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5C:99:79:9B:F4:2E:BC:42:EB:26:9F:0E:AB:FB:8C:3D:0C:EF:3A
            X509v3 Authority Key Identifier:
                keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:5d:52:b6:04:a5:eb:0c:b9:81:67:ba:11:22:47:c4:ff:
         a8:79:a8:82:c4:1b:0c:33:42:d9:33:d6:1a:fe:80:69:70:42:
         f0:00:c2:2e:11:7e:76:66:ff:b7:d0:67:0e:82:6c:62:11:ed:
         f6:81:de:75:50:89:99:07:e5:7c:36:53:ad:06:0c:5f:55:5f:
         04:c4:78:d7:8b:72:91:ed:48:59:ba:0a:47:19:1e:41:7a:55:
         7c:f4:c6:e1:1b:9e:41:75:2e:0e:d7:24:71:8c:68:a2:5b:10:
         1e:58:c3:15:7d:9e:93:82:ff:41:33:06:04:a8:a2:93:39:4c:
         03:18:35:c1:01:08:87:17:1d:42:4e:59:89:fd:81:f8:de:c0:
         da:bf:44:1a:41:18:3e:f7:e0:f9:bc:d6:24:df:bc:37:3e:4b:
         c2:ad:c2:9e:d1:95:29:b8:3b:4c:f1:e9:8f:fa:cf:85:5c:40:
         08:78:eb:95:64:d8:29:a8:37:3d:e7:f2:c7:ff:94:3c:2f:a5:
         af:25:7f:1d:6a:61:4d:95:de:cd:a8:cd:c0:cf:dd:ae:e9:c7:
         2c:07:23:c3:6b:e8:ed:64:01:70:e5:c2:35:88:c4:b9:31:79:
         aa:79:d5:2f:43:d3:32:79:25:05:59:19:be:25:cb:9a:fc:75:
         c9:50:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----