Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          i3mWGocJMvA674BHodhPVXWfCEflYfvTr0FatFpZwpw=
Subject key identifier:   94:45:B4:9F:4E:4A:2B:EC:2D:60:BC:51:3A:6D:2D:1F:90:42:D5:A2
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       0194BD4E571717B585FCEEF29C0FCF58F783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 17:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:15 +0000
Files and hashes:         1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: csSbzJ7LFpC+zIsMc+W7MSB+snBzuI5qe+K2BEZfI1E=)
                          2: VThOfYn2yicDk7nCFvApHsO86Wg.roa (hash: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=)
                          3: VxDJhuHNl_sc9nt8eTGT8RRIIUk.roa (hash: FA06HLxFPxj5My9knQmWVdx/O5va1zQxvww4muwlGAw=)
                          4: YPZX0HGNcy7fuonRciJjzr0LELg.roa (hash: KklsaD6L02aKBxwsHKKUSkABYQGV+6RasQceYPMlPew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:57:17:17:b5:85:fc:ee:f2:9c:0f:cf:58:f7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Jan 31 17:00:15 2025 GMT
            Not After : Feb  1 17:00:15 2025 GMT
        Subject: CN=9445b49f4e4a2bec2d60bc513a6d2d1f9042d5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:ef:17:7f:dc:50:94:1d:ce:20:7b:36:bc:
                    57:b3:ea:19:8a:5e:fa:26:0c:79:fa:d6:95:3d:17:
                    9c:a4:2f:92:b3:da:78:7f:d3:7b:c6:7a:62:9d:48:
                    cf:00:a6:67:b8:4e:2f:b5:01:e3:3b:0c:2c:6b:a2:
                    8f:14:bd:47:1c:7e:dc:3e:d3:c8:11:b5:01:8e:b1:
                    b8:28:5a:a4:ac:69:a0:4a:bc:e4:5c:69:73:8e:1e:
                    89:02:08:f9:42:21:1b:98:c9:ab:ac:a7:a3:e9:58:
                    5c:3b:7f:a5:be:d1:b2:6f:4f:38:c8:0a:07:63:46:
                    19:2d:7d:d9:c3:f4:12:94:4a:46:65:89:0a:6d:c0:
                    2b:3a:7f:00:5d:5a:85:f6:59:e6:e6:75:c2:ae:39:
                    58:4b:8f:ff:54:43:c0:4b:e5:6f:fa:9a:1e:b4:79:
                    bd:54:80:7c:93:4d:3b:d7:f5:53:c8:b9:c8:b3:45:
                    74:a8:4d:82:31:69:26:ce:13:45:b7:fd:b6:ca:0f:
                    29:b6:53:dc:c7:6d:66:dd:03:c5:ea:66:11:75:ed:
                    2d:62:e7:4b:f4:73:01:4f:36:64:ef:af:58:6f:bc:
                    f7:fd:81:83:50:5f:66:96:84:8b:b0:b5:22:f7:7b:
                    c3:90:04:49:61:bf:92:cd:c3:94:70:28:79:61:29:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:45:B4:9F:4E:4A:2B:EC:2D:60:BC:51:3A:6D:2D:1F:90:42:D5:A2
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:d0:93:ee:74:01:e3:79:1a:4d:ea:99:65:39:da:dd:a2:
         fb:6d:7a:3f:4f:51:a4:78:36:49:e1:52:e7:f6:01:d5:df:40:
         f9:20:cd:12:13:73:82:77:2f:d7:56:28:d4:15:d2:64:87:93:
         05:87:4a:09:df:03:e2:42:dd:7d:64:b9:01:d3:8e:42:48:40:
         27:ec:c5:48:5d:bd:08:c2:f2:f1:53:3d:c8:07:74:a7:31:48:
         5a:85:22:b9:b5:57:64:73:b0:53:5f:ea:98:68:3b:91:54:40:
         7e:9a:bc:d8:8e:54:b4:8f:8d:29:66:cf:42:67:66:7b:fa:15:
         af:8b:dd:23:d8:ef:9c:27:9f:18:5e:96:4b:17:a2:a3:b2:ff:
         88:61:98:3d:93:f3:30:73:77:2c:45:d8:4a:65:f4:90:2f:2d:
         10:98:e0:0f:49:f4:33:05:9e:08:e9:a9:73:06:b7:3c:93:e7:
         21:c7:da:f0:a9:ea:d4:0e:30:97:a8:cc:39:ec:c4:cc:dc:e9:
         61:f4:4c:cd:9b:11:6c:e5:da:54:57:9a:9e:10:2a:32:54:c0:
         3c:5f:1b:0f:2b:45:e7:1b:82:12:c2:14:a2:99:02:e1:90:17:
         88:5d:67:a1:ac:9b:52:f4:0b:14:3a:0b:19:ba:df:92:19:08:
         a6:71:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----