Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File:                     xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier:          6nBSIZZzw9A4OdJfQ3QB8NZm20EFUgcpVU3/cEZEyb4=
Subject key identifier:   98:77:93:DF:57:ED:C9:19:A8:06:C2:76:A0:69:7E:DE:79:EC:FB:08
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer:       /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial:       0194BD85782D3B565D08F333A5AEC317608A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number:          138D
Signing time:             Fri 31 Jan 2025 18:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:28 +0000
Files and hashes:         1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
                          2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
                          3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
                          4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
                          5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
                          6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
                          7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
                          8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: 1sMONkWkFakMRgJNUvkg5O+RoOM2wBAue9u/n8xV0hE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:78:2d:3b:56:5d:08:f3:33:a5:ae:c3:17:60:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
        Validity
            Not Before: Jan 31 18:00:28 2025 GMT
            Not After : Feb  1 18:00:28 2025 GMT
        Subject: CN=987793df57edc919a806c276a0697ede79ecfb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:32:75:1e:8a:cb:83:4b:d0:a7:05:39:5e:
                    c1:82:25:ff:f4:26:70:90:b1:a4:ed:c2:e1:89:21:
                    46:ce:2e:aa:c2:a1:a2:13:b5:c3:3e:95:fb:2b:f2:
                    6b:f4:14:10:1c:66:de:bd:b9:38:0f:3f:9b:ca:85:
                    9e:92:3f:21:c9:14:4f:dc:f3:fc:f5:d5:31:a4:9a:
                    7c:40:7d:b8:96:16:58:15:78:39:8b:0d:3e:ee:f6:
                    7f:e5:37:70:9f:c5:f5:0c:e0:8e:b0:73:94:5b:e8:
                    35:63:5e:80:26:c9:a6:9b:ec:e9:32:52:ad:d8:56:
                    7b:5f:56:e3:25:db:96:b3:ca:e6:7e:ac:79:c9:af:
                    03:5c:22:d6:0e:65:ca:a2:23:44:72:b8:25:20:63:
                    a8:0e:09:03:bc:75:8d:90:05:96:7c:94:c8:e9:ce:
                    00:ed:aa:ed:03:44:f5:05:2f:cb:19:a9:46:73:de:
                    da:c3:34:bb:8f:dd:6d:e4:e0:fa:1c:e6:8d:43:2c:
                    73:85:a6:98:d1:2b:55:e7:f1:9c:43:dc:9d:13:f7:
                    4a:b4:f0:94:0c:49:8c:67:ae:dc:e7:0e:ed:06:a5:
                    cd:de:cb:06:48:5a:4c:31:00:e9:03:e5:e5:eb:54:
                    0d:6b:69:5f:c0:e9:54:59:ad:d1:51:7c:66:1d:94:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:77:93:DF:57:ED:C9:19:A8:06:C2:76:A0:69:7E:DE:79:EC:FB:08
            X509v3 Authority Key Identifier:
                keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:56:46:e4:ed:89:d5:03:51:46:92:3f:a9:aa:d3:5c:a3:
         b4:6e:26:64:7c:88:f5:a1:82:0c:75:2d:26:d8:64:05:78:cd:
         c7:e5:3f:f4:ce:9e:da:c1:d4:d3:9b:bd:d6:27:e7:08:78:8a:
         fe:ad:fd:f1:4f:d1:a4:6b:4a:aa:10:f6:11:0f:e2:fa:73:d7:
         e2:39:9a:22:1c:13:1d:39:08:56:b7:03:82:8b:e9:7f:f3:fa:
         08:14:62:4f:e7:ed:3e:8b:c1:88:51:07:93:52:6b:3d:3f:fc:
         f4:69:9d:33:d7:f4:30:92:b3:24:bb:1e:7f:0b:62:e8:c2:4f:
         1a:b0:49:2b:9d:a1:d1:76:66:af:a9:ba:05:27:73:e4:17:f4:
         de:03:66:27:9a:31:1e:a2:f7:f0:b3:66:63:cb:5b:09:6d:49:
         a2:f0:f8:e2:e0:71:a9:19:e5:1b:7e:93:f5:5a:5b:0b:c3:8d:
         6f:56:69:c9:87:b5:45:94:06:61:25:bd:76:87:c4:3a:0f:c7:
         6b:1c:c5:b0:db:81:92:88:53:8a:b8:69:79:cc:33:d0:26:15:
         0c:f3:ad:c3:ba:ad:13:ab:93:9b:ca:eb:24:33:39:b3:40:e2:
         ec:b3:ea:32:67:61:1a:5a:b0:0d:6e:59:9f:01:70:6c:33:0f:
         ab:6c:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----