Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          uuXRH41QjPLfuOCChCv6GySuFZ+2/GZ6MdhQjmrJqtI=
Subject key identifier:   18:41:55:AC:F0:A5:F6:D2:7F:80:AA:0E:2D:BA:9C:C2:9C:E3:F5:2A
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       0194BCA9B41CF5E4749C397569764C764A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          0BBD
Signing time:             Fri 31 Jan 2025 14:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:25 +0000
Files and hashes:         1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: 3VbFr2Mi4TLPs99JrcKsBA5zxZwAi352pgmnHo1dszU=)
                          3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
                          4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b4:1c:f5:e4:74:9c:39:75:69:76:4c:76:4a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Jan 31 14:00:25 2025 GMT
            Not After : Feb  1 14:00:25 2025 GMT
        Subject: CN=184155acf0a5f6d27f80aa0e2dba9cc29ce3f52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:b1:a0:b7:6c:f8:f9:41:a0:d2:c7:da:94:
                    ea:d0:8f:d0:8f:5e:b4:90:39:56:fc:06:91:ee:2b:
                    1c:62:e9:85:4e:13:a3:9e:9d:60:e0:e0:83:73:c1:
                    f5:63:3c:ba:d4:d9:a8:c2:c9:61:5a:27:8b:bc:6a:
                    55:d8:6b:ef:d4:80:e4:95:8f:c8:cf:4b:a6:f6:e6:
                    e9:61:ea:56:6b:69:80:0f:4c:10:0d:7c:8b:1d:8f:
                    54:12:57:5a:fd:7b:7e:4b:3d:05:db:d4:75:2b:f9:
                    eb:70:f2:2b:d4:27:49:6d:99:a9:91:49:c9:a0:f7:
                    2b:ba:77:69:2e:8b:36:27:36:51:74:d1:b9:cb:df:
                    25:39:16:db:a5:6e:fe:c9:29:b6:d4:3f:f7:35:99:
                    f2:0f:fe:43:31:13:37:0a:8d:c5:5c:e8:e3:73:ce:
                    11:26:94:89:29:21:d3:53:25:8c:80:65:b4:5c:dc:
                    de:3b:45:cb:c5:37:fc:a6:8c:cc:2e:59:1d:33:09:
                    ee:05:a1:e4:31:b6:aa:a6:b5:08:8a:45:6b:38:c5:
                    be:08:39:03:46:8f:7f:51:67:31:71:17:c1:a0:f1:
                    ae:d9:7b:f3:c3:6d:f6:6b:89:58:b3:18:f8:31:67:
                    3d:3c:a2:87:0a:9f:2d:3f:8a:6e:48:c3:69:3d:ba:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:55:AC:F0:A5:F6:D2:7F:80:AA:0E:2D:BA:9C:C2:9C:E3:F5:2A
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:70:45:19:7f:b2:67:68:7f:c0:60:71:99:9b:1f:9b:54:94:
         bb:80:31:5b:19:52:2b:51:51:a8:1d:0c:b4:9d:6d:a0:26:90:
         88:8b:cb:23:69:74:bb:da:d3:de:80:b1:d3:55:64:49:9d:62:
         04:1b:11:ec:77:17:c8:1d:7b:c4:86:89:d1:28:9d:1f:98:04:
         3e:f5:13:61:9c:c1:14:de:b0:e1:58:f6:e3:e6:e7:9f:8c:47:
         0a:7a:30:17:4d:53:62:2c:cc:2b:8b:66:22:e0:fe:d5:a7:5d:
         48:dd:2c:ac:33:aa:1e:be:af:98:a0:27:62:8e:d5:d3:03:0c:
         b8:6b:e8:08:aa:7f:62:aa:89:02:21:0f:42:e6:fe:b2:43:44:
         22:43:aa:27:79:2c:d9:cc:da:04:46:8d:3b:8a:01:ed:67:c2:
         17:38:49:03:08:95:ac:df:81:6d:8b:79:bf:9d:7a:d5:99:25:
         3c:63:b4:0d:44:17:19:93:0d:fd:8a:2e:60:03:62:a4:96:81:
         97:db:84:e9:0b:50:1f:91:94:fd:5a:ce:1f:f5:aa:7a:ed:34:
         fc:20:57:a8:57:bb:72:0b:5d:ff:0f:4f:4d:34:1a:27:de:50:
         9c:3d:3d:cf:60:73:49:4d:20:90:8b:47:ef:ae:77:a2:e3:16:
         6f:54:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----