Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File:                     eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier:          mhO9XcnynccK10yYechT/a0GoZ02iP2OwDykMsU4s6c=
Subject key identifier:   EE:33:4A:A1:33:21:31:E8:BD:2E:C5:5B:F8:E6:DA:66:92:BB:F1:03
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       0194BD4EAF2597490D6DC4BBDF6E9ECB563B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 17:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:37 +0000
Files and hashes:         1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
                          2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
                          3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
                          4: RG8-5DCoahn6GmJj1z8ZOudD3Ko.roa (hash: U4VRzrFwaz+IBjse4+JgnquYkIHdetXrDGCWv7xW5ao=)
                          5: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
                          6: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: bLZy8svaZFIqb+9psLG25mEBAYDFXAjifqkBCZG4AGk=)
                          7: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
                          8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:af:25:97:49:0d:6d:c4:bb:df:6e:9e:cb:56:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: Jan 31 17:00:37 2025 GMT
            Not After : Feb  1 17:00:37 2025 GMT
        Subject: CN=ee334aa1332131e8bd2ec55bf8e6da6692bbf103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:16:c0:a9:71:0f:3b:04:5d:78:b4:0b:46:
                    1a:58:e2:ed:07:55:60:68:a1:58:59:0c:46:53:28:
                    f9:60:c3:d7:3e:68:92:23:e6:03:50:40:be:b0:5a:
                    8c:a3:29:fb:75:b1:d4:c4:24:24:83:74:02:35:2a:
                    d4:7e:f3:dd:af:51:75:bb:25:07:5c:65:2e:65:af:
                    11:ae:ff:c6:2a:ad:dc:9c:98:1c:fa:16:68:c5:8f:
                    18:44:0c:c8:eb:a8:25:47:e1:2f:05:28:af:c2:ca:
                    dd:fe:8d:f4:1d:40:63:0e:98:a6:05:32:56:6f:92:
                    79:dd:e4:a7:4b:86:b4:96:d0:39:19:dd:15:f8:84:
                    2f:68:db:bf:f7:5c:56:38:07:74:c1:37:63:15:b3:
                    d4:dd:13:a0:40:ba:e5:9e:39:9a:03:74:a7:31:ed:
                    61:71:57:dc:df:d2:67:58:d8:8c:a3:84:4d:ca:68:
                    2e:17:ff:d8:f0:8f:80:00:e2:51:4d:38:d2:65:74:
                    b7:ae:ae:11:e5:03:a4:23:e4:3f:10:6e:e2:2f:9c:
                    dc:e8:0d:86:02:8a:ed:0c:17:1f:2c:de:e6:09:06:
                    ab:9f:40:a0:bf:18:55:1e:6c:c4:01:55:e9:a7:be:
                    c4:3b:15:ae:33:03:b1:62:97:f1:a9:90:40:9a:64:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:33:4A:A1:33:21:31:E8:BD:2E:C5:5B:F8:E6:DA:66:92:BB:F1:03
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:59:8b:3e:bd:3c:32:1b:fd:84:6c:81:53:9d:5b:86:0b:5a:
         38:a4:3b:40:4b:3c:b9:9a:60:bc:40:fa:b4:b0:86:45:2a:64:
         5f:1c:6b:49:f6:f7:0a:63:7d:20:01:02:c1:38:52:83:1d:c6:
         0d:69:bb:6e:8b:37:91:66:b1:16:35:9a:46:c8:40:83:f1:2d:
         6a:78:fa:7b:d7:70:63:a9:8a:fd:4c:e3:05:9b:55:85:61:5f:
         e4:0b:d0:e1:f7:54:e5:b9:e5:8e:ca:c5:d2:4b:04:1c:42:6b:
         0c:f5:2d:04:42:ee:ae:07:13:ef:b7:8e:80:5e:71:35:0f:72:
         8f:b7:ec:f1:22:af:12:fb:6b:e4:d2:45:a2:18:92:41:8f:6b:
         1c:0d:11:8b:cc:88:3c:69:65:bc:b4:e2:92:bc:7e:e9:21:d8:
         bb:d8:7c:b7:18:b0:31:63:3f:76:a8:7c:92:99:80:47:e4:f7:
         b9:21:83:ca:f4:01:17:7c:a1:cb:7d:2b:f0:47:4d:68:c1:bc:
         4d:69:92:bc:ba:3d:0b:dd:a3:a9:bd:9b:af:ad:cc:b8:c9:16:
         f6:7b:de:7e:16:3c:6c:fa:76:b8:80:30:f7:11:82:a8:da:7c:
         79:c1:93:88:ec:82:7c:18:3b:3a:f4:2e:db:fa:97:22:c6:a2:
         5e:8d:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----