Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File:                     0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier:          JZ8M3ebg7G6d43tjblw8FmmiSRXMeOtgNMwSP5MCWdk=
Subject key identifier:   62:39:B2:AF:C0:F0:6C:D5:04:20:FA:39:FD:BF:08:D7:FC:95:71:8B
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer:       /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial:       0194BD1766100FFEFD652FA7947D87DFAB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 16:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:14 +0000
Files and hashes:         1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: Elw01DdIo2bzAS0T7nj2UGpLil+gYOLP7nAyTzH4OaQ=)
                          2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=)
                          3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=)
                          4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:66:10:0f:fe:fd:65:2f:a7:94:7d:87:df:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
        Validity
            Not Before: Jan 31 16:00:14 2025 GMT
            Not After : Feb  1 16:00:14 2025 GMT
        Subject: CN=6239b2afc0f06cd50420fa39fdbf08d7fc95718b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:ba:32:c3:b5:f7:c4:10:e4:bc:9d:88:ec:
                    0b:16:64:58:ca:63:00:26:ce:36:8e:ed:af:95:2a:
                    6b:f3:7f:5d:5e:12:2e:89:b3:1a:84:9f:05:96:31:
                    13:a4:bb:ee:2f:0a:5b:4a:1a:78:87:71:d0:7f:54:
                    8b:cf:dd:83:95:fe:b0:ba:f7:60:ad:61:cb:b1:18:
                    f4:5a:e9:89:a3:e8:bf:d0:ff:91:d0:fa:fe:9b:62:
                    97:5e:34:f7:39:c6:a4:d0:49:29:68:ae:ee:17:77:
                    93:40:d0:c7:64:7a:a2:d9:91:ac:07:84:31:68:80:
                    99:94:a3:dd:1b:c7:c7:aa:24:24:5b:cf:ad:6c:c5:
                    95:22:e5:77:56:b4:94:ea:f3:86:e2:ec:e1:96:54:
                    3d:51:8a:28:92:b0:88:aa:0b:09:75:4b:cf:26:6e:
                    7f:61:17:e2:ee:06:40:b9:fb:9a:57:a0:d2:88:2b:
                    e2:dc:eb:be:9c:ac:b5:cd:59:d0:91:fc:49:56:80:
                    16:92:c1:a6:bc:5d:4b:f7:ed:17:22:dc:4d:86:26:
                    48:e2:b1:83:f3:55:f9:2f:48:8f:fb:d2:ef:ab:70:
                    13:3f:fa:4d:f7:d0:67:a7:dc:2d:78:16:84:48:f7:
                    cc:ad:06:21:cb:4e:d6:37:78:de:cd:43:03:4f:dd:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:39:B2:AF:C0:F0:6C:D5:04:20:FA:39:FD:BF:08:D7:FC:95:71:8B
            X509v3 Authority Key Identifier:
                keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:60:d5:44:67:6b:ce:e3:70:8d:0b:39:ba:16:c9:59:cc:76:
         02:4d:56:ab:18:56:1b:f4:0d:37:d0:6a:fa:87:fe:25:3a:3e:
         97:22:85:30:00:8a:d6:67:af:1f:a4:b8:c5:2d:fe:c5:23:75:
         ec:a5:ef:60:2f:e7:a7:46:a1:97:cb:e8:0f:f1:91:a3:79:b4:
         11:d9:cc:cc:e4:ae:fe:56:35:d3:0e:96:3a:0a:d6:51:3a:bb:
         8e:eb:f6:de:56:80:23:31:91:c3:91:bd:0d:49:a6:4a:b1:08:
         da:20:30:7c:a0:4d:7e:d9:2b:38:db:2b:5b:14:1b:d7:86:75:
         07:2a:ff:98:a7:8c:a9:d4:9a:f3:84:a7:10:d2:c0:94:8e:e4:
         e0:e7:13:c2:75:84:42:03:02:71:a7:b4:e6:0b:49:e4:08:09:
         20:9a:8c:b6:06:1a:a0:8a:6a:b9:25:14:cb:16:15:60:46:bf:
         67:03:2b:d7:a8:09:c7:fc:f0:b1:f5:ed:f1:2b:67:88:c5:60:
         13:f2:42:96:a5:07:12:75:70:ac:9c:11:08:a2:bc:1e:05:bf:
         87:a6:3b:29:96:ea:42:77:e4:ea:a5:07:88:52:75:2a:a4:12:
         5c:9b:18:95:9a:f3:e5:f6:b2:ed:5a:12:53:96:3d:63:4a:1c:
         61:ee:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----