Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
File:                     tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json)
Hash identifier:          uXc6UYZlGDpoXRNtlpE3b4DzVs/RTqf2oQkcYUBg0T0=
Subject key identifier:   39:E8:31:05:E4:09:88:8F:09:2F:D9:4E:9C:66:CB:B7:C3:0A:CA:47
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Certificate issuer:       /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial:       0194BBCDDC9597BE453F513A5B22FE1967E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 10:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:18 +0000
Files and hashes:         1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=)
                          2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=)
                          3: 7Q9gLwoSUvmWbh9pchcvFCnXBMI.roa (hash: OqWyCVxCH/ByBizomU3lyw35etS/Okp+27Pxn29bVl8=)
                          4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=)
                          5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=)
                          6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=)
                          7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=)
                          8: hpi8FGXUqFwvyzbspUBbXSR-u5E.roa (hash: D+oqZ2gXKRa2ovM6yrY+DCG9y6qbKxbt+6ZJu7cuVlg=)
                          9: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: Msn5F6gya02nmyqLiXr5hJAP/R8FL5ctUDxVTVnvY0E=)
                          10: vqcl3DQ1E1K3lnM1bs8fqqNI4EQ.roa (hash: S9QBaWkrI9BQviKt66y8uBb8+Y6dNwU4YKfcgaHW4SE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:dc:95:97:be:45:3f:51:3a:5b:22:fe:19:67:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
        Validity
            Not Before: Jan 31 10:00:18 2025 GMT
            Not After : Feb  1 10:00:18 2025 GMT
        Subject: CN=39e83105e409888f092fd94e9c66cbb7c30aca47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:30:e9:33:ff:0c:ca:48:22:ab:fd:a5:d1:
                    15:1f:ed:0f:e0:85:fa:b7:be:1a:67:b0:ff:0b:06:
                    0b:27:ad:e0:1f:31:0d:55:79:fe:3d:e8:95:71:a2:
                    14:8b:72:04:81:20:17:6a:7f:71:40:bf:12:93:46:
                    0e:e9:e3:7b:9a:4e:b1:56:f7:c1:61:b9:2b:f6:c7:
                    4b:fb:a7:05:e7:c7:59:3a:0e:34:38:7f:5e:26:cf:
                    3e:30:bc:7b:b7:73:f7:37:c7:d7:22:d6:6d:50:fa:
                    16:b7:7d:7b:f5:a6:de:96:e5:a7:46:e5:71:8d:78:
                    fd:6e:77:27:ce:87:f1:46:d5:94:3d:eb:eb:83:ad:
                    0c:3b:49:80:88:1e:f3:2a:81:b8:b1:94:f3:e2:16:
                    5a:06:fc:85:c3:97:1d:f5:5e:27:72:e7:ea:3d:4e:
                    20:1e:36:a3:13:0a:e5:bf:92:77:06:ab:5a:03:4a:
                    a3:79:07:57:03:d9:36:18:74:21:8c:67:3d:b2:f7:
                    65:a2:d4:e3:2d:9a:48:94:1c:1b:ae:99:4d:1a:ea:
                    4c:6d:3b:6b:f6:c2:b5:ef:eb:54:78:f3:a9:9f:48:
                    36:75:ef:1e:44:30:b2:25:87:ba:a8:a8:31:e8:c9:
                    46:c8:2d:bc:31:c5:67:8e:48:1f:a7:22:00:9b:b2:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:31:05:E4:09:88:8F:09:2F:D9:4E:9C:66:CB:B7:C3:0A:CA:47
            X509v3 Authority Key Identifier:
                keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c5:71:39:f7:06:75:2a:27:13:76:b3:a9:da:63:ba:30:d1:
         c4:61:9f:bb:20:74:1c:5a:c9:b9:fc:d7:c5:d0:04:ad:46:72:
         96:94:32:18:ae:61:39:6c:9a:b0:31:66:28:60:2d:64:75:0e:
         75:75:d8:07:e3:62:62:bf:59:9d:08:d2:95:4e:b6:e4:5e:ea:
         ba:f9:d9:08:85:f1:54:80:32:2a:27:9d:3e:c6:1b:cd:be:f1:
         dd:44:2c:2c:3a:65:92:f0:7f:c2:31:bb:e8:78:b1:50:63:57:
         bb:37:af:fe:ac:ad:fa:cf:72:8e:f9:49:7d:30:6d:c5:76:74:
         87:46:cb:4c:c0:e1:f1:b4:36:fe:ea:5f:41:f3:bf:6c:23:82:
         a0:97:c7:46:44:0b:82:30:88:51:5e:4b:1a:f5:f8:24:ab:df:
         42:93:0f:a1:7f:8b:a9:a6:d3:4f:4e:e7:1a:12:ba:0d:50:ff:
         9f:ed:1d:6b:54:6c:ed:4a:03:ba:d5:74:a2:54:c7:e9:fa:31:
         22:51:34:36:a9:09:a0:1e:fe:ec:39:b3:41:c1:6c:63:a3:97:
         66:d6:c5:af:06:3d:27:f2:1d:22:74:90:43:94:c7:c4:ad:f3:
         1b:3f:7e:0f:a8:bf:14:1b:9b:86:ef:24:d4:c6:6e:93:d2:54:
         d5:e1:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----