Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File:                     ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier:          ZktLw8dUJhNcrXaixMUDXMwdUXYNVEa8SLHnzp0h1TE=
Subject key identifier:   F9:E6:A1:C9:D9:58:80:55:EE:EE:0A:FE:2E:B9:0C:88:78:ED:DA:A9
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       0194BD8583E50F011C8B86C79717FC998FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 18:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:31 +0000
Files and hashes:         1: 0HtxlG1tnNzIep81031kd9p-fBw.roa (hash: OXzBPa2feSryqGHpXn/FEvG/w29ffxoaGIUchPvm3mk=)
                          2: 15E544iqbijbzQkYAdS47aYrD9A.roa (hash: UqW9jr3a9GHG7Uy8FuE2NGM92ysT2U6k57t/AfdIbps=)
                          3: DIg21dc1dVm_1EL8Uz7ZqrMj12U.roa (hash: j71JN0QzxLq1nQDYGrddtXWmn2JSxcJYC6OlLCXnmhY=)
                          4: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (hash: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=)
                          5: QeYOzxISXgl6M7OixDgTpfZERu4.roa (hash: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=)
                          6: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: wvmt4tyesd621ubTmbhk22aOPNDW/gj4YUhl9sEyoW8=)
                          7: eemUGRUYW7MNIIBVrAM7WAtHk60.roa (hash: SXzbJeZMYQE3HuAfnB9DA2zo/eUl42o9VNZpCcIkC3Q=)
                          8: iVpmbRMejTGUfDF-Oj_sVv26rNM.roa (hash: 1p8ViB52qnwGOZfoqxvFyvMaRfbwGTRlAo1t3TSQgzY=)
                          9: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (hash: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=)
                          10: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (hash: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=)
                          11: xHPbbeon1SNsE_0gmuT8lFya0kY.roa (hash: m7FtBUaCPAlNvC/LFbXZEFv5bG9Pb/Vc9bKRiuxNTq8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:83:e5:0f:01:1c:8b:86:c7:97:17:fc:99:8f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Jan 31 18:00:31 2025 GMT
            Not After : Feb  1 18:00:31 2025 GMT
        Subject: CN=f9e6a1c9d9588055eeee0afe2eb90c8878eddaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:16:ec:08:6e:12:0e:1e:5f:d6:80:d6:8f:
                    62:b5:05:ac:f9:3c:e4:b3:4e:d9:49:86:33:01:02:
                    99:07:fa:0b:08:dd:18:30:63:ce:b3:ca:35:f1:aa:
                    55:bd:d8:41:a2:23:4c:aa:d7:10:bb:06:79:98:9a:
                    30:5e:c3:12:e6:b9:90:11:c6:a8:89:61:b7:9d:85:
                    45:b5:2a:92:c6:fb:bc:10:fb:96:32:63:eb:b8:2a:
                    04:a7:63:26:59:f5:f0:c1:64:ba:2b:e3:c2:c7:78:
                    02:d0:73:42:b5:9f:c2:09:ca:64:b0:5e:ce:4f:a8:
                    51:c1:8d:76:92:1d:08:da:99:92:ee:dd:84:32:1c:
                    f0:5f:fd:97:28:f2:89:2a:9c:cd:07:8f:9f:c6:ba:
                    a4:27:cc:fc:d2:a3:b6:08:21:0e:09:c4:20:13:89:
                    03:83:84:e4:48:7c:53:0d:af:12:9f:48:01:26:1d:
                    1b:59:06:b7:e5:e8:bc:88:9c:c0:ae:21:1f:65:76:
                    56:3c:4f:ce:4a:26:e7:80:77:b6:9c:73:4c:ee:c7:
                    c7:d6:46:c4:ae:a0:39:21:8d:96:d1:1f:c3:9c:21:
                    c2:26:6e:79:22:b3:de:31:67:be:ce:78:94:7d:fb:
                    01:44:5b:70:11:e4:3d:78:de:20:a2:85:35:f8:7e:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E6:A1:C9:D9:58:80:55:EE:EE:0A:FE:2E:B9:0C:88:78:ED:DA:A9
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:06:1c:49:e9:30:53:6c:15:72:f2:75:e0:21:0a:fe:0a:33:
         80:da:d6:88:1a:e9:31:30:4a:fc:d2:91:ce:bb:e4:b7:46:67:
         d8:bb:19:1b:14:c2:98:f4:79:f2:1a:0e:f9:26:65:56:64:17:
         1f:45:13:e4:54:1c:37:6c:76:25:97:69:bb:73:38:ee:6d:59:
         40:68:04:12:78:c8:de:69:52:97:69:80:1d:5f:3e:bb:65:25:
         39:22:72:84:cf:ea:cb:1b:13:61:d0:98:cf:2f:34:07:0f:f3:
         30:f9:e0:b5:c4:5c:bc:c5:17:6e:07:6a:86:8a:d4:bd:59:3c:
         e2:d2:d0:3a:2e:26:fb:a4:ec:a2:34:70:74:85:6f:d6:5e:cd:
         bb:27:55:ec:32:19:35:57:f4:57:13:eb:c8:a5:9c:06:da:0a:
         33:ed:4e:89:4c:81:28:f9:9d:69:b4:01:e2:ef:8f:d1:5a:7a:
         0e:37:2e:80:65:17:96:6b:2a:37:f7:e4:54:a2:b3:c1:71:98:
         40:4d:ca:5a:7c:41:20:71:59:18:52:2e:ef:ce:ba:56:45:e2:
         a1:cb:a1:32:d5:5f:72:f6:47:17:fd:9b:e2:a2:de:d9:df:0d:
         c5:4a:ce:b0:54:6a:88:f3:5d:64:a5:e0:ca:d1:a4:7d:17:b1:
         52:c6:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----