Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File:                     rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier:          zdzcSpQ1YfXHbcTe7tP401GAOCGS3WbXzG9seicXdlM=
Subject key identifier:   03:E2:8F:32:44:59:6B:0F:ED:C9:25:1E:F6:F6:FD:55:84:C4:3B:D0
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       0194BC3BE603755EBC5758D4CAE66AA91A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number:          143F
Signing time:             Fri 31 Jan 2025 12:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:29 +0000
Files and hashes:         1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=)
                          2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=)
                          3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=)
                          4: BqTGXwEy0NGO0YDBi2enWJEpe9k.roa (hash: NYaAEL0V4uNdZmz3A2gD5aCaRjRzazsS2Zn8GlYp1k0=)
                          5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=)
                          6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=)
                          7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=)
                          8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=)
                          9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=)
                          10: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: 9nNHZqlvWPTWgP0G2J9SDL4gSnHP8MM5lB6W0BhBhKA=)
                          11: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e6:03:75:5e:bc:57:58:d4:ca:e6:6a:a9:1a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jan 31 12:00:29 2025 GMT
            Not After : Feb  1 12:00:29 2025 GMT
        Subject: CN=03e28f3244596b0fedc9251ef6f6fd5584c43bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:f1:54:e8:1d:30:e1:33:77:b0:9a:e7:0d:
                    eb:06:3e:65:47:0a:fb:77:77:ff:ae:15:cd:a4:9c:
                    7a:42:71:33:fc:02:ab:55:1e:6b:8b:17:75:0c:c8:
                    b2:47:cf:0d:7d:a7:aa:3d:fb:47:54:36:1d:1d:23:
                    13:d2:f2:2b:1f:3a:be:02:81:66:c5:cf:7c:c2:8f:
                    39:e7:60:75:a5:da:10:ed:4f:df:da:2a:f3:11:65:
                    75:1a:03:e5:16:31:35:01:0f:8b:10:90:91:ae:0e:
                    39:b4:c1:df:94:49:84:c2:f3:34:e8:c1:23:54:51:
                    7b:4c:ea:85:4a:6a:0e:61:f8:4b:4c:52:28:ea:11:
                    fa:29:a7:a1:f0:5a:85:85:1b:18:18:dd:43:10:24:
                    de:d4:8d:81:27:ea:6f:a9:ba:f9:8f:f9:fa:36:0d:
                    59:b5:89:c5:ea:f5:ad:b0:ea:41:77:7b:f6:39:90:
                    fe:03:c4:c3:04:a8:50:ac:09:4f:bc:ce:2c:a3:43:
                    97:fe:89:b7:a8:f7:5b:73:c2:ed:d9:c6:e2:78:ef:
                    96:04:23:57:28:45:a7:be:ea:45:78:47:05:32:ba:
                    cd:b5:e4:64:b8:af:4c:a5:1e:08:ce:52:1f:b0:13:
                    3d:7a:c5:b8:3b:85:ad:40:84:37:01:22:f5:dc:fc:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E2:8F:32:44:59:6B:0F:ED:C9:25:1E:F6:F6:FD:55:84:C4:3B:D0
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:26:b7:a0:d8:c8:44:6e:a2:2b:6a:30:da:a0:b7:5f:f6:4d:
         11:8c:51:dc:90:12:c6:e2:a9:00:7c:d1:bd:59:16:28:ec:64:
         db:5e:69:ea:0a:6d:8d:66:20:85:30:d9:c0:a0:c6:59:d8:18:
         ac:23:0a:0e:2c:a3:2a:e7:70:49:99:68:a0:42:67:b8:2d:62:
         e7:0e:27:03:e0:c4:0f:a2:e2:68:2e:c1:30:50:28:85:67:dc:
         42:5e:2b:b5:b9:c2:f7:f2:c2:0d:63:7b:c1:a3:4a:f1:3a:d6:
         6e:cf:25:14:cd:88:7f:bc:7d:00:df:88:3f:2a:78:54:09:9f:
         04:21:dc:b1:68:2a:a2:9e:31:b6:f1:0c:c6:33:0d:21:ce:84:
         48:07:d1:4e:68:3b:b4:08:f3:d3:ce:ee:06:e9:77:7e:c7:05:
         5f:e6:9a:d4:80:30:fd:ce:4c:53:e1:d2:90:cb:8a:de:88:cd:
         14:7c:49:08:c3:9b:48:96:be:b6:7e:a5:b4:68:3f:56:d4:a9:
         80:8f:34:c5:46:a4:4a:dd:d3:9a:10:cc:94:49:1d:bf:fa:86:
         ad:71:95:53:05:20:d3:e5:67:cb:c2:6e:26:2e:5a:18:bc:fe:
         f7:f1:d9:76:99:45:5b:b4:9f:00:ec:41:9e:6d:3f:92:fd:f0:
         5d:a3:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----