Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          hO2MKdPZAPwTAQoizT5FvLhNUCcbsNEm8uNqL6HM1zw=
Subject key identifier:   79:A9:A9:DD:A6:BC:F1:9C:AF:06:69:DB:4F:CC:F3:B4:AF:E5:51:B5
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       0194BC04B3A891A4721F805F0E6AD6DC6F76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          1441
Signing time:             Fri 31 Jan 2025 11:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:12 +0000
Files and hashes:         1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
                          2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=)
                          3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
                          4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=)
                          5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
                          6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: 636fb7gvfYqeioNs9OrTMGS8KRUJi7/eCZ3rGrfz+g0=)
                          8: qWtkpWcxzcHPkJpM0DbSGvqPLMc.roa (hash: L2Jwusd2s8Oy8wDnyTodX1ZVqYdMd4FW4zdBBLfM0uo=)
                          9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
                          10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:b3:a8:91:a4:72:1f:80:5f:0e:6a:d6:dc:6f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jan 31 11:00:12 2025 GMT
            Not After : Feb  1 11:00:12 2025 GMT
        Subject: CN=79a9a9dda6bcf19caf0669db4fccf3b4afe551b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:f2:2c:14:5f:09:5b:cf:7f:db:d3:31:17:
                    da:c8:f6:b9:92:1f:5d:f0:a9:05:70:85:c2:ba:0c:
                    7c:4e:cc:4a:51:98:67:85:f7:0d:de:89:d7:72:af:
                    02:cc:fe:5d:c4:8b:40:8b:83:b2:c8:4b:70:d1:eb:
                    57:4e:73:bc:30:dd:b2:12:e2:91:74:fa:cc:71:eb:
                    c1:4f:c0:22:b9:7d:ae:7e:f2:e2:30:f2:4c:00:7d:
                    e0:51:9b:92:bc:5d:ed:e5:8d:00:fa:1c:3d:e2:70:
                    df:cd:0e:56:2d:c0:e3:0f:ea:3a:08:c6:a2:e9:68:
                    bd:0f:f3:91:ce:69:8f:42:50:79:50:8e:75:a2:6f:
                    a0:08:55:74:94:6a:c0:9f:65:4e:dd:42:85:7e:81:
                    c5:ab:f0:48:14:78:bb:24:64:be:e8:8b:06:a4:43:
                    29:5d:20:49:b7:16:cc:0f:ea:d6:ac:74:5a:e3:d6:
                    c7:e3:5a:c7:32:27:4b:c7:e7:b9:17:64:a7:43:98:
                    e5:4c:2a:8b:13:5b:91:cd:d4:53:ae:4e:5d:72:64:
                    29:eb:e5:5a:f7:7d:0f:0e:ae:68:15:16:50:90:ed:
                    eb:b7:8c:d2:f9:00:94:58:1c:c9:5e:3e:4c:41:f6:
                    58:d2:7f:f9:b4:06:56:81:aa:48:95:2d:fd:5c:c8:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A9:A9:DD:A6:BC:F1:9C:AF:06:69:DB:4F:CC:F3:B4:AF:E5:51:B5
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:26:15:91:36:c8:aa:0d:39:58:c5:3f:02:c3:c5:ef:d1:
         ea:a5:73:5f:23:d3:66:d1:ca:76:b3:25:fe:e0:45:a2:33:57:
         f5:62:e6:63:42:da:86:c6:c9:67:3d:8c:cd:35:b0:f8:a1:ac:
         db:11:47:89:b6:3e:7e:09:79:ae:a0:ff:df:b9:91:db:c6:e4:
         71:63:20:1c:5a:5d:e0:04:6a:df:62:36:4f:0e:22:91:9c:6c:
         35:23:61:c1:e1:46:bc:f1:f2:0f:ff:10:38:ec:c9:59:a7:b2:
         1b:60:47:0d:00:1f:a1:d3:94:af:f6:4f:37:f8:ef:c2:6f:e0:
         10:6e:73:a3:12:71:49:e2:9e:15:29:e1:50:d1:c6:b9:58:05:
         f2:36:95:89:82:c0:6a:ac:78:35:9a:63:db:17:35:5c:2e:2c:
         b5:2c:f4:c0:75:6c:12:f5:b2:1f:be:69:2f:2f:1e:ea:7f:2e:
         f6:0c:ad:b8:a0:39:d9:6a:7a:f4:8d:c3:9b:30:22:9e:90:79:
         a9:4a:7f:dc:85:5f:ed:78:13:b6:90:01:57:74:8a:8f:44:0d:
         b2:b8:f6:27:9a:aa:19:f3:53:b8:e7:32:ff:f1:d1:f9:a0:27:
         e8:c8:e9:16:7f:e7:71:d9:27:d7:b7:51:a7:c8:cf:e7:90:ae:
         a3:fc:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----