Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          1nBciU4/iNTDKi1bvLZZ3QMZibf20ypJjpOPKwFrf9M=
Subject key identifier:   4E:43:33:2D:2D:19:83:6A:15:9B:54:7F:E7:14:C1:6C:45:C7:4B:FC
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       0194BC3C8046A57B156A03CE10F92C4F7F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          1366
Signing time:             Fri 31 Jan 2025 12:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:08 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: pAkefr7HXl7J77zROV8PWNgvh5ubuU+OAemmNyhN0XM=)
                          2: CurH0neit6mwUOJCujymcbAcz1o.roa (hash: kaT9G4LaumOydUTFNX6h/mIOsRC+vafHwk5au9qFPkY=)
                          3: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
                          4: am2sy58F1CS8R1serePPA8VUSM8.roa (hash: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=)
                          5: mBtneH0apKymD1yidiviYwQz7bc.roa (hash: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=)
                          6: tNRdmlA4nRuSXHmtsjO8t1XCUoo.roa (hash: Nyo8TJ3Ze7JZ+0EgnnMZX1jTt57O8CTgfsqjBp8jwmk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:80:46:a5:7b:15:6a:03:ce:10:f9:2c:4f:7f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Jan 31 12:01:08 2025 GMT
            Not After : Feb  1 12:01:08 2025 GMT
        Subject: CN=4e43332d2d19836a159b547fe714c16c45c74bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:b0:48:d6:dc:d4:0f:1c:db:f9:86:c1:70:
                    f4:c8:52:d6:20:a7:4b:fe:23:c3:69:0d:8b:4f:d8:
                    ad:17:94:a3:8c:71:85:02:6f:66:e7:3f:5b:a2:bb:
                    04:df:b2:13:d4:b9:8a:cd:6f:52:39:bc:77:59:88:
                    8c:1b:74:61:35:b8:52:da:94:58:2c:8d:fc:d8:ed:
                    89:d6:ab:76:94:d2:eb:3b:31:3b:52:e2:1a:d9:a9:
                    54:7b:71:6c:0a:f1:30:5b:13:45:03:9d:d3:72:7e:
                    e4:34:51:b2:fb:dd:74:1b:df:99:b9:24:66:55:08:
                    e4:dc:e9:11:17:23:5e:96:b4:f3:b5:e9:aa:c9:33:
                    a7:f0:e3:63:41:d5:50:a4:8a:36:37:6b:6f:05:d5:
                    2a:8e:25:70:c6:c3:ef:b7:c4:ca:9f:62:be:91:9f:
                    a1:58:60:a1:ab:1e:24:41:98:61:15:af:5e:79:0b:
                    fc:5b:47:c4:c0:c7:e3:7b:44:78:39:1f:05:fe:ed:
                    31:83:f5:45:89:e8:35:61:35:36:bd:17:0e:5d:b0:
                    b0:e3:08:87:80:a6:7f:34:a4:d4:bc:5d:62:a0:34:
                    88:e8:75:71:e3:68:a7:1c:30:a8:65:45:42:90:7a:
                    86:b2:63:cf:48:29:a4:97:f7:98:4d:3f:40:e9:7c:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:33:2D:2D:19:83:6A:15:9B:54:7F:E7:14:C1:6C:45:C7:4B:FC
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:94:4b:7d:7d:4e:02:8d:f0:88:60:1b:80:1f:b3:1e:77:02:
         ee:1e:38:ba:5e:31:ef:04:8c:21:5b:e6:5e:57:07:1e:52:35:
         f0:3c:e9:b4:a5:42:39:45:55:96:c8:9f:59:00:2a:ee:f3:38:
         04:66:0a:27:6f:ba:90:6c:c5:59:f0:5e:02:c8:4a:cb:28:63:
         e5:e2:f7:e5:bb:6a:62:c9:e5:6c:09:3e:84:d4:ab:4d:14:0b:
         b1:b2:c5:8f:2c:5b:42:7f:65:0f:29:d6:5d:66:05:52:75:b3:
         16:f7:2a:67:2a:aa:1d:56:a9:a3:3e:5d:61:f6:cf:4f:a8:c6:
         c1:2d:fc:58:a9:d9:06:10:01:a6:11:c6:44:01:ad:34:bf:d6:
         b1:49:25:d9:35:15:6b:a3:aa:0c:b9:1b:1f:15:d5:f0:4b:b8:
         b5:cc:22:44:ce:46:2d:e5:a0:fa:20:30:1c:18:4e:56:a4:d6:
         2f:5a:3b:d6:76:93:cf:88:40:51:27:25:aa:39:ac:ea:eb:c3:
         23:b0:71:e2:db:d9:81:06:fb:28:d9:3e:5f:e5:99:e3:32:70:
         86:7f:46:bc:ee:35:7a:d8:76:e2:4c:aa:c1:32:cb:01:08:b9:
         1c:a9:1a:92:e2:f8:c8:05:f0:47:48:7b:b1:52:f0:fa:95:28:
         c8:43:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----