Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          C5pNhUN/V4KOkgLLeiIlZ/cCCpLRldDeVijdSFvoANg=
Subject key identifier:   4A:7F:D4:3D:07:08:AA:DB:84:42:99:A8:FC:25:C9:DA:9B:03:1C:CF
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       0194BBCDCBD18DFE1ECCE3D4B0F213389AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 10:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:13 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: ko5DX1HT3d7OAG/DU4YUE4EZB7Ghsuzj2+kvOR/cMUQ=)
                          2: CWMJQsKgUCIXkxxhwCzX2E1UXSM.roa (hash: JLefzqgP3FaQaSvwATsVOBop+FBDjBp309UmJ2tv2HM=)
                          3: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=)
                          4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=)
                          5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=)
                          6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=)
                          7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=)
                          8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=)
                          9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=)
                          10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=)
                          11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:cb:d1:8d:fe:1e:cc:e3:d4:b0:f2:13:38:9a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Jan 31 10:00:13 2025 GMT
            Not After : Feb  1 10:00:13 2025 GMT
        Subject: CN=4a7fd43d0708aadb844299a8fc25c9da9b031ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:42:8a:00:65:2d:d0:f9:4c:03:e2:a4:40:
                    03:e1:af:3e:93:26:e8:5b:67:49:c6:4a:dd:d1:ac:
                    c6:a6:f0:fc:eb:5a:44:e0:0a:40:9e:da:4f:91:b0:
                    bb:12:67:dd:38:64:a0:af:9a:92:c6:0d:90:db:67:
                    a2:57:1a:45:63:4b:96:c4:a6:19:4e:c4:97:64:ff:
                    90:53:cf:a9:ff:71:a0:41:53:d0:57:ea:d0:c9:de:
                    07:40:23:9d:28:33:21:0e:2f:17:95:87:52:fc:ec:
                    0e:5d:20:c9:8d:18:3a:e6:63:ed:f0:28:df:6e:4a:
                    01:78:b8:7d:c8:1a:95:38:5f:6b:31:aa:6d:84:8d:
                    ce:74:78:51:33:05:51:0f:dc:c7:c8:f7:a9:a7:be:
                    ba:97:7a:8f:40:7e:fb:fa:11:d6:22:10:20:2d:29:
                    dc:05:4a:03:f0:80:6f:dd:7e:91:c0:00:ce:ff:71:
                    2d:df:62:ed:99:2e:87:2d:8d:6c:0b:01:ce:69:0d:
                    35:3c:59:0a:c4:3b:2e:f8:42:f6:e8:c6:c5:69:66:
                    40:0f:81:86:7f:9f:77:56:32:63:0d:c1:19:6e:b2:
                    53:b4:e3:cd:26:43:90:e3:ad:c7:ec:89:00:b5:1b:
                    96:ec:be:49:d3:76:6f:03:10:d0:dd:56:3b:6e:4e:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7F:D4:3D:07:08:AA:DB:84:42:99:A8:FC:25:C9:DA:9B:03:1C:CF
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:a8:25:18:6b:35:d0:63:d0:53:b6:69:cc:64:ce:fe:10:
         87:72:0d:44:90:e5:14:9b:34:78:18:07:11:00:00:d3:df:1b:
         76:02:cd:cb:7a:d3:3b:1e:70:30:8d:20:ac:f6:55:60:de:9f:
         ce:ac:5e:38:9f:89:a1:87:c3:d7:87:a6:de:01:98:f7:4c:11:
         bc:6b:cb:64:94:06:8a:23:e0:52:f1:d2:cf:e0:b5:dd:f7:96:
         7e:7f:25:bd:cc:63:77:7d:4f:f2:73:cb:95:ee:c6:e7:a0:22:
         18:25:0d:14:18:3a:65:cd:f8:11:37:b8:44:4e:6a:ee:fb:8f:
         46:a5:4d:73:b2:bc:b6:42:09:c3:84:b5:57:91:85:b3:99:fc:
         6f:64:e7:80:1d:c8:57:05:23:a0:49:be:d1:81:68:f0:dd:71:
         9c:80:d2:e3:1f:de:9d:94:c8:8f:a0:16:1a:d0:05:07:97:54:
         df:bf:91:25:02:a1:fa:3f:43:12:86:89:40:9f:67:91:a8:81:
         b8:a4:7e:18:a3:ff:09:6b:b0:14:f7:07:56:75:ce:4c:29:99:
         03:be:56:b4:a9:5a:86:ca:e0:36:4b:61:c2:9f:e7:14:9c:a4:
         4e:57:c0:0f:74:33:f4:e1:75:41:b7:03:a9:64:6d:46:c1:91:
         78:67:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----