Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File:                     4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier:          k8M1BdEHw8+p4eFhcjtv8caC0MGWRn2JH44LOZRarcI=
Subject key identifier:   AC:CF:03:32:FF:3A:EE:91:13:F1:FA:93:1E:CF:39:85:3B:05:61:9D
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       0194BC3C1BFC676079735246F5422F9B34F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 12:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:43 +0000
Files and hashes:         1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 04NQ4bo8Nm3pYeX+BbXtXxvrgf7zuCP0WnnSGHgzrrg=)
                          2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
                          3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
                          4: LNUfeHuP7gnY_85aOJlr0qSJEMQ.roa (hash: YoOtP+EHXOmT+ABly+3o3H4KeOBEs5xmQuWc5ATMUTk=)
                          5: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
                          6: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
                          7: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
                          8: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
                          9: iOtyAgFkq9KjDryYtxSf-6c3wlc.roa (hash: Kj30r5ul8bTH9OFgdr0KBvhjQH9UprffsicG1Hxoghk=)
                          10: neNovPYO-axYs7BVt_2UaW47DHE.roa (hash: VFy1CggRIr9nSFzCxAMfyeQiCZ7oJT6RZEpYe7bsLMw=)
                          11: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:1b:fc:67:60:79:73:52:46:f5:42:2f:9b:34:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Jan 31 12:00:43 2025 GMT
            Not After : Feb  1 12:00:43 2025 GMT
        Subject: CN=accf0332ff3aee9113f1fa931ecf39853b05619d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:c2:1b:9b:62:5c:8b:ac:6f:35:88:31:53:
                    33:ee:66:fe:1c:1d:6a:86:7a:b0:fa:3a:62:5d:2e:
                    a0:ea:7a:d1:09:d4:46:f0:6a:78:1e:ad:4c:65:49:
                    e8:4a:75:04:de:68:72:ed:49:a5:b6:a4:7b:ed:47:
                    54:c2:74:05:de:a5:77:4d:12:6e:40:e9:7c:d7:87:
                    30:8f:a0:cb:09:6d:37:1e:43:f6:82:8d:1d:88:35:
                    82:d8:b8:0c:2c:f4:cf:c0:43:78:89:19:89:48:bc:
                    b1:8f:3d:2a:11:88:9b:ef:4d:f9:91:9d:14:6b:72:
                    42:9a:c7:32:c6:dd:81:92:24:bd:2d:63:45:24:2b:
                    cd:8c:3b:17:06:56:ab:19:4f:9e:c5:e2:8e:4b:e7:
                    b3:0f:c3:cb:48:46:82:d1:01:56:56:df:ea:d6:7f:
                    9a:b8:00:dc:18:68:65:f7:cf:ea:c9:9b:17:c8:13:
                    3c:6c:6f:47:83:35:d6:df:f0:ac:f3:6e:65:07:0c:
                    f6:d6:b1:ee:dd:96:c9:18:0b:3e:2d:28:6e:3c:ea:
                    bc:e0:43:43:55:3d:6e:61:91:4f:70:77:09:f5:47:
                    09:70:d5:0e:3e:c6:ba:2d:dd:a0:ad:27:cd:51:5d:
                    59:d8:c0:b2:01:92:fb:57:35:c6:da:28:3a:75:15:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CF:03:32:FF:3A:EE:91:13:F1:FA:93:1E:CF:39:85:3B:05:61:9D
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:00:d1:00:9d:de:37:d8:78:a9:72:32:86:0a:3a:9e:33:ce:
         4a:3b:36:50:5e:d0:c2:84:52:3b:5b:4d:5d:66:f3:68:8d:81:
         3a:ca:35:1a:4d:b4:cc:26:52:e8:0a:47:cd:d4:76:29:6b:b4:
         99:7f:41:3d:b7:04:8e:0a:29:07:81:eb:6c:b0:29:d8:e6:26:
         a7:2b:f4:31:9b:12:4f:8b:9e:d8:f4:57:bc:7c:d1:e5:9f:11:
         a2:e7:5d:94:8e:01:22:06:8c:4f:ff:ca:b1:af:11:aa:99:5d:
         02:e6:f0:18:cf:92:d9:7e:c5:82:eb:99:ab:2e:ed:1c:62:b7:
         2c:5f:a5:d2:b2:08:f9:8d:ee:bf:78:e8:1d:bb:c8:9b:d3:1a:
         11:4f:d9:19:05:3c:74:e5:0a:e0:b3:97:e0:a0:6a:ae:a3:44:
         01:18:b8:0a:0c:e1:8d:6c:e1:36:1d:40:dd:53:46:42:51:46:
         69:0b:0d:ad:b3:c6:21:86:0d:8f:35:95:c7:dd:84:47:b3:4e:
         9b:d8:56:0f:c4:15:0b:08:cc:dc:24:a5:8e:68:8a:52:10:7a:
         d1:75:16:46:0e:d9:14:2a:f4:b0:1b:19:03:c2:c8:e4:ca:25:
         8e:d1:be:ee:6a:b7:07:64:08:3e:d3:65:cc:af:7a:d9:74:62:
         86:83:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----