Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
File:                     Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json)
Hash identifier:          NL8wRxxJsT+em0FtFugAJ+6DnD+XeWj4GiHQnrdImWQ=
Subject key identifier:   1B:8C:39:18:31:4B:72:10:9D:CB:EF:28:07:A6:A2:67:1E:E8:02:1C
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Certificate issuer:       /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial:       0194BD8594B1FE4821FCE50FD9BC21F61799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
Manifest number:          0FFE
Signing time:             Fri 31 Jan 2025 18:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:35 +0000
Files and hashes:         1: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=)
                          2: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=)
                          3: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=)
                          4: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=)
                          5: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: s9bQEjf6GXc+oJYiPfCXDudZqqyvC06ReNsTIZ5Sl8c=)
                          6: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=)
                          7: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=)
                          8: k_ZqmPCnz03_dZc9N2wNiIoXlGk.roa (hash: s/vWuWuZtih+hcjhlcVCGPb/WO4xU06Hn4tT7Lm6VrM=)
                          9: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=)
                          10: wnsrTtgZ6WhtxGnx8RjcLau3SrM.roa (hash: QKSLYpPwO1WhDS36CccFidt7rWMqu+1eMLyyl0Mqn3g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:94:b1:fe:48:21:fc:e5:0f:d9:bc:21:f6:17:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
        Validity
            Not Before: Jan 31 18:00:35 2025 GMT
            Not After : Feb  1 18:00:35 2025 GMT
        Subject: CN=1b8c3918314b72109dcbef2807a6a2671ee8021c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:73:08:40:b6:05:b3:9a:b5:8b:63:ec:1f:
                    d7:5c:4f:46:06:1e:1e:39:ea:20:cd:77:32:39:8e:
                    56:36:70:3e:3a:14:4e:85:d2:08:de:d8:25:6c:5a:
                    b1:bf:c8:30:a5:61:1a:58:92:66:db:ff:8a:77:68:
                    d3:ee:23:03:ec:e7:9c:c4:51:6f:5e:9f:09:8e:2b:
                    42:c0:85:15:a8:ea:96:7e:ec:a6:bd:16:41:66:bd:
                    21:dd:c6:b6:e7:5c:46:54:2e:1f:eb:bb:a6:57:16:
                    7b:49:79:e9:32:99:ff:62:00:d2:5f:f9:71:1d:fc:
                    d0:90:60:4f:ed:47:0e:c1:6f:b5:d3:1c:11:69:a4:
                    a3:a8:80:7a:e2:68:47:5e:7b:14:e5:be:e1:f1:4d:
                    a7:1b:d1:e2:f9:a0:c4:20:9a:d5:2f:9f:da:97:92:
                    b2:80:19:04:24:de:d0:34:bc:a5:27:5f:99:e1:1f:
                    f9:92:80:cd:48:c1:fb:f6:d5:3d:f1:86:72:21:3f:
                    92:bc:38:dc:4b:f6:f7:80:fb:ae:8c:bd:6d:e0:0c:
                    5b:21:c6:d3:0b:b1:de:d8:87:d9:5d:1e:3f:cf:32:
                    86:52:71:13:6e:f4:4a:6b:02:2f:7d:3d:bb:a6:bc:
                    df:54:6d:3b:f2:0b:6d:47:e5:b3:17:e8:d8:6d:3c:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:39:18:31:4B:72:10:9D:CB:EF:28:07:A6:A2:67:1E:E8:02:1C
            X509v3 Authority Key Identifier:
                keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:86:cf:fc:b2:ba:af:82:0b:aa:8a:26:4f:e5:6a:90:d6:
         40:98:15:16:82:4c:2d:65:4b:5d:f2:ec:e9:e5:48:1d:73:03:
         a5:8a:72:86:8b:07:b9:06:4a:0f:21:85:0a:44:60:db:ab:b7:
         72:b9:f9:57:db:ba:be:18:5d:c2:93:37:6d:dc:3f:98:d9:f2:
         67:6d:9d:49:41:8b:2f:2a:f7:1c:d8:cf:c0:dc:37:b5:61:84:
         7d:b2:b7:1c:0d:6a:70:de:00:97:aa:4c:0a:36:4d:a4:46:dc:
         1b:ad:22:7e:79:0c:4a:db:a3:f4:14:96:e0:89:8a:a3:b8:0a:
         58:f3:47:6c:bf:61:91:69:3f:11:23:9a:fb:1f:64:2d:c9:8a:
         40:fa:8a:af:5b:53:8b:c7:50:90:86:2d:a6:5c:6e:6d:28:ab:
         6e:4b:c0:22:62:e5:e8:cb:f8:78:e6:98:94:c1:d7:2f:6b:c9:
         6b:cc:4d:01:aa:30:bf:8a:20:ea:0f:69:37:71:45:3c:b9:01:
         ef:96:45:26:52:25:d0:a0:fc:84:fe:c0:8b:58:1e:6d:cb:3e:
         da:a0:a8:e9:de:b7:58:68:e7:f5:ac:fb:89:5c:ea:2b:de:48:
         b8:ba:53:e0:3d:0d:1d:03:76:12:8c:0b:fa:e0:ad:6a:49:74:
         07:6b:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----