Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          XV8JWFdFIeY8QZf3o17AeY/YY0ctHpTN0xLznjxF2v4=
Subject key identifier:   90:25:A5:5F:AA:0E:19:3B:77:6B:A2:09:70:0A:DC:9B:36:81:42:90
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       0194BD177C29BC3D4E2844B6B87B02A23776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 16:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:20 +0000
Files and hashes:         1: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
                          2: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
                          3: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: m/suVlOMC02TGB0HJie8IU37ms/zaX70XdbOXawEeeY=)
                          4: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
                          5: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
                          6: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:7c:29:bc:3d:4e:28:44:b6:b8:7b:02:a2:37:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Jan 31 16:00:20 2025 GMT
            Not After : Feb  1 16:00:20 2025 GMT
        Subject: CN=9025a55faa0e193b776ba209700adc9b36814290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:32:6e:3a:f8:88:67:f9:51:f8:f5:58:5f:
                    bb:1f:42:db:a7:bc:04:c9:05:b0:67:2e:66:d4:3e:
                    94:bc:9a:7c:b4:cf:a3:39:fc:2e:15:5f:df:e7:87:
                    49:32:40:6d:cc:bc:19:28:c8:bd:c4:2e:ef:48:51:
                    be:e2:de:e5:68:d8:6e:c9:dd:11:80:86:b4:a3:d1:
                    b8:69:37:df:fc:8c:28:6f:ed:a8:76:5d:1b:49:8a:
                    36:cc:f9:5a:78:4f:fc:76:25:7e:03:af:37:04:e7:
                    05:fa:ed:b8:3b:24:09:09:d7:5a:9d:6f:e5:82:0f:
                    ed:8d:c5:ff:06:5b:4e:1b:be:d0:b6:15:f7:de:eb:
                    66:4d:65:c5:d5:a8:a2:63:08:81:49:79:3f:8b:38:
                    2f:fe:71:47:0e:37:3d:a3:74:9f:95:15:f6:ca:a3:
                    bb:94:db:16:09:9d:c5:4c:03:cc:8b:ab:ac:28:d6:
                    59:58:1d:e9:69:57:46:9a:b0:40:4f:33:c1:d3:4b:
                    2a:b7:6b:5d:2c:51:20:e2:f8:dd:07:63:00:f0:c2:
                    1c:dc:bf:52:dc:02:c5:6e:f0:b3:8d:99:3a:26:58:
                    61:d8:d9:84:c9:c1:f3:d3:87:df:11:2f:03:2c:84:
                    be:29:84:46:ad:36:1b:2c:de:e6:3b:03:b1:9b:6f:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:25:A5:5F:AA:0E:19:3B:77:6B:A2:09:70:0A:DC:9B:36:81:42:90
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:93:c4:29:f4:e3:9b:1b:41:75:ed:38:a1:55:76:95:49:23:
         2a:37:de:9f:9e:23:72:1f:ce:39:eb:53:a6:72:77:b4:d9:45:
         2f:54:ce:8a:c4:c8:04:c4:bb:ff:91:f8:69:71:ea:65:f5:d6:
         a3:2e:97:d6:b9:bc:d7:ff:aa:32:4e:29:e5:10:64:16:62:87:
         c3:77:aa:78:40:ea:f8:08:17:29:26:a4:4a:3d:99:87:9e:e6:
         b0:65:65:86:4b:db:e2:b3:e7:5d:c7:c8:d8:0e:75:09:8e:3a:
         2e:a7:22:6c:49:41:c9:cc:dd:52:69:fd:a7:17:11:0b:e8:a6:
         b1:62:20:f1:0a:87:d7:28:98:c9:db:47:74:b6:2c:8c:1c:56:
         ed:52:2e:69:ad:09:fc:22:da:47:94:3c:8e:c0:8e:a4:de:54:
         95:74:35:97:da:3d:a9:40:c5:4f:0d:1f:b2:cf:10:fa:34:54:
         3f:6a:86:49:c5:56:d0:6d:c2:94:3b:b8:32:8a:06:8f:4b:2f:
         e9:78:5c:02:1c:4c:6d:f2:25:99:42:16:fc:88:87:67:1a:c5:
         92:4d:2a:8f:9a:b8:a7:f5:99:a2:8b:5d:86:40:30:fc:69:07:
         48:0a:71:75:b6:8a:a7:c6:1d:e9:94:29:69:97:ab:8d:16:22:
         0d:0f:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----