Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          SLpd6Z4+AF19g7w9Rk9sZvpc5ykVnzhLRHCbJJrUG6o=
Subject key identifier:   63:7A:EE:2B:E8:BB:35:A0:FF:5D:8F:34:44:83:B2:8A:0A:AE:AD:A1
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       0194BC3BCE0498C6880AE947D6F47968E6CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          0DB9
Signing time:             Fri 31 Jan 2025 12:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:23 +0000
Files and hashes:         1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=)
                          2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=)
                          3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=)
                          4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=)
                          5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=)
                          6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=)
                          7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=)
                          8: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=)
                          9: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: v24BOofmkHkZh1Zi0r7rvr147KC19RdyZdU/xRrFPkM=)
                          10: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=)
                          11: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:ce:04:98:c6:88:0a:e9:47:d6:f4:79:68:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jan 31 12:00:23 2025 GMT
            Not After : Feb  1 12:00:23 2025 GMT
        Subject: CN=637aee2be8bb35a0ff5d8f344483b28a0aaeada1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:0d:02:e0:05:d8:9d:f7:17:20:3f:c8:4a:
                    2e:2c:a8:cf:7e:12:87:0b:e5:ec:11:6e:44:cb:27:
                    c8:56:6d:b9:2f:5c:f8:cf:a8:69:f5:a4:1b:7b:b1:
                    33:a4:3b:66:1c:34:cd:64:03:36:c9:70:28:8b:11:
                    14:d3:8b:89:fc:dc:2d:7f:46:65:87:1e:3b:d4:60:
                    81:1c:74:2e:2c:3f:18:39:b5:31:a2:95:ff:c9:e1:
                    aa:82:47:65:6b:bf:37:2c:d8:82:a0:d9:e4:49:6e:
                    5f:4a:3a:d8:c0:20:7f:f3:28:c6:fc:aa:0d:f7:79:
                    f4:43:97:27:4d:87:d0:93:58:91:12:e1:46:17:1d:
                    be:7a:09:c2:23:07:67:45:9a:02:9f:e0:0e:f4:ee:
                    4b:a5:3b:53:33:60:51:11:4f:84:3f:7d:69:9a:96:
                    11:e0:53:83:ee:0f:e3:14:3c:e5:ee:f2:1c:d0:a2:
                    a2:f2:a6:6d:43:f8:5c:4c:82:5c:7d:f4:70:c5:d4:
                    2d:61:0c:f3:f5:b8:c8:d8:15:6f:5c:40:e0:21:62:
                    ae:03:fe:2d:91:be:49:a1:c0:08:93:ff:41:7a:85:
                    78:c2:c2:03:ac:88:e4:55:a4:da:e5:78:d6:a7:39:
                    86:c7:79:af:13:e0:11:29:ca:b0:ce:6c:1d:49:ef:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7A:EE:2B:E8:BB:35:A0:FF:5D:8F:34:44:83:B2:8A:0A:AE:AD:A1
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:5b:8d:48:f0:de:0b:97:50:cd:1a:b8:5a:11:9a:9e:c0:
         37:98:47:27:13:b3:38:63:1a:3e:d1:d2:2a:56:31:82:47:71:
         91:f2:8c:15:e7:26:14:22:dc:fc:0f:1f:f2:b1:5e:33:a2:26:
         b6:0f:b1:b7:f7:f2:78:1b:9e:01:83:3f:5c:76:bf:c4:17:b0:
         89:fc:70:48:b6:21:db:57:1d:de:e5:34:e4:e0:d3:18:84:39:
         8a:33:cb:67:a5:22:3d:5a:d7:5a:90:f1:b2:1e:1b:e9:ca:fb:
         94:20:8e:2c:6a:6d:f0:a0:cf:1c:dc:73:5e:ed:ab:c6:df:9f:
         da:fc:ef:9c:1e:cb:6c:c1:db:b8:8b:57:a5:75:40:60:84:c5:
         59:16:05:2f:b3:67:33:45:a7:4a:ec:14:d4:33:1a:23:d2:ad:
         d5:8c:79:8b:95:5e:2b:fb:72:cb:89:99:05:4f:c0:94:cc:e2:
         c0:3f:dc:7d:ff:5b:2b:71:9b:92:8f:08:68:85:43:58:79:60:
         80:24:eb:21:b8:23:6e:a8:4b:a9:77:f3:df:e9:2d:4a:37:d8:
         e0:c1:8b:aa:c5:db:e4:3b:48:b7:2b:25:9b:98:55:a9:b2:d6:
         ed:ec:d5:fc:7f:44:15:0f:d4:18:df:17:78:7d:9f:55:51:54:
         4a:92:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----