Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          wymn3rmieL/PsZ0AMqHwEQeT70FFrawgnmnR0z9XvIw=
Subject key identifier:   59:5C:D4:F9:1C:D4:45:AC:08:D2:0D:CC:AD:F4:28:F2:45:2E:1B:91
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       0194BCA97DBAD7B0BC0E968F0B951A04E63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1457
Signing time:             Fri 31 Jan 2025 14:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:11 +0000
Files and hashes:         1: 0j1hJ7fS9pKsp0mhc3Z4R_-U-Zs.roa (hash: FEK144MzuqW9qvKlNPQamC/fG2v3y8bfbUTIC1iqdbY=)
                          2: C2rD4HrDbjqNmmm5ymjuhmylG3s.roa (hash: q9e1EGiUhdKa3ahFLdzXjoVm0Ut6I8X2T12U0fKQq6M=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: L-PZn3fd2kWSTDELJ5oYExAwXTk.roa (hash: whMCcinG+ou4TilkRzOXwI5qfHBqxulkbOAr++1gt70=)
                          5: gvi7PcozfeHXC2LD8zI1ANVtiuw.roa (hash: 7vSCp/muk4bFqaxdeC7EBH3zuKmiouGYBxQNgn5xgzo=)
                          6: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: MgHfMLa3Mr3xEiVivbo9C2/0a/SgILllDMqA9NOD8VU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7d:ba:d7:b0:bc:0e:96:8f:0b:95:1a:04:e6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Jan 31 14:00:11 2025 GMT
            Not After : Feb  1 14:00:11 2025 GMT
        Subject: CN=595cd4f91cd445ac08d20dccadf428f2452e1b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:33:7e:9e:bc:58:8c:eb:af:73:53:8e:ee:
                    60:06:e6:7e:9e:2a:e1:91:ec:70:d0:4f:57:38:15:
                    90:0c:9a:9a:b2:30:86:69:45:3a:50:f5:f4:b9:21:
                    f5:0e:42:8c:b1:d8:56:52:1c:e7:c9:56:c6:f5:14:
                    e6:4e:d9:59:17:c5:6c:7b:40:29:df:a2:e7:86:5e:
                    de:cc:a3:f9:e9:b7:89:fc:cf:c1:87:e7:ae:19:5e:
                    2a:51:8c:ad:42:c6:54:98:a6:a3:9c:7a:4d:7a:14:
                    88:1c:36:6f:8c:8b:92:83:f3:2f:82:81:d6:85:dc:
                    9b:8b:a2:41:d3:f9:3b:2b:b7:1c:6e:51:9f:aa:9f:
                    a1:32:24:4d:ab:44:72:63:9e:89:4f:2f:de:d6:16:
                    ee:0d:92:ce:94:1c:31:99:32:d7:c2:10:23:bd:6a:
                    ae:4d:fe:39:d2:af:e6:f3:3d:ac:73:4f:82:a4:64:
                    2e:23:a4:01:8c:25:4f:dc:46:0a:ea:3f:d2:64:88:
                    24:9f:c6:09:a7:26:5e:11:c2:94:16:87:5f:d6:68:
                    a9:d4:9c:3b:ba:e1:26:f9:98:14:4a:9a:a7:c5:c5:
                    41:6c:2b:e0:83:6e:ac:aa:79:09:ad:f2:08:82:96:
                    3d:43:10:85:56:0e:00:b6:30:85:90:35:ef:65:e6:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:D4:F9:1C:D4:45:AC:08:D2:0D:CC:AD:F4:28:F2:45:2E:1B:91
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:af:7a:01:d0:a4:3d:ff:0f:7c:98:9c:81:76:7a:d5:19:9a:
         b4:ac:16:3f:31:e5:76:e4:00:28:5b:5b:42:db:bb:32:f0:63:
         38:90:8e:a3:36:9f:a5:ca:aa:d8:86:0c:5e:97:6f:fc:82:e5:
         7d:4f:61:49:e8:04:9c:5b:7f:44:18:b2:99:d9:9d:d9:90:b7:
         52:f0:3b:71:a1:9d:0a:40:e1:2e:e1:60:73:99:5b:c9:86:d4:
         92:cf:0c:3d:43:d1:4f:cf:24:b8:ad:18:27:c1:ce:dc:75:38:
         56:8d:86:89:b8:8a:e8:db:ab:45:06:c0:1b:82:74:01:df:cd:
         1a:32:9b:a9:73:02:9e:c7:a6:c8:56:ef:1c:6c:3a:c7:b7:04:
         40:bb:06:d0:d7:aa:1d:7e:f7:62:dc:7f:98:45:2f:39:78:b4:
         36:10:f2:70:ad:40:76:4b:6b:44:2a:7f:63:c6:7f:50:3f:35:
         a8:73:d2:f7:bf:53:1c:20:d3:d3:0a:6d:0a:97:05:4d:fb:5d:
         ef:a9:62:6f:77:41:80:0c:bc:f7:cb:aa:d9:f5:30:df:20:43:
         72:12:e7:eb:f4:0d:65:20:52:e8:d9:de:f3:bb:9b:a5:c0:c9:
         9c:ea:72:e6:fa:19:cf:e5:01:83:07:2e:db:6a:17:e9:5b:b3:
         7e:7f:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----