Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File:                     4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier:          NvSAu1IXbj8ct799wdJVnJQZuxPoha7Z6xOQsWkHgpM=
Subject key identifier:   F3:F9:09:AE:BB:E9:A9:BA:60:CC:24:34:6A:51:74:B5:70:D0:16:E7
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer:       /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial:       0194BC04C3B30AE33B148246034822B0D10C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number:          0369
Signing time:             Fri 31 Jan 2025 11:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:16 +0000
Files and hashes:         1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: OMvHb1ejiAkILczQV3Q+NQ4u0ol2Tx3Z4JyqrvyyvWk=)
                          2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
                          3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
                          4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:c3:b3:0a:e3:3b:14:82:46:03:48:22:b0:d1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
        Validity
            Not Before: Jan 31 11:00:16 2025 GMT
            Not After : Feb  1 11:00:16 2025 GMT
        Subject: CN=f3f909aebbe9a9ba60cc24346a5174b570d016e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:ed:80:3c:b3:57:58:5d:45:5e:49:a7:b8:
                    1b:20:8c:ae:ca:23:13:0a:7e:ce:5a:af:78:4d:43:
                    08:98:db:0f:6e:ef:63:ac:5f:65:9b:46:83:f4:43:
                    d1:0e:13:21:fe:25:c9:b1:70:55:1d:4c:84:25:4c:
                    aa:96:9c:0f:93:03:ed:b8:73:cf:4f:95:e2:bd:16:
                    49:37:51:18:c0:e9:63:52:0f:f9:10:91:07:c3:8a:
                    52:fb:8d:2d:93:46:51:0e:75:36:5b:f0:b7:e3:e5:
                    51:4d:b7:4b:6a:42:16:25:4e:0c:3a:b2:59:bb:b5:
                    6f:87:f8:d2:65:af:71:49:a7:dc:18:ec:e1:19:02:
                    4e:3a:8c:01:9c:db:f7:e8:16:73:9c:19:75:21:14:
                    36:c8:75:54:99:8b:80:37:1d:5b:10:a1:28:a7:d0:
                    f0:36:a9:da:34:63:16:f8:b6:a5:56:23:c8:68:b3:
                    5a:9f:82:b1:30:ee:ca:b8:fc:eb:af:9a:e2:18:6b:
                    20:fb:72:03:bd:13:7e:26:cc:c2:e6:1b:c0:03:4e:
                    5f:9c:b9:ba:40:ed:1b:f5:67:1b:44:f5:05:53:22:
                    a2:d8:a7:c1:40:23:cc:1e:50:cc:92:f6:b3:3a:08:
                    7c:82:14:8e:23:37:3b:a6:f2:0b:35:d6:26:93:a2:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:09:AE:BB:E9:A9:BA:60:CC:24:34:6A:51:74:B5:70:D0:16:E7
            X509v3 Authority Key Identifier:
                keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:c7:0d:0b:d8:78:9f:8f:e9:6a:4c:e6:f1:9a:53:45:b7:
         f1:cf:5d:a2:f4:c6:0d:cc:8d:83:b7:ff:6e:f7:a1:d3:b2:b1:
         b2:07:f9:6e:d4:80:75:d3:e2:00:21:78:d0:a5:d6:4e:59:9c:
         05:62:37:f8:4d:b4:04:3c:24:2f:f0:6c:d9:94:60:a6:d8:e1:
         cd:37:44:d2:a4:4f:c2:d2:09:3d:02:a5:a3:1e:c9:54:92:3b:
         19:c3:7b:92:53:0b:64:99:4f:10:c2:49:57:2a:a6:a3:d4:bd:
         6b:83:75:30:f1:35:e7:1e:02:cb:b6:86:3b:87:d6:e2:c1:38:
         15:40:c5:a0:f4:62:3b:9b:14:39:2f:77:6e:88:c5:53:71:68:
         d9:fb:ec:04:c6:63:3a:78:cd:69:33:5e:b9:5d:39:a4:2a:46:
         19:77:44:16:06:cd:d0:b5:fb:3c:2c:df:a6:6b:15:d4:c2:51:
         1e:40:bb:90:3c:be:aa:82:38:9d:5b:cc:d7:ad:7e:64:96:f3:
         4f:cb:ef:5a:7a:f4:24:03:28:e5:99:44:b3:21:1e:e3:ec:e9:
         62:23:6f:f9:7d:04:08:e6:06:96:c9:5d:df:37:91:51:4d:29:
         68:0e:6d:ac:bc:1f:63:61:24:d2:12:fa:7c:a6:aa:31:0d:44:
         7a:9f:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----