Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          ym0ney/73Tn0b5VXwZbhxx1U9CHvmGZUMTg0LDnDCaU=
Subject key identifier:   FA:CA:F2:F2:E0:97:44:25:40:D8:CB:F2:08:95:F5:42:50:31:90:53
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       0194BD85496C48860DC2A2199D085FF542DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 18:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:16 +0000
Files and hashes:         1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: zusNfv1MnouD/JwUBD1uciEIcFJOzd1OL6rbuGyvsyo=)
                          3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=)
                          4: _nUioJBQYiP_fVr8BJqtm1b4PRs.roa (hash: 8TwcjLFByQyQOwz+CZFr+OHfzp46TUFKqsAmkEkj8SM=)
                          5: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (hash: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=)
                          6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=)
                          7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=)
                          8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=)
                          9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=)
                          10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:49:6c:48:86:0d:c2:a2:19:9d:08:5f:f5:42:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Jan 31 18:00:16 2025 GMT
            Not After : Feb  1 18:00:16 2025 GMT
        Subject: CN=facaf2f2e097442540d8cbf20895f54250319053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:0c:62:e1:db:c1:25:81:a7:4f:f8:6e:a6:
                    ad:28:31:3e:37:5a:3e:bf:34:a1:cd:43:55:21:59:
                    d0:d3:b7:d0:d8:02:49:69:83:f7:f8:a9:fc:7a:24:
                    0b:bf:0b:13:8d:af:8d:1f:44:d2:ce:8a:26:e1:eb:
                    b1:ff:85:6a:60:5d:e7:ff:87:39:bd:2c:85:2f:d7:
                    9a:f2:c2:e6:8d:bd:db:de:1f:c2:fa:2a:2e:c3:18:
                    82:a6:10:ea:dd:88:f6:89:a5:16:95:7e:55:d1:c8:
                    6b:68:b5:e3:7e:97:48:d6:41:2c:89:d3:43:09:57:
                    03:e5:6b:12:40:27:64:01:03:4c:98:d6:d0:ca:e9:
                    3e:40:db:c1:3b:c2:62:ed:a9:08:68:f1:98:3b:07:
                    18:c1:9e:d1:59:a9:94:e5:f4:6c:c2:ee:fd:ed:38:
                    4e:b5:bb:9a:97:6d:bb:44:d5:92:d6:a6:4a:e6:26:
                    76:5f:3b:c6:99:57:0a:81:10:49:af:4d:b0:a3:bc:
                    eb:e4:49:db:a4:ec:af:8e:4b:78:1e:88:e4:52:8b:
                    7c:09:55:1b:0c:e5:99:57:77:22:e9:31:5a:8a:d0:
                    03:60:03:25:82:a9:fe:1c:1c:3e:2a:6e:25:26:48:
                    1d:0d:35:fd:da:10:1a:54:62:36:21:d2:f7:f2:b1:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CA:F2:F2:E0:97:44:25:40:D8:CB:F2:08:95:F5:42:50:31:90:53
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:eb:8c:35:27:e3:41:63:77:62:29:43:9d:2b:b5:76:11:
         7a:53:d1:50:09:66:25:4b:89:41:10:c5:af:30:25:f6:48:e9:
         da:e4:74:3f:b5:ea:3a:85:12:36:29:2e:d2:0f:96:d0:89:48:
         5a:95:75:e3:83:4a:20:22:f5:e3:9f:53:cf:d8:46:a9:f6:21:
         37:5d:97:15:76:23:9c:0f:4c:d2:bb:87:19:b5:0a:0e:5d:ac:
         b3:0f:fd:2b:29:98:67:1e:7d:e9:0e:5f:b7:18:44:ad:43:bc:
         fa:fd:18:c3:39:b6:75:be:41:5c:d4:97:ff:7a:2b:68:76:68:
         76:7e:22:9a:c1:92:ca:7f:7b:20:8e:28:5b:07:c6:36:80:6a:
         22:27:ed:83:44:4e:23:35:a6:55:d3:58:18:ce:21:66:c2:a6:
         49:6d:a5:c9:e2:a1:9d:98:c8:9b:c6:ba:50:73:9b:7e:73:58:
         05:e4:81:d1:22:94:88:3d:27:5c:f1:9f:92:b1:c2:45:41:81:
         1f:9d:99:3b:07:88:99:76:43:f9:e0:0a:f8:24:76:7b:51:d3:
         eb:37:b0:68:6b:47:ef:06:74:77:08:d2:4a:0e:83:ac:dd:d9:
         a7:4c:0a:bf:7d:2a:0e:07:c7:71:be:5f:29:46:61:f3:a7:22:
         2a:9f:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----