Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
File:                     s57NJPMhmI3rfBncoFKk48SbYOo.mft (raw, json)
Hash identifier:          qEYr9A7sIoxXeGwWHz6HwGe9NPuFxIUH2PgnRAK4cfw=
Subject key identifier:   46:80:F9:51:D8:4E:86:E5:E1:9B:70:ED:04:47:19:06:DA:51:EE:25
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Certificate issuer:       /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial:       019518810EFC31E4074F16E821DD684098C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
Manifest number:          1479
Signing time:             Tue 18 Feb 2025 10:01:05 +0000
Manifest this update:     Tue 18 Feb 2025 10:01:05 +0000
Manifest next update:     Wed 19 Feb 2025 10:01:05 +0000
Files and hashes:         1: 1p2IHKBs7ISSi1a7YtArIEDpOjM.roa (hash: OxYqa3A6Y3cUaAv/fOWO/Iz94WVv+/H8KFLrKdfZ28g=)
                          2: 6JZ9UH910yHAUEGFoLesp07dQhE.roa (hash: 6A7831IzFX8zPNnCTSH8sfKdbN8FCRKu/kOaOqRxzqQ=)
                          3: 8z8XE_zuJT7iRxfD3Nm7JW35RaM.roa (hash: Awo7zmRR7YufMgqjiQFtGr6JAX7ENjcIdiPBtAhhV30=)
                          4: 98vaNEm95pt-uwkA18ziAJaWi38.roa (hash: iAHScneGNquN5STpcXMFp/ADnva4h2JPLkaQ+DHaQxg=)
                          5: Nootmr_1fD6DdEiatPiPGuH10S8.roa (hash: Iq+mDaKD0pEih7QU9s0tMTAbnr2OC0dHlN8xlYA9ft0=)
                          6: OItafVoscno7FuyNNvGBp-DW6j0.roa (hash: GX87BGesq0ZALsrb7s01c+j4Bu2tQMGcbQCDBFji5sQ=)
                          7: QYMBoTP839ez6fMKYJDIpy0Y8cs.roa (hash: dcm0OYfvcaGkXdf87oK+gQ2QoJurOOn6byziNndBdkg=)
                          8: aSysxnkmwlKt5KafMm9eaom1Mes.roa (hash: WLfi1/mK1I3HkwHidkvn9gv6UB5TEtKdlEgaiWslQF0=)
                          9: cuCge9KM2TKAhVTi9ynWt17G8_w.roa (hash: YgXfLEGrSNrmrEYZ3szZ1Igl/AFRNg2kWhzJFGOgm+o=)
                          10: fQyJO_vQCzMCuane2mjx8wERyOE.roa (hash: DuhZxdHXSgqMA9Obqb4l5NM1Yvjmzxlhb+LLMyEn/Nw=)
                          11: s57NJPMhmI3rfBncoFKk48SbYOo.crl (hash: Yj1aaS+Eb6Ko8qUyTbQr4GktGsWSQWUhyz2SrASE2sE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:18:81:0e:fc:31:e4:07:4f:16:e8:21:dd:68:40:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
        Validity
            Not Before: Feb 18 10:01:05 2025 GMT
            Not After : Feb 19 10:01:05 2025 GMT
        Subject: CN=4680f951d84e86e5e19b70ed04471906da51ee25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:08:48:b8:d4:7e:fa:9d:a1:10:b9:3e:ef:
                    fe:ba:89:da:b9:46:6c:a4:82:13:03:94:65:ec:24:
                    30:e0:37:34:27:77:21:b3:64:3c:a1:f4:c1:a4:ae:
                    77:90:46:b2:be:38:97:1e:ce:cc:83:96:37:ae:91:
                    ea:25:94:44:70:e1:55:80:52:d3:d1:99:c3:04:a0:
                    39:42:34:97:4c:3d:54:4e:dd:7c:3e:20:cd:35:62:
                    36:fb:a0:ed:d7:b1:be:55:cd:61:cf:1a:fc:32:41:
                    f8:64:23:b9:a5:4c:64:4b:04:64:fa:72:65:21:71:
                    28:9a:fb:e1:79:8f:b4:13:ac:71:fa:92:e2:c1:6c:
                    98:de:e9:8f:20:cd:cc:ae:bb:3c:23:05:68:41:7b:
                    82:12:83:4d:97:3b:bc:2f:9d:68:c9:f8:6f:7d:7e:
                    15:e9:10:5e:69:cc:eb:d1:37:ec:6a:93:79:3f:6a:
                    5d:27:47:c5:7a:5f:b2:cc:57:b2:f3:6b:ef:fc:15:
                    34:97:fd:c6:93:6d:d8:10:c3:ce:41:7c:7c:b1:f0:
                    10:c5:7b:c5:74:d6:af:b0:74:3e:fa:8c:a0:fe:69:
                    f5:e3:17:33:6c:11:28:d3:f6:5f:40:a8:0e:49:6f:
                    da:25:62:5c:db:0b:38:0e:3c:81:de:28:62:81:fd:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:F9:51:D8:4E:86:E5:E1:9B:70:ED:04:47:19:06:DA:51:EE:25
            X509v3 Authority Key Identifier:
                keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:2a:9a:36:c8:e6:80:ab:f0:07:28:08:d4:d8:b2:95:0c:
         a6:26:5c:21:2d:02:95:65:d8:33:4f:fd:58:34:df:98:8a:43:
         3d:47:2d:e4:38:26:2c:32:0e:39:dd:eb:fc:46:a2:b3:06:d2:
         ef:70:4b:16:60:9b:f9:9d:89:7d:4b:5d:61:dd:23:dd:b5:59:
         3c:b8:b3:86:0b:1b:fe:b8:4a:31:7c:d1:94:90:31:b2:84:3a:
         36:6b:6e:23:75:3b:16:ba:88:eb:65:33:1b:3a:f6:8f:dd:e8:
         fe:38:b5:10:98:cc:c0:da:72:9e:4c:cb:28:ba:6f:d2:bc:4d:
         74:dd:53:ab:5e:fd:d0:3c:62:28:90:5b:ca:50:84:f9:27:44:
         1c:9e:4c:3a:cb:fb:19:3e:1c:ac:d8:50:0b:e7:60:e5:7c:de:
         3e:58:de:87:3c:1f:6e:58:29:6c:dd:5c:eb:27:6c:2d:f5:2c:
         f9:ed:b8:ab:28:83:b0:68:e8:0d:ec:1d:23:7f:2e:54:b1:ca:
         c3:16:b2:13:6e:d4:4a:87:6e:62:7f:fa:75:98:70:12:b1:60:
         8d:fe:e7:12:31:0e:2a:5b:74:d2:77:3b:e8:9d:9e:9c:1b:7b:
         51:91:a6:58:7d:b8:bd:ab:6e:4d:3f:d6:79:f0:54:4b:f4:f8:
         67:de:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----