Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          Gl4E0Y1cZ/VZzzzEh1gXze+knu1Yf+dhCn97CDZpSiw=
Subject key identifier:   48:73:CB:2A:2A:36:33:89:F3:8F:B4:D6:B1:55:63:35:EF:B5:5B:CC
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       0194BBCEE5A6DB03B414FAF9A40E4666EA5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:01:26 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:26 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:26 +0000
Files and hashes:         1: GMzP4FK3BWd73BtB1rspDBtNJAI.roa (hash: RDWj3PKIvnG4Znaa0y/vyFyoiglGm7aIo1wXj8w5Ol8=)
                          2: TrApzRwO46U5cvWOoWRmtJkH50k.roa (hash: jn6OnmEsOzdilDL0UdqQEgfGfw7WKVGdZ+IBRjWfYTM=)
                          3: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (hash: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=)
                          4: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: 4EM9GyWzLMNwwZc8snowqKTU2ZaDphEdOXaTmQtOlL0=)
                          5: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (hash: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e5:a6:db:03:b4:14:fa:f9:a4:0e:46:66:ea:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Jan 31 10:01:26 2025 GMT
            Not After : Feb  1 10:01:26 2025 GMT
        Subject: CN=4873cb2a2a363389f38fb4d6b1556335efb55bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:33:a3:ce:93:83:1d:9d:02:fe:94:24:be:
                    04:ea:65:78:52:61:c5:9e:c0:b3:be:62:f6:51:50:
                    18:c0:a0:ec:fc:20:3d:af:9c:7e:72:a2:ef:25:db:
                    ff:9d:15:39:8d:93:13:a6:54:03:bd:a6:af:b4:2a:
                    42:ac:7b:11:c2:77:dd:20:61:cb:51:11:45:28:b4:
                    1e:37:f0:75:13:6e:19:7c:2f:e7:9b:16:13:e5:ee:
                    40:dd:4b:48:3e:92:a0:e0:ff:9a:ce:d7:0f:52:21:
                    e2:bd:d5:75:d8:60:27:14:34:53:2c:6a:f6:fe:3b:
                    7e:5a:10:b3:d7:ac:fd:aa:87:b9:3d:a2:7f:96:fb:
                    6a:a1:f5:02:e4:ef:dd:18:77:08:e3:df:4b:60:1e:
                    05:89:a0:e7:1c:f7:b2:1e:f5:c0:e5:5c:d7:97:25:
                    82:6b:47:e8:07:19:84:e2:4f:3e:93:2f:dc:c9:fa:
                    b8:e0:a7:22:43:b1:f6:f8:26:f6:64:22:c1:c7:9f:
                    54:59:a9:01:37:37:88:80:42:50:bc:0c:49:23:bd:
                    51:7a:28:b2:55:cd:0a:69:07:a9:a7:18:c0:26:ab:
                    68:4f:a6:53:18:47:ac:79:c8:55:f1:94:29:12:d9:
                    9c:df:25:d8:e7:97:46:5f:87:b6:0e:be:30:79:70:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:CB:2A:2A:36:33:89:F3:8F:B4:D6:B1:55:63:35:EF:B5:5B:CC
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:29:a3:a7:93:35:eb:56:29:43:ba:46:7a:fe:51:05:30:
         fe:d5:d3:02:98:d8:7a:b0:77:24:33:51:13:86:1d:6b:27:0d:
         9b:a4:42:dd:99:11:5c:6c:8d:ec:35:fc:33:77:f9:b7:de:26:
         e1:44:8d:a0:fe:89:2c:bb:b0:3a:da:79:bf:44:13:11:5f:34:
         94:ba:7d:34:09:aa:0e:20:56:5e:e6:4a:55:16:51:19:c6:34:
         d9:53:a5:da:bf:e5:b0:57:69:fc:c9:83:ce:93:6d:01:30:25:
         53:d0:ba:43:70:26:66:e9:08:bc:e9:f4:f7:e2:7b:93:1b:cd:
         7d:52:91:ed:a7:0d:45:5f:07:f8:4a:5c:49:e1:6d:80:3c:8a:
         d6:9f:65:ca:6c:6e:9d:5f:bf:ac:2e:6b:01:9d:a1:0b:c7:d6:
         5a:e9:f0:9a:22:bf:91:19:13:11:0b:d3:3d:a3:08:76:ac:c5:
         b6:d5:13:8e:96:b8:22:3f:cb:96:f8:8b:e4:2c:31:23:d4:fe:
         42:ea:01:85:9c:1d:01:ff:c2:a4:15:47:ed:1c:24:9d:ab:85:
         e4:9e:f3:05:54:83:5c:a8:9e:bb:7e:6f:ad:51:0e:48:4c:4c:
         7b:d1:c1:f2:d4:6c:b9:85:ee:07:88:1f:3f:88:6b:ce:7c:08:
         5b:f4:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----