Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File:                     EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier:          wFXCxm2gaI0XM8HeLV8XcRwb1dadetWztcEFHCw6Vh0=
Subject key identifier:   59:F5:0F:67:53:49:AE:CA:AA:54:85:46:E9:40:7C:56:05:37:29:B7
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       0194BD857809E15B6EB296D3610B48F811DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 18:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:28 +0000
Files and hashes:         1: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (hash: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=)
                          2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: 97PrO+V7RyJOnpqr796fwPwhfQxfoH5dHkKWVtDIefs=)
                          3: HOQaozgHqyl7GjdOmYwJNgxkNvk.roa (hash: PI4rJK1t31rRGgg84yxq7H32pDXq4vLAXeRJDFTb2uo=)
                          4: L-ktSUmEt-j51Ho1YnwbbaZLrZo.roa (hash: mUCe0wNtZCh2tznUGkMZqDrtHqmD+Hv4+N6i6ZjwUMM=)
                          5: P2rIwR1CtoaVBqGPtk1uKZu6EAM.roa (hash: 5tzkl0E5Oyrnj5xi/xWoXdn3cp0c7cD7Nd4Yhdv1uSk=)
                          6: hysK0HS4yMpxAiu_amCNQZnsMEk.roa (hash: h9bkQ2M0Hp/TMn65+jd+66CUZ78mTaddUxEZ1BNe0q4=)
                          7: ytEJnGu8gq3161Uk5CSgUCmxit8.roa (hash: 6lM2R/ZrStC7kH6e29r6pEEmVzeiHBYKhVC23vS8jn4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:78:09:e1:5b:6e:b2:96:d3:61:0b:48:f8:11:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Jan 31 18:00:28 2025 GMT
            Not After : Feb  1 18:00:28 2025 GMT
        Subject: CN=59f50f675349aecaaa548546e9407c56053729b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:46:60:b9:f3:12:96:8a:71:f3:a4:df:7a:
                    30:e1:8e:20:d0:a1:6b:e6:32:ee:62:e8:06:b4:c2:
                    c3:52:80:bb:58:72:2e:82:fb:77:d8:fe:91:b7:54:
                    13:b0:a9:5d:77:f7:24:c5:4b:6f:cc:55:45:69:10:
                    ed:95:a0:0f:2f:0b:98:56:14:3a:a2:85:09:df:13:
                    e9:38:26:83:4e:6c:a5:5f:90:7f:b7:d4:e4:dc:8f:
                    83:09:b4:9d:97:ec:84:38:c5:1f:1b:e5:a4:e2:1c:
                    14:af:b7:a5:da:bc:33:56:8b:22:59:a2:97:c2:0a:
                    d7:ba:e0:bf:8f:cc:7c:2f:9b:0c:eb:0c:8d:ab:d1:
                    71:76:e5:e1:98:89:fb:a9:53:b3:e4:d4:9b:f2:89:
                    aa:ed:4e:d8:75:97:8b:32:3e:aa:ca:ba:a5:43:8d:
                    15:80:bb:51:ee:03:88:3a:6e:66:71:23:96:59:db:
                    dd:84:2c:72:bb:f7:b8:77:e2:4b:d4:d3:be:25:7a:
                    84:98:d5:19:9f:9e:76:0f:36:d6:5a:99:ad:25:14:
                    be:f4:b9:6c:85:de:19:60:eb:ba:52:b6:4d:7a:75:
                    87:3d:f5:c2:f1:7b:3e:3f:06:f9:79:3f:f4:e1:ef:
                    ba:39:cb:0e:f2:f5:62:9c:c4:a9:38:13:53:d9:50:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:0F:67:53:49:AE:CA:AA:54:85:46:E9:40:7C:56:05:37:29:B7
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:13:6e:c2:0a:68:79:04:01:01:95:11:09:96:e7:c1:e9:
         d3:ee:19:7d:bd:55:cc:98:8d:de:e4:2b:20:b7:82:6a:95:6a:
         79:71:0c:cf:ae:ca:f8:ed:44:35:fb:e2:fc:2a:0d:7d:28:64:
         d3:89:b6:ba:41:06:3b:a9:71:8b:e2:6c:79:fa:f5:f8:6e:8d:
         84:7a:4e:db:08:d8:09:f5:36:2a:b5:a9:74:19:88:9e:74:55:
         8a:e8:e0:75:95:87:d4:5e:7d:a2:5f:5b:1f:a6:f4:31:74:8f:
         f7:81:f4:eb:9a:94:80:ff:ce:b7:21:b6:a7:98:40:0f:27:e0:
         60:2a:b4:55:5e:83:27:eb:ea:9b:6f:bd:45:c6:4d:4e:51:fe:
         e3:17:1e:0d:1f:d2:9a:31:5e:49:be:a4:79:c8:b9:33:20:52:
         dd:f1:d8:d4:91:cf:c3:d9:d0:d4:da:a9:f3:f0:7c:a4:ef:36:
         44:47:32:a2:d7:f9:56:43:f2:ed:c0:d4:ee:75:89:24:44:64:
         1b:ba:cd:2f:1e:ad:e7:56:f0:d3:a8:ff:96:45:2d:03:5e:42:
         8f:d6:90:e6:11:ae:18:22:d1:f4:ea:4c:d5:22:b9:8d:b4:4b:
         91:72:56:d1:04:cb:53:94:62:c4:45:51:0e:29:f5:30:57:40:
         1f:2e:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----