Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          EFCg8Wtir5feNt6jpZXA0kQ3dkPC1yVKC2ZfuvlsnXI=
Subject key identifier:   F7:4E:58:F0:24:D4:FD:40:7D:27:4C:BD:D3:18:71:28:BF:BF:1E:5E
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       0194BD17A42A102FCB43AA5C5FEA35A80187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: Zs27Nk+zPHZg/NdXcw9Nk0zHRNM3ErQ0gGsdR5dMTo4=)
                          2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
                          3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
                          4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:2a:10:2f:cb:43:aa:5c:5f:ea:35:a8:01:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=f74e58f024d4fd407d274cbdd3187128bfbf1e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:25:c9:e3:ec:d8:0f:b8:ca:fd:7c:57:3e:
                    44:04:7d:31:22:17:17:fd:76:63:dc:49:b4:28:46:
                    02:7b:58:94:8a:74:5c:e9:42:c6:14:e1:90:80:c8:
                    0b:40:f6:a4:27:b3:d8:00:72:5d:65:ed:fe:07:1f:
                    07:97:c9:d0:79:ab:93:6d:e1:a9:87:51:22:f6:cd:
                    b8:30:43:a1:d7:f2:7d:dc:a4:fc:8c:46:05:10:d5:
                    15:2d:c2:cb:44:a2:fc:5d:fc:0a:a8:82:0d:4f:0b:
                    b3:08:8d:57:88:08:19:70:2f:6c:3c:b1:44:52:f1:
                    7a:fc:fd:f0:41:aa:09:48:99:5f:98:95:65:d5:e1:
                    df:36:1e:32:e3:da:dd:d3:35:2c:c8:e9:3c:99:be:
                    13:c4:aa:d1:a2:4d:6e:d8:c8:75:41:e2:e1:f2:12:
                    4f:25:19:9d:9e:7b:30:75:a0:37:14:ae:86:10:0c:
                    2e:a1:cb:c3:f2:f0:fb:8b:1f:e6:cf:12:08:eb:c2:
                    e5:e3:92:67:18:2a:9e:04:40:6d:97:5f:56:37:95:
                    84:16:0a:7c:ae:fd:22:48:c7:84:dc:50:9c:4a:7c:
                    be:b6:19:3b:cc:a0:2d:db:cc:2b:d1:af:a8:eb:5e:
                    85:1f:a7:f5:48:18:11:a1:80:9c:bb:26:a3:f3:72:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:58:F0:24:D4:FD:40:7D:27:4C:BD:D3:18:71:28:BF:BF:1E:5E
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:76:84:c1:9f:10:1a:49:f6:5c:45:c1:e1:cc:94:f4:fd:26:
         ea:78:7c:f6:84:e4:ab:4b:df:50:25:15:3a:9e:7c:1b:05:1d:
         c2:52:98:8d:b2:d0:6c:28:f6:51:6d:80:0e:f9:7a:41:4e:94:
         48:44:c4:80:70:23:f2:47:c4:f9:ca:ee:49:ea:51:11:53:ff:
         9d:3c:78:51:6c:e8:a2:b1:68:7b:65:a2:0f:b5:9d:4f:de:5f:
         33:2e:b6:ad:28:ac:c1:83:4a:f4:85:0f:68:70:a4:49:43:75:
         b3:f0:96:b4:3d:3a:c7:f8:00:5c:ce:1f:f4:ea:e9:ee:ac:1a:
         38:57:c6:89:3c:7c:d0:82:07:0e:bd:98:a7:95:69:65:69:5b:
         f9:b9:82:63:10:5d:ee:0f:05:98:7d:2e:14:9f:fb:fd:f4:40:
         fc:62:83:3f:82:f6:8c:df:f4:6b:ac:1f:fb:06:97:89:d9:df:
         a9:2d:f3:55:82:67:b6:47:7b:93:88:f1:11:ba:ae:78:5f:e2:
         7c:0e:be:6a:db:08:7d:69:f3:50:87:43:76:5b:62:af:77:a7:
         65:c6:ae:a1:58:9c:32:1a:eb:4f:b9:4e:ba:02:86:91:4f:ba:
         b3:97:9d:07:14:2b:9e:f8:fb:d1:34:eb:ff:e7:ef:b4:cd:24:
         e7:dc:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----