Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          M7ObRvWZwjsUNrMllVXK6bg0R4ftCSG/xl8LjamF15k=
Subject key identifier:   25:01:35:B9:A8:42:DC:99:3A:4A:DB:18:8B:2F:91:3E:01:D5:BA:43
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       0194BBCE51A8115DF61DFD49358AAB202CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:48 +0000
Files and hashes:         1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
                          2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: cHfVECVci9PbXJ8scPndvS36yJTnw02JXS+NdwmkenE=)
                          3: Fds62TGMyTlwM8vRkzaJaGJ5Eek.roa (hash: q5Ow33c1bh3hq1JeVBViO7V2snykjsS/0onMTIgKr4E=)
                          4: lgxcKgVv_ga-kQ8l-IXt7oaWrww.roa (hash: iZEH5X132MyelH64zK6XcxLf4Lw0N+dIMQ6qrHSHgxM=)
                          5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:51:a8:11:5d:f6:1d:fd:49:35:8a:ab:20:2c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: Jan 31 10:00:48 2025 GMT
            Not After : Feb  1 10:00:48 2025 GMT
        Subject: CN=250135b9a842dc993a4adb188b2f913e01d5ba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:1e:bd:7a:10:2b:fb:a3:66:f9:56:c4:7a:
                    ac:60:b1:13:d2:b6:77:39:59:0f:87:7f:77:9b:85:
                    58:21:ec:90:49:f5:3a:46:8c:ae:2e:cc:30:a3:fd:
                    d1:d6:d9:53:b4:6c:cf:2f:c2:d8:cb:0e:3d:a1:6f:
                    39:1f:cd:e1:5d:2b:28:19:4d:4d:69:2b:f8:a1:c5:
                    e7:e5:76:65:20:51:3f:04:a7:c4:0f:8d:3d:bd:57:
                    38:27:68:79:bd:d8:ed:21:31:85:d9:7d:03:90:c9:
                    64:ce:4f:5e:ef:19:0a:6d:5b:29:74:47:75:20:fe:
                    a7:40:8c:3f:79:bb:49:cd:1c:99:d0:6e:a2:70:08:
                    47:30:50:84:e4:fe:12:b9:08:ed:1c:83:1b:fb:bb:
                    69:76:ce:08:76:74:61:d9:a3:a2:6a:cb:fa:e2:e4:
                    e0:9d:c1:55:d9:0b:21:20:1f:be:b2:26:a3:90:81:
                    04:c6:5a:28:d6:de:a7:0c:fc:8c:32:f8:9f:40:cc:
                    52:9d:e9:a9:79:c8:16:9a:c7:ba:5e:cd:a5:da:39:
                    17:83:03:34:df:03:7d:d9:e5:25:50:4b:25:a5:69:
                    29:4c:61:b4:55:c3:bb:52:49:86:1b:30:1d:0b:12:
                    5d:a2:be:f1:d5:c5:f0:65:57:bd:4a:2d:ec:f2:2f:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:35:B9:A8:42:DC:99:3A:4A:DB:18:8B:2F:91:3E:01:D5:BA:43
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3e:1e:e1:04:f0:c3:70:fa:1d:c8:47:52:45:1f:d8:77:8a:
         38:39:c0:eb:dc:21:b1:98:6f:74:98:e6:26:cd:01:d0:05:67:
         58:c9:b1:1b:df:fa:dd:a6:80:cb:8e:4a:c0:b1:f5:f5:d0:35:
         be:cf:e6:58:0a:f6:fa:d1:a8:fd:24:c9:f4:41:f4:47:7b:32:
         54:68:e9:9a:14:16:75:b5:f5:45:3d:10:3b:32:f3:8a:60:33:
         6a:f1:3a:38:f7:34:6a:bb:93:9b:03:a5:b5:1e:02:22:4a:f7:
         8b:ca:8f:70:47:1c:8c:25:3b:ac:a7:d4:c9:c0:e9:95:af:1e:
         b0:18:dd:71:d0:bd:d2:19:d1:1c:cd:65:83:e1:34:cb:c3:a7:
         dd:84:71:fe:6b:0c:f1:c2:bf:f0:d9:48:35:69:5e:d0:03:e2:
         df:65:66:61:e5:29:77:8f:d1:73:ca:2e:d1:15:65:e9:69:64:
         9d:22:02:93:cc:cd:df:29:df:ce:b0:ef:9e:e6:37:59:bd:57:
         93:d7:65:db:c9:3c:77:b1:e0:b2:07:fe:08:52:5f:39:25:b1:
         d4:e3:09:6f:db:10:cf:d5:ac:62:e1:6f:a6:fb:8b:97:7c:bc:
         61:3d:37:57:d6:5c:c7:6c:28:dc:2f:66:5f:7e:45:7e:03:45:
         ee:13:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----