Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          iCH2pMLfqcduNxseUOlrGU88U4Wts4BcyR8VCMSyV6I=
Subject key identifier:   51:24:99:B6:CF:24:3B:25:E4:C8:4B:A1:DE:C7:36:04:EC:3E:05:F2
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       0194BBCE6791A4744F42C8F093221D9650F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 10:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:53 +0000
Files and hashes:         1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: ZawhK6TnAWqcLDkdpA16bAvY58qag1YbLfEj5IEme2U=)
                          3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
                          4: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
                          5: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:67:91:a4:74:4f:42:c8:f0:93:22:1d:96:50:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Jan 31 10:00:53 2025 GMT
            Not After : Feb  1 10:00:53 2025 GMT
        Subject: CN=512499b6cf243b25e4c84ba1dec73604ec3e05f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:32:ad:ac:5f:77:60:c1:84:33:7e:e4:07:
                    ac:b7:10:e6:9a:0f:eb:6e:b9:42:ef:c8:14:78:d1:
                    e6:e9:d4:e5:c4:7d:23:9a:65:47:32:e6:76:43:6b:
                    62:f6:a5:8e:4c:8b:4d:c0:03:c6:fc:0f:36:09:07:
                    7f:42:a5:3a:b8:65:e6:cc:b2:eb:7f:24:e2:06:24:
                    95:3e:c9:48:bc:4f:be:44:10:d1:05:96:3c:af:d9:
                    90:1b:2b:e4:c7:a7:11:37:4c:68:ca:4f:8c:96:ae:
                    ec:a0:73:d8:fc:97:4b:82:9c:1e:29:ec:f2:a0:3c:
                    3f:ca:d7:bb:4d:06:88:63:73:5c:dd:98:04:f4:e5:
                    4c:ef:08:59:3e:c1:e7:07:76:50:7f:26:50:f4:19:
                    04:39:d4:ae:de:24:a8:61:94:3f:0b:35:84:e1:cc:
                    c5:06:bf:3e:d8:79:d9:cd:9b:bf:81:8c:ec:5e:28:
                    6c:7f:da:56:5e:bb:c3:e4:4a:9c:d8:27:c3:63:51:
                    b5:91:af:89:61:02:89:f6:bb:98:f5:d3:26:f2:6c:
                    85:0f:da:87:db:41:5c:4c:ed:c5:7a:23:7b:92:1e:
                    32:1e:39:ba:ea:3a:a6:eb:74:ba:2b:8e:39:84:e2:
                    6b:df:57:a6:28:f0:0e:99:01:da:b8:4b:29:9b:1e:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:99:B6:CF:24:3B:25:E4:C8:4B:A1:DE:C7:36:04:EC:3E:05:F2
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:eb:e1:67:96:30:b7:34:80:38:36:ed:33:7a:d4:13:84:89:
         9f:dd:7a:3d:35:a2:6c:14:59:5c:a2:dc:1f:e9:47:b3:93:c5:
         28:2d:23:26:f4:48:02:24:06:91:c2:c1:02:3a:c0:96:6a:39:
         2b:ef:c3:61:ff:af:29:ac:6c:8c:ab:c4:0b:a3:2f:5d:69:59:
         96:96:f5:2a:6e:f3:f8:23:a1:7d:4f:f0:5a:3f:ba:bb:75:13:
         5f:43:b7:93:05:d8:4e:af:e0:77:7b:52:6f:53:4a:78:9d:3e:
         cb:4e:77:32:37:72:66:a7:dc:4c:ce:ed:08:86:b7:2a:04:09:
         d5:75:35:57:4c:12:80:64:d7:ce:09:2d:80:3b:b1:d1:ed:58:
         3a:b3:14:f9:f1:cb:c6:d4:6d:ba:56:ae:52:40:3e:f6:a0:f3:
         9f:59:22:e1:02:57:db:80:86:c6:fa:bd:51:d9:c2:c1:b7:bf:
         fe:d5:02:59:a8:4b:44:25:5c:e5:28:5c:0f:51:34:9d:1b:34:
         60:96:34:f8:31:a5:d1:d9:1c:72:c2:ce:44:ab:46:a9:b5:45:
         58:e4:80:c8:a1:25:b8:4e:49:86:25:12:59:dd:a9:eb:e3:11:
         b1:b6:5f:69:a9:25:d7:c2:fb:f4:d1:7e:d3:ad:e4:57:e2:bb:
         84:2d:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----