Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          6KT/LIIJUx4dzkhjqp5UJpDElbtFSMinv0MBVJ/3oIQ=
Subject key identifier:   48:1A:92:A9:08:FC:37:8F:4E:F0:56:F8:0B:5D:61:6E:32:0A:38:30
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       0194BC3BE67CE7A2A1A33521EF3B761D5625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0373
Signing time:             Fri 31 Jan 2025 12:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:29 +0000
Files and hashes:         1: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: d1YCsM1cV4vWEilzSY7SndeoEEdAOv7J3vbSmuI1S7w=)
                          2: KrFC8vftolRYYVGlWxQEDucfneg.roa (hash: WbXRjMLjuUXZYVIN7TrN7bIgxSN4E7sTfe9bhtA4Hjw=)
                          3: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (hash: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=)
                          4: xls_URztp_DAeCJsOmM6FNO16r0.roa (hash: /lPYqSDLHGVpC6YGjJjccnTgSTQFi56g0vbupkaw1T0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e6:7c:e7:a2:a1:a3:35:21:ef:3b:76:1d:56:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Jan 31 12:00:29 2025 GMT
            Not After : Feb  1 12:00:29 2025 GMT
        Subject: CN=481a92a908fc378f4ef056f80b5d616e320a3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:5c:5b:ce:da:8f:b6:ad:cd:3d:db:77:b0:
                    25:34:62:a8:7b:55:92:49:11:38:86:72:6b:a3:35:
                    bc:c3:4d:b7:55:4d:49:94:78:d9:f7:57:d0:05:cc:
                    55:05:7e:70:94:e5:39:86:56:b7:95:3f:2b:66:c4:
                    bd:d7:cd:19:bc:b8:09:11:31:aa:0c:bd:8c:97:74:
                    e6:98:67:99:a8:06:6f:3c:e2:dd:1f:80:8d:8e:5d:
                    3c:86:4f:c7:2b:b0:61:ee:8b:0c:ed:a1:da:31:3d:
                    c6:80:4f:f3:cf:6b:9e:79:2c:95:33:e1:08:95:d0:
                    ce:d4:4e:98:7a:1b:d0:55:fb:bf:ba:45:ba:c3:1d:
                    bb:f2:b7:66:fb:cf:c1:d1:9a:5e:c7:f9:18:51:04:
                    cd:c1:fc:31:8b:c9:a8:41:63:0b:89:0c:6c:64:4e:
                    07:57:25:db:63:97:77:e1:88:13:a1:a4:93:d6:f0:
                    22:fb:ca:53:80:88:7c:a3:b6:54:84:91:75:3f:36:
                    d2:cd:04:f1:c5:92:65:05:40:11:c0:87:7e:52:c2:
                    d3:12:26:a0:08:8b:18:54:ae:dc:5f:38:d9:0e:81:
                    70:2f:85:d3:c1:bd:a2:84:89:d1:26:f3:82:d8:d2:
                    f3:7d:05:33:db:d0:a5:1b:a6:7f:60:3c:fd:95:92:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:92:A9:08:FC:37:8F:4E:F0:56:F8:0B:5D:61:6E:32:0A:38:30
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:97:37:3e:13:ae:46:4d:d9:b1:e3:bd:c6:d7:0c:b9:99:f2:
         7d:bd:91:ff:1e:29:0f:de:df:a5:25:0e:84:88:20:71:3f:49:
         62:d6:5d:01:db:e3:68:6a:ef:33:07:99:f1:32:57:78:98:bd:
         3d:c7:42:bb:69:f8:0b:6d:36:ed:89:a8:ce:f5:02:3d:34:c8:
         7d:ca:f7:b9:10:be:64:80:75:2a:e0:69:88:ba:a4:ef:2d:9b:
         8d:05:66:84:6c:3d:19:8a:e2:61:89:14:95:94:0e:29:30:a2:
         e2:a1:38:00:1b:b9:99:d6:4b:31:d4:32:ea:0b:e7:f8:f1:2f:
         55:3a:44:71:f4:a5:2f:09:c6:e6:db:fe:04:69:97:aa:89:38:
         86:13:e6:60:d1:b9:8c:fe:92:8c:da:43:fe:76:df:ef:1d:21:
         a2:4b:2c:35:51:e6:7e:8c:83:f1:8d:04:97:98:c8:9b:07:87:
         d4:59:3d:eb:f4:c4:6f:e2:fc:e9:8e:80:5e:1b:34:7f:c0:29:
         8b:6b:64:26:ae:0b:00:c7:ac:49:57:e0:5b:d0:ac:84:71:6d:
         dc:0e:ec:7b:c2:2c:36:47:4b:f5:1a:3a:c4:9d:dc:01:e0:22:
         d1:ec:e8:2b:65:e2:f4:a4:f8:a6:c8:6a:38:cf:fe:2f:dc:f1:
         99:80:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----