Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File:                     N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier:          ML4bezYKcXIraSbLFp0DquDwwumnlOUAdDNV1kPb0gE=
Subject key identifier:   1A:C1:F5:4E:5B:64:06:54:65:50:19:E6:49:63:C9:B7:31:52:97:EB
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       0194BD17B7C6F208A3CEEFF6391918CBF9A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 16:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:35 +0000
Files and hashes:         1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=)
                          2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=)
                          3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: e42Df/7dSDMdrwjPM1mTd0L/3tbyl5vGL4m7dW/JEiY=)
                          4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=)
                          5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=)
                          6: RZJ1dvTFKO9eBVJ_U9x6woW--cU.roa (hash: C1wwVankxAXXgB5KUQmlZ1lYNQlcBbFMWjKjZ9yl10I=)
                          7: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b7:c6:f2:08:a3:ce:ef:f6:39:19:18:cb:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Jan 31 16:00:35 2025 GMT
            Not After : Feb  1 16:00:35 2025 GMT
        Subject: CN=1ac1f54e5b640654655019e64963c9b7315297eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:29:68:c9:aa:b0:54:41:93:d3:e6:80:b7:
                    2f:74:26:0c:91:a4:d5:14:e3:b5:c8:f4:4c:09:3b:
                    6e:39:9b:c3:6f:31:1b:9e:37:68:16:0b:bb:1b:44:
                    57:f7:54:40:f9:7d:df:63:d2:66:a5:e1:94:cb:b1:
                    9c:73:14:38:ce:af:8f:36:2d:96:9f:8f:a9:fb:ea:
                    88:1d:96:73:7a:4e:e9:56:54:63:3d:2b:bc:06:33:
                    75:2f:11:4a:f4:a9:e9:0d:28:45:e9:e9:56:77:c6:
                    65:a6:13:c5:e4:06:9b:44:2c:f6:39:5f:70:ed:10:
                    b1:a6:51:6c:e1:fd:a0:76:16:e3:a9:99:20:c1:48:
                    ff:a6:e9:07:de:d2:f5:2d:63:8e:29:cc:32:b0:a3:
                    7f:a2:39:29:12:8b:1c:3e:35:47:e2:57:6e:b1:cc:
                    80:0d:f0:c5:76:01:1f:54:79:45:1a:30:c4:27:16:
                    f1:13:e3:ba:19:6f:96:27:c8:72:c7:f4:9f:b4:b4:
                    c3:8e:40:53:bf:69:39:6f:32:9e:86:98:50:b2:42:
                    ef:29:30:d2:1f:00:7a:86:75:6d:ba:91:ab:80:69:
                    5b:2b:bc:09:2b:cb:ba:61:62:59:20:3d:a4:bd:c1:
                    64:c2:4c:1e:c8:cd:60:ff:27:f8:97:27:3f:ff:e2:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C1:F5:4E:5B:64:06:54:65:50:19:E6:49:63:C9:B7:31:52:97:EB
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:8b:06:7e:b0:40:e6:d9:d2:e0:c4:f8:50:80:32:6a:63:
         d9:73:8e:ed:32:19:52:55:f8:66:d3:8d:31:e6:15:0f:c9:fd:
         59:50:bf:0c:d0:29:0d:91:8d:7c:dc:fb:90:d4:11:1c:57:71:
         de:06:a2:3d:a2:2a:1c:6b:24:ce:17:c2:70:0e:90:b3:43:36:
         16:ac:c1:bd:14:44:3a:ed:a0:ac:13:a4:39:bd:4d:0a:23:d0:
         8d:a1:ab:d4:f1:60:5f:2a:8f:38:bd:7e:c6:1f:18:5b:78:70:
         2a:c7:4e:83:15:1e:91:34:c6:5c:4c:4f:d3:01:53:32:ff:5e:
         38:d7:4a:6b:1b:37:dc:67:33:d6:34:20:64:af:a8:a3:96:b2:
         bc:6b:a5:4c:34:de:9b:27:9a:0f:0b:00:8a:a6:86:bb:c6:ed:
         0b:46:ea:de:16:7b:b5:c5:57:be:dd:39:a9:43:09:de:3c:7e:
         2d:64:6c:8a:1d:2b:88:03:d2:94:95:f8:32:5e:9b:36:2a:c7:
         2d:20:c5:75:77:e5:db:da:19:5d:8c:7c:b2:a7:0c:78:62:66:
         6d:f9:b1:23:57:66:3d:d1:a5:3f:3d:c1:b9:32:49:eb:3e:d3:
         9b:b2:4a:70:8b:39:ac:6f:dd:6d:bb:6f:16:b5:5e:47:f5:48:
         aa:c7:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----