Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File:                     jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier:          gGb6JEZZbJ8DMPx15wmLzrSAjLp8JhV1qdPpfTBlzR8=
Subject key identifier:   99:AD:7E:63:CB:46:05:83:2A:D4:54:ED:F1:BD:FA:7B:98:CB:C6:C7
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer:       /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial:       0194BBCEB2216AC8F97B43295672787965A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 10:01:12 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:12 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:12 +0000
Files and hashes:         1: RJ12iqBIGMdg63G0MMvg2LDMix8.roa (hash: sESw+q0gARk5gtp41IohBHW+APoentCrsvNrV3WWi+U=)
                          2: aUmaQEWRoE1QO_xmwTCfYrd0iAI.roa (hash: KmZy81mfy9sZbmzpjyQc2GLJJhLJJJePfwOXkxp6EMc=)
                          3: h17YXZJyvSVJKfuRPJwacmnQTko.roa (hash: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=)
                          4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: 8IKZ95HB6i4NDQrY9HlfO498z3Dywa1t8M74TKp0ieE=)
                          5: vum5ModJUNyeXtPPKIV3l7J0g94.roa (hash: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:b2:21:6a:c8:f9:7b:43:29:56:72:78:79:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
        Validity
            Not Before: Jan 31 10:01:12 2025 GMT
            Not After : Feb  1 10:01:12 2025 GMT
        Subject: CN=99ad7e63cb4605832ad454edf1bdfa7b98cbc6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:31:54:09:81:80:fb:a2:47:b5:0b:eb:b6:
                    64:d8:17:23:b5:aa:eb:d4:ae:c0:c7:fd:09:a1:78:
                    b0:7e:d2:24:32:98:7a:98:d6:42:56:5e:8f:a7:97:
                    fd:7d:a1:7d:20:09:13:f3:d5:3d:4f:fa:26:b4:9f:
                    3d:2a:51:bb:a0:49:be:6a:48:16:b2:98:7f:3c:bc:
                    91:b6:56:8d:66:d9:4d:fc:92:d5:13:91:32:aa:28:
                    32:29:a6:ee:5d:69:75:3f:41:2a:fe:e8:3a:39:6c:
                    a4:24:e0:cf:43:72:60:8c:f8:af:d2:7d:72:9e:6b:
                    81:0b:21:eb:68:72:95:c5:86:f1:04:1d:31:27:7f:
                    af:fd:4b:93:c4:eb:2f:2b:af:ab:8c:c8:2e:11:54:
                    0e:7b:fd:c9:8c:bf:53:98:3e:86:2f:2d:71:3c:f5:
                    42:f7:d2:59:9b:5f:7a:96:e2:01:e4:45:91:f2:5d:
                    59:75:ea:cd:87:f7:d3:9c:8a:f7:55:fe:06:86:06:
                    35:a4:ae:87:f0:a2:31:e3:00:23:91:79:94:47:57:
                    8e:86:21:73:1a:07:e4:38:7d:59:76:d1:ee:53:a0:
                    13:94:2f:06:67:05:50:d5:34:e2:25:df:4a:54:56:
                    6c:ee:70:c0:3c:19:4a:6a:dd:6e:dd:11:94:05:ac:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:7E:63:CB:46:05:83:2A:D4:54:ED:F1:BD:FA:7B:98:CB:C6:C7
            X509v3 Authority Key Identifier:
                keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:f7:51:68:55:2f:da:fc:c9:ca:45:11:23:d1:8d:37:ea:
         58:69:2f:d8:fd:ba:b3:2a:f3:bc:97:d5:0d:3b:da:24:dd:01:
         a1:c5:f8:59:02:3e:88:45:b8:51:24:dd:bc:8d:5f:64:6a:6b:
         d9:f6:b4:79:99:85:cb:6a:d1:03:d4:6a:25:7e:f5:b5:30:3e:
         c7:26:08:f3:26:2f:35:e1:9a:7d:86:fe:14:5f:9b:80:2e:fe:
         8d:6e:01:82:91:e4:16:b1:cf:2e:dd:69:07:93:68:57:4e:b5:
         65:ef:e2:ac:ae:7f:c8:38:ec:9f:14:c0:1e:7e:b7:bc:65:14:
         ca:e4:74:d2:77:45:9d:24:8f:a2:41:54:3c:b9:10:f3:ae:54:
         60:20:a9:0f:65:f2:cb:4f:be:37:f8:f8:c9:a9:11:2a:a6:ea:
         c6:ed:e5:9d:9b:f6:36:52:b0:8f:0e:d1:c7:6a:87:f9:c9:17:
         78:f1:32:af:6b:48:b8:0e:96:e0:72:dc:03:01:af:38:2b:f1:
         42:c6:3f:e4:d7:d0:51:86:fe:d7:a2:0d:67:a8:5b:48:74:3f:
         48:0f:3b:17:f8:ec:5c:ed:b0:f1:ee:a4:0d:24:ff:48:8d:6e:
         7a:21:ac:aa:ff:af:f1:d7:9f:99:47:4b:84:8a:2d:4c:e1:bd:
         ca:4b:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----