Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.mft (raw, json)
Hash identifier:          zeBxjb6GwDsraMiWX1wNL+NVXkTl6z4pJm9GR7avoAw=
Subject key identifier:   73:E4:DD:E0:9D:41:9F:2D:D3:99:04:32:D3:A4:3D:93:51:6C:9D:C5
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       0194BCE0C32D87F9CFE7B1EECE59D0B0BB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:34 +0000
Files and hashes:         1: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (hash: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=)
                          2: VUrbcrguz6_FcF4l_ryrXILXbuY.crl (hash: PstebLrTLGdRW1GjzsCADu8WUxEepYecOGtoeXHfHHw=)
                          3: dWNiEP0LUD7dSvktQv2INrJGJiM.roa (hash: WMIYaY37kYwm6mWlb4q4EjyFluke1DA8FS5pDir6lhY=)
                          4: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (hash: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=)
                          5: w6mGOoQojvsniraRaXbmULybcGI.roa (hash: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c3:2d:87:f9:cf:e7:b1:ee:ce:59:d0:b0:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: Jan 31 15:00:34 2025 GMT
            Not After : Feb  1 15:00:34 2025 GMT
        Subject: CN=73e4dde09d419f2dd3990432d3a43d93516c9dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:df:c6:46:f0:a5:9c:6f:fe:72:52:d0:1e:
                    a1:9e:c8:8f:ae:39:6f:38:34:be:10:9a:5e:16:5e:
                    14:0c:9c:87:f2:94:76:28:b2:1f:d3:66:27:e9:2b:
                    5a:ae:fb:ea:82:9c:67:f9:29:64:24:c8:01:3d:7b:
                    9e:8d:12:cc:2e:57:c5:ca:62:f9:9b:74:09:2a:e5:
                    ae:97:b1:bf:b5:05:bb:bd:3a:9b:fd:20:12:88:8c:
                    31:6a:82:1e:9d:56:14:10:b7:06:fe:02:2b:ef:78:
                    28:42:07:e8:4e:10:6a:b2:4b:47:eb:e4:b6:76:dc:
                    45:e1:82:96:86:3f:ba:1c:df:48:39:17:50:b3:7c:
                    80:36:c0:af:43:bf:f4:37:b9:b8:7f:f8:d2:42:58:
                    ff:2a:d4:c2:9e:b4:ae:70:47:75:92:b4:54:58:68:
                    3e:7b:48:3f:ed:21:78:d1:6f:9d:a5:b7:ce:62:ad:
                    c4:90:1a:7e:7b:82:b4:1f:01:8f:26:44:dc:a3:c2:
                    ea:30:e9:c3:f1:b6:ab:3b:79:33:93:0b:89:30:e3:
                    90:13:e6:51:c9:d1:67:80:f0:d2:50:79:2b:94:0e:
                    e1:e1:bf:4b:5b:2a:1c:f9:76:a5:e7:02:ed:81:2b:
                    e8:9f:17:97:b7:47:1d:9c:b3:2b:aa:93:d9:c1:6d:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:DD:E0:9D:41:9F:2D:D3:99:04:32:D3:A4:3D:93:51:6C:9D:C5
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8e:45:dd:55:ae:9d:c1:7b:2e:c3:fe:79:18:44:56:b3:e6:
         ce:5b:11:e4:c6:fa:7b:ca:a4:4e:60:07:24:a2:f5:7b:d7:fe:
         35:d1:ae:06:87:81:0c:92:32:67:e6:15:df:56:5d:ff:1b:14:
         2e:4e:42:03:4f:d1:76:71:59:ff:ef:b4:cd:a5:7a:5c:5c:ff:
         9d:5d:84:0c:1c:e2:5b:ce:58:07:05:83:3b:a0:d7:44:8b:0a:
         62:06:40:6e:f7:29:c3:b0:d4:3b:a4:b1:3c:06:d9:98:70:8a:
         0d:42:c6:e0:f0:8b:94:30:58:c7:f3:d0:16:0a:04:12:26:6c:
         98:bc:18:d6:ad:eb:c0:97:6e:f8:d0:85:34:8c:16:2b:02:81:
         ed:cf:f6:b9:ed:6c:4b:9e:70:ae:6d:1f:e8:9c:59:f7:c7:e6:
         fc:5a:c3:8e:d0:a6:8c:e6:b8:4d:0d:41:9b:13:a5:10:ea:77:
         9d:e1:c1:1a:27:62:84:ad:aa:7c:6c:e4:af:0f:fa:68:1a:40:
         9f:a4:d0:99:ac:23:7e:17:1d:3f:42:26:54:ff:e7:e7:ed:59:
         51:83:c7:32:32:a9:7c:21:5a:1b:3a:5a:72:ae:33:e1:7a:ba:
         67:83:23:32:a0:06:82:98:e1:d3:9b:0c:5a:73:7e:dd:48:60:
         2a:2f:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----