Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          hJyMzUjQbnjbarf1YNTMXe18zBAtLBOE65oyM3ErU6I=
Subject key identifier:   4A:85:FD:C2:17:95:2B:CA:86:10:A2:C1:54:6C:87:52:4A:8C:5B:E0
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       0194BCA9865170797071CB85A031E001C664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:14 +0000
Files and hashes:         1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
                          2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
                          3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: yk/oxOGum7JaBSrI705U9avfkULml/QtRCoVDMoLfGw=)
                          4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:86:51:70:79:70:71:cb:85:a0:31:e0:01:c6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Jan 31 14:00:14 2025 GMT
            Not After : Feb  1 14:00:14 2025 GMT
        Subject: CN=4a85fdc217952bca8610a2c1546c87524a8c5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:3e:8b:a0:44:fb:9c:e1:63:f6:97:73:16:
                    80:46:04:f9:bf:5d:37:4e:9b:87:ec:c4:1c:6c:0d:
                    cb:48:d2:e9:a0:70:07:6a:db:e6:db:93:2b:84:54:
                    68:02:ac:7e:54:df:cf:26:c6:14:ee:2d:c4:ae:63:
                    3a:25:ed:bf:63:cb:79:84:ed:4f:19:bf:7e:3b:23:
                    5d:25:e5:39:de:54:a2:e1:1a:03:34:1f:3b:61:85:
                    7e:54:f0:0f:ed:80:bb:fc:30:2e:8c:c3:f0:3a:31:
                    b7:ce:a9:b1:7f:e6:8a:3f:23:5a:e4:7a:91:74:13:
                    d3:fc:59:9d:a6:cc:d5:6a:5f:3e:76:19:c7:98:9c:
                    f1:9c:06:5f:1e:88:53:bb:f5:36:5c:d4:85:83:f2:
                    39:75:d5:bc:5e:19:16:63:9d:b9:4b:cf:eb:23:94:
                    1d:4f:f8:4e:85:cd:63:e7:95:0d:20:79:68:f4:f9:
                    bd:e2:9b:72:dc:3e:9b:48:35:18:5d:37:31:24:5a:
                    d1:c9:3e:89:1f:b4:cd:e7:16:c5:43:b1:68:90:aa:
                    3a:c9:57:d6:fe:84:77:d0:56:ae:d9:29:d3:e8:df:
                    8b:79:2f:f8:ba:a3:f2:78:31:3b:d9:37:5b:e2:75:
                    a4:9f:81:69:e0:e0:7b:55:30:a2:b4:d8:49:96:c3:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:FD:C2:17:95:2B:CA:86:10:A2:C1:54:6C:87:52:4A:8C:5B:E0
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:e3:d8:3d:77:0a:f8:b3:64:ae:28:7e:33:84:b7:c2:fb:
         e4:d2:1a:62:44:17:98:ff:30:e4:bb:0b:19:9b:61:11:e2:87:
         02:11:73:4b:c4:5b:cf:6d:1e:4f:01:c3:9c:c6:46:79:34:8d:
         1d:e1:41:d2:d6:c2:ec:69:b6:ef:e2:0c:0c:a7:8d:23:83:36:
         8f:20:7a:b6:a1:e6:79:ec:4e:7f:04:b6:4e:14:09:4c:02:c5:
         79:92:5d:2a:50:9c:7a:bb:01:07:0e:44:74:d4:90:4a:60:46:
         84:71:a5:e2:4a:30:d6:68:d7:97:5e:64:fc:03:61:5f:b1:8d:
         14:df:95:86:65:c2:76:5c:45:54:63:cb:50:29:8e:e8:66:f1:
         7d:c2:d4:6c:fe:cf:b4:87:d2:89:5d:84:67:48:18:34:4c:45:
         7e:66:c4:01:95:18:d6:fe:6a:dc:bb:82:83:f5:65:d1:1c:bd:
         e4:d8:53:37:18:df:15:33:bf:67:1c:79:a5:39:ff:df:81:d0:
         b8:b1:6f:20:46:cb:89:44:ff:6a:af:bc:ef:39:f7:1e:47:b0:
         16:ff:8e:e3:34:bc:b0:64:56:6e:93:c3:45:be:11:e5:54:c0:
         01:96:e7:70:c5:1a:2a:dc:74:b4:01:f5:7e:48:05:05:af:3a:
         7f:be:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----