Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          utunVyvxW9NwDwdTccEqbuKYPZPExWsJSSvaUFqbLok=
Subject key identifier:   58:66:D9:E6:F3:4F:95:42:BD:C9:03:00:52:95:6F:E4:6C:D3:53:AB
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       0194BC04C9F51279807814CE646A2035F55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 11:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:17 +0000
Files and hashes:         1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
                          2: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: LJjxPvhdOMO/X1gOR9C/ZkCxcsKJDn8tN3pLhMeepKI=)
                          3: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
                          4: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
                          5: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
                          6: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
                          7: w1Jkwc30Zm1-u5PRd54_RLWNBBE.roa (hash: b//DfWhivHZOy3olewCUbwfnWte1KqYiB/RE4sezwI0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:c9:f5:12:79:80:78:14:ce:64:6a:20:35:f5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Jan 31 11:00:17 2025 GMT
            Not After : Feb  1 11:00:17 2025 GMT
        Subject: CN=5866d9e6f34f9542bdc9030052956fe46cd353ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:ef:b2:f0:9b:32:d5:34:ca:1e:62:d6:66:
                    a7:50:63:41:54:34:87:7c:0d:d5:45:06:5b:4d:37:
                    23:eb:82:19:7f:c6:6d:92:72:de:bb:34:50:31:e3:
                    f5:3b:01:c1:bd:34:b2:1c:b9:8c:e1:d8:9b:ba:77:
                    e3:8e:ae:2b:3e:fd:17:19:c9:12:64:d6:30:aa:45:
                    f0:a1:e9:47:93:96:6e:63:3d:78:2b:66:ee:ab:ec:
                    06:a3:c2:ae:5a:f8:0d:e4:d4:2b:3c:31:23:da:a7:
                    7b:36:6f:de:90:a8:65:51:69:aa:15:b8:3b:74:87:
                    09:4d:b9:41:96:fe:a0:34:99:d4:9a:76:0b:2c:26:
                    3b:2f:55:9a:fe:11:2d:39:35:86:a9:9b:e2:4b:45:
                    7b:ec:64:41:0e:47:87:1b:e5:13:2b:ef:82:80:49:
                    ad:36:12:3b:9a:6d:1a:ce:75:8a:28:3c:37:d0:0d:
                    6c:0b:0f:bd:b1:6a:37:45:f9:ee:41:4c:2a:a3:1c:
                    02:bf:2a:c1:0f:88:25:6e:29:e7:a2:04:85:ff:1d:
                    46:3e:f2:7e:c3:16:e0:76:c8:d9:0a:81:eb:42:fa:
                    be:29:8e:50:fd:35:16:a3:ab:57:0b:61:83:9a:82:
                    07:9f:45:44:c1:81:31:da:4d:67:97:2f:9d:57:7f:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:D9:E6:F3:4F:95:42:BD:C9:03:00:52:95:6F:E4:6C:D3:53:AB
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:44:2f:45:f7:4a:f2:76:6a:0b:ba:75:44:fb:65:50:fc:
         31:18:e4:67:af:fb:b2:0b:44:95:8f:64:93:79:23:34:77:cb:
         06:b7:7c:d7:db:df:71:57:89:b9:68:59:f6:6c:72:e7:c9:37:
         f4:ee:86:e7:9c:23:eb:ce:a0:fb:86:06:b1:2a:89:31:71:54:
         08:c6:3c:76:41:3a:bd:ed:b3:dc:7a:aa:2e:81:52:34:5c:50:
         21:b5:1a:0d:31:12:13:f9:4d:7c:e3:01:be:f1:b1:bb:66:e9:
         e2:70:ce:e5:11:13:8c:67:02:89:4a:3e:8b:b4:7b:19:a5:5a:
         81:54:71:71:f5:4f:a0:d7:ec:e9:7a:c6:89:b0:1d:29:49:93:
         91:69:dc:51:76:39:80:35:75:06:a0:1e:d5:0e:d7:d4:e3:1c:
         8a:35:b8:f4:bc:98:06:59:70:d8:1e:15:7f:aa:ff:da:d1:a6:
         d0:44:bb:c0:fa:1e:92:17:11:af:f3:2c:ee:47:4f:a0:86:6c:
         bc:f7:53:d0:30:42:cc:c6:0b:aa:e5:84:c5:f8:23:08:da:96:
         6b:aa:3c:91:7b:de:30:12:ce:fa:1a:19:f3:2d:e3:f4:47:b6:
         13:e1:45:30:3b:6a:4b:a2:52:61:28:fc:5a:b9:e6:79:bf:52:
         e4:e7:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----