Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File:                     yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier:          sv/IBxxi/8j5kTkJSTEXj84b0tIDQVmLNvOCZyQXeco=
Subject key identifier:   E3:C2:25:2E:B3:AC:76:E8:D6:D7:E0:23:C9:67:31:78:CF:0F:4C:B5
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer:       /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial:       0194BD4E8D3FB9A500C12D40D59A7307764E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number:          FC
Signing time:             Fri 31 Jan 2025 17:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:29 +0000
Files and hashes:         1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
                          2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
                          3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
                          4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: tA7WMYYMNwDsZ5zlWcvf3fPxvLHgQpB1PXaRPOoIsEk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:8d:3f:b9:a5:00:c1:2d:40:d5:9a:73:07:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
        Validity
            Not Before: Jan 31 17:00:29 2025 GMT
            Not After : Feb  1 17:00:29 2025 GMT
        Subject: CN=e3c2252eb3ac76e8d6d7e023c9673178cf0f4cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:52:08:f6:e7:b0:5c:a4:19:dd:f8:d8:5c:
                    dc:94:78:d0:59:b4:81:d5:58:22:30:25:e1:60:f2:
                    a8:5c:a0:37:9f:a4:87:0e:d6:d5:97:16:61:63:0a:
                    e0:9f:0e:70:25:f2:9a:34:8d:3a:62:c3:c8:b6:13:
                    96:91:27:7f:2e:68:bc:49:25:93:7d:be:8b:a0:de:
                    9a:fb:5b:1a:06:1f:ea:f7:71:36:27:a7:00:a3:59:
                    46:0d:41:29:a5:1d:b9:c5:68:44:ad:04:72:de:b8:
                    ac:96:df:bb:bb:c8:67:67:ad:a3:2a:f0:93:1a:bd:
                    ba:1f:2a:a7:84:13:2c:fa:1e:cd:53:06:74:c7:52:
                    59:4e:62:74:e4:d1:ea:96:35:78:22:3b:5d:85:21:
                    f7:17:a7:24:b2:a2:fa:9c:ad:76:07:90:58:af:53:
                    ff:db:b8:83:34:75:91:31:e7:1b:16:09:2f:9a:59:
                    00:93:40:99:d5:23:5c:f1:37:71:9a:eb:80:d5:35:
                    51:17:c1:b7:fd:9a:15:60:e6:c5:34:e8:6b:08:a4:
                    db:c1:d7:a0:ce:66:96:63:9f:20:fb:61:f4:03:8e:
                    e1:71:25:74:23:38:95:2f:ea:12:29:4d:62:dd:fb:
                    37:62:2d:77:7e:04:45:8c:48:d5:9a:8b:8e:76:29:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:25:2E:B3:AC:76:E8:D6:D7:E0:23:C9:67:31:78:CF:0F:4C:B5
            X509v3 Authority Key Identifier:
                keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:07:82:4b:e8:d3:16:f2:75:74:d3:7b:ad:b3:21:ca:86:3f:
         81:de:d3:4f:78:4a:d3:ca:f2:1f:f7:07:45:cf:68:2f:f1:ea:
         39:af:87:de:71:a4:6c:35:f8:61:1f:f6:ec:61:b3:04:2a:42:
         61:71:c4:76:6b:26:85:21:b3:8c:2a:43:a6:cd:bd:56:dc:53:
         e5:b0:de:fd:a4:f8:11:aa:ee:9d:c3:f6:e5:f7:34:51:2a:9f:
         42:8b:c9:72:e6:54:5d:5f:9f:3e:88:9e:35:8b:48:a6:e6:3c:
         95:ae:c9:f1:18:6d:ff:31:f3:11:28:3c:6a:96:ef:ea:06:9e:
         17:8b:33:f1:20:19:e1:67:21:e0:61:25:a3:5c:a2:cf:d1:1a:
         90:2c:f8:3d:9a:fc:20:b0:ed:7a:58:a6:e8:4f:55:39:37:51:
         a5:0c:a4:52:40:9d:0f:47:d8:e3:72:4d:20:7a:4b:45:6f:e4:
         fa:92:b2:1e:50:6a:3d:d6:83:fc:8d:58:8c:7d:8f:78:08:9e:
         29:37:94:ee:7b:82:0f:32:a2:98:64:7e:a0:e2:df:8b:9f:e9:
         c1:07:d8:0a:01:9b:4f:c0:f7:89:38:39:ad:38:0d:45:a5:2e:
         34:5d:dc:74:90:00:9c:0d:64:81:b1:42:5b:39:3a:dd:de:b5:
         65:da:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----