Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          vWUgLIvPtEsuJO5hNLR+TBBW8VtyylFAwZdfCH0iruc=
Subject key identifier:   4B:AB:03:48:86:B9:62:54:38:81:E6:94:17:8B:CB:FA:64:7C:2F:C8
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       0194BC04C6CA5663F897D943CC121612C8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 11:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:17 +0000
Files and hashes:         1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
                          2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: pSTpVzWo5sVYjTrIguvwoXIswx87qre0+52+kjqimxc=)
                          3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
                          4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
                          5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:c6:ca:56:63:f8:97:d9:43:cc:12:16:12:c8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Jan 31 11:00:17 2025 GMT
            Not After : Feb  1 11:00:17 2025 GMT
        Subject: CN=4bab034886b962543881e694178bcbfa647c2fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:39:44:40:56:56:d9:c2:6f:8e:bf:5e:90:
                    5e:70:95:15:ac:58:e9:7a:a1:9a:b7:80:ec:33:6f:
                    5b:75:57:67:a2:24:5f:4b:28:f4:d1:54:83:d8:c4:
                    66:11:2f:87:17:15:6a:38:59:d9:21:a1:64:28:27:
                    68:7f:70:98:12:02:cf:bd:50:13:e9:87:8c:a3:6c:
                    b0:dc:25:13:02:d5:5d:d4:c9:cc:04:f3:db:ce:2f:
                    ea:ae:2f:95:58:ef:0a:e2:a7:19:49:49:09:ef:25:
                    1b:96:60:22:5b:e7:9b:e9:65:30:f8:5b:77:8d:f7:
                    10:8c:e3:b6:18:71:e0:47:0a:57:58:dd:f7:0f:af:
                    37:ac:b5:c2:0d:52:09:54:c8:b4:45:25:47:79:2e:
                    e5:18:39:60:a7:04:e8:62:f8:1b:4f:41:fa:6a:9d:
                    60:a3:c8:34:46:f1:a2:c6:bd:7b:47:a7:55:c0:f1:
                    20:50:67:50:68:fd:6f:f0:58:4a:52:8e:de:c2:b5:
                    d4:32:18:07:cb:4c:96:d7:b2:62:b0:d6:83:08:f3:
                    05:a0:50:52:5c:04:7a:de:ec:7e:09:3d:e5:8e:df:
                    dc:07:3b:50:0e:f8:75:e0:ae:2f:e1:bc:ab:a3:c5:
                    d5:ad:db:a9:2f:74:fc:2c:19:75:c5:55:95:fd:92:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:03:48:86:B9:62:54:38:81:E6:94:17:8B:CB:FA:64:7C:2F:C8
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:59:2d:b4:a1:85:dc:1f:d7:9f:8c:75:26:a4:f0:c9:0f:
         08:f2:13:aa:90:e1:bb:ec:ec:6a:ad:36:4d:3e:f0:0a:ba:0b:
         a8:74:e2:8b:64:a5:f6:4c:46:75:9f:8a:83:7d:08:b6:ee:9f:
         00:91:e3:95:7b:2c:bd:6d:f1:63:d6:dc:c8:12:02:8e:b8:4e:
         00:e0:9c:53:d3:7e:c8:26:91:68:6a:b0:81:ba:2a:0e:53:57:
         06:fa:bc:ce:f9:90:17:9e:7e:3d:1e:e8:f2:e0:49:42:22:55:
         56:53:c9:2b:6b:3b:88:6c:c0:21:1c:f9:41:d7:46:52:2e:6d:
         77:2e:fb:09:5c:7b:b1:2a:da:e7:97:d1:b7:bf:d1:35:a2:81:
         63:2e:ec:21:37:e7:46:89:5f:e4:54:65:00:f5:38:b8:1c:3d:
         61:38:a4:26:1a:98:0c:dc:f7:b2:83:e8:a2:27:4d:89:02:34:
         82:03:1d:2e:86:5c:dd:c5:a2:e7:8e:63:1b:d0:cd:9d:c4:9b:
         29:50:a5:d4:b6:01:fe:a6:e0:6b:71:01:e9:68:49:8c:6b:4d:
         57:33:b9:b4:41:52:fe:8f:df:68:28:17:23:f6:5f:6b:f6:93:
         42:4e:10:1a:72:88:a4:42:62:1a:e6:d8:3d:c7:aa:17:12:52:
         99:84:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----