Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          2wEkHVKmOaK+r1r8pElb/irMXelGYWPog77HlJTkuDo=
Subject key identifier:   2D:B5:4F:C3:CA:70:5D:13:8F:77:3B:E0:D4:92:08:2D:BF:9D:A5:05
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       0194BD85499E8EB85ACC624277F138E3626B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:16 +0000
Files and hashes:         1: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: gRrazdM7rlYqPa5zv9eWZTPbFcYlxYb0fK/1L5A//lo=)
                          2: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
                          3: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
                          4: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
                          5: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
                          6: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:49:9e:8e:b8:5a:cc:62:42:77:f1:38:e3:62:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Jan 31 18:00:16 2025 GMT
            Not After : Feb  1 18:00:16 2025 GMT
        Subject: CN=2db54fc3ca705d138f773be0d492082dbf9da505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:c5:45:73:e1:bf:12:77:06:a3:40:10:d1:
                    fb:b2:4c:92:3c:ff:d1:2e:7d:bf:cb:9a:39:8b:f9:
                    33:aa:3e:d9:34:38:3d:09:e0:0f:00:51:78:91:c9:
                    e4:44:49:6e:a9:e1:03:7c:5f:ef:f2:bf:0b:f7:a1:
                    40:0a:65:14:9e:d6:8a:70:d5:f2:18:62:57:d9:52:
                    b1:c6:52:57:d0:c7:13:3f:ea:1e:84:28:40:69:99:
                    2e:2a:fb:6f:ae:1b:8e:4c:01:48:71:26:28:6a:1c:
                    6f:e8:c0:00:99:e7:2b:3c:77:23:17:21:5c:ef:b0:
                    d1:42:d6:18:a0:ec:fa:56:55:fd:15:84:cf:cb:3e:
                    da:8b:67:65:6e:80:34:5a:aa:1e:5c:ba:04:d5:23:
                    a5:62:58:80:27:11:e8:bf:41:11:ba:f7:5f:de:87:
                    92:65:ce:84:0b:bb:f1:b7:33:fe:c8:54:0f:a1:6f:
                    56:9d:52:8a:af:72:48:62:47:da:24:9e:bb:dd:3a:
                    cc:f9:68:14:28:00:40:7a:03:c0:40:ba:83:67:58:
                    d5:ad:e3:a4:eb:43:fe:6c:c2:89:38:f3:71:5a:f8:
                    ea:70:9c:fc:f0:28:67:1a:8f:5b:12:9e:fc:07:3f:
                    bf:03:a0:43:e8:51:84:e2:23:db:29:84:d9:a6:30:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B5:4F:C3:CA:70:5D:13:8F:77:3B:E0:D4:92:08:2D:BF:9D:A5:05
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:33:ea:30:2d:eb:34:05:2d:5a:ec:e6:6c:d7:2a:03:ea:df:
         7f:1b:e5:0c:27:9d:18:ed:d4:a4:5a:02:c2:a2:bc:3c:fd:e8:
         b5:8b:d6:2f:1e:2e:09:b4:7c:8a:fc:6f:ef:4f:79:78:83:b6:
         f3:cb:1e:aa:65:55:aa:ef:2f:0f:a7:f4:95:e8:b2:13:0c:8d:
         05:b7:f8:69:94:7f:ec:17:67:6d:b9:70:b8:ca:a3:97:a1:af:
         2c:d7:e5:a9:75:c6:8e:8a:64:1e:71:d0:6e:24:d6:b7:73:74:
         c1:0e:9f:cd:5f:99:7a:2b:e1:b5:fd:74:a1:32:7e:4c:2b:90:
         62:50:15:06:40:53:77:52:fc:77:34:cd:b5:de:ee:9d:9b:fe:
         d9:7b:7c:1c:4b:d9:55:81:ff:6d:42:e9:75:fa:72:06:3f:a2:
         b3:46:4c:77:d4:d7:9c:cb:35:f9:89:18:1f:ed:ca:d2:1a:f9:
         b5:01:4f:5c:13:ea:92:88:ba:25:ad:4c:c1:12:dd:8d:4b:5a:
         ad:4f:b1:0c:5a:42:f0:a0:57:d8:cd:d7:3e:c4:66:21:30:23:
         0b:1c:7d:bd:cd:e3:bf:5f:29:d7:96:88:57:ed:ea:d1:7b:19:
         44:eb:df:69:fc:52:42:8c:6c:84:fd:73:74:df:8d:88:25:ca:
         2d:ea:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----