Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File:                     lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier:          7lA2a9w+7aieJuDjxIXHzlSwXo4ey/LfZFxGgOu6/Go=
Subject key identifier:   AE:A5:2E:A7:C9:8B:90:B1:F4:7C:E5:B7:CB:41:27:9E:95:8D:8B:5D
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer:       /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial:       0194BD85380480853401984AB65EB47DD662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number:          128B
Signing time:             Fri 31 Jan 2025 18:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:11 +0000
Files and hashes:         1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
                          2: GWunLY-bXSErZU3FWmnV4-5vVKY.roa (hash: xPAOKfueV0x+XEoysYucTWWsNf2sG+B7HRMkzQ4aBw8=)
                          3: UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa (hash: 1EAW6HIPjECH2TE4ZL4WUIb5JaVxWeaXeK/6ii8nmQQ=)
                          4: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: DSrUvR7wk5u+4V+8qQOyDVQuDpjLfaZr2xctOAjmV5s=)
                          5: qFlx1w2bk_8ZzG6kySrbr5Cw93c.roa (hash: Qx9Q5kDChlIU2guBfz5UZaBHybIZXsMnUw//pyzX4sI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:38:04:80:85:34:01:98:4a:b6:5e:b4:7d:d6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
        Validity
            Not Before: Jan 31 18:00:11 2025 GMT
            Not After : Feb  1 18:00:11 2025 GMT
        Subject: CN=aea52ea7c98b90b1f47ce5b7cb41279e958d8b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:ee:8f:d2:ae:fe:ac:96:eb:92:b3:09:fb:
                    ee:19:a5:eb:a7:bf:4e:33:c4:7d:cb:35:92:b8:d1:
                    02:cb:90:5a:75:1a:3e:52:fe:6e:61:7b:f1:45:b0:
                    4f:e8:f7:63:db:5e:25:ca:87:1b:d7:f1:1e:83:5e:
                    66:f1:0e:c2:93:33:06:81:4e:67:a5:11:60:46:45:
                    05:0d:bf:cd:e4:ec:98:97:58:60:68:e1:ff:d7:a7:
                    93:42:11:78:d4:fb:7a:70:10:b5:45:ca:46:55:05:
                    70:0f:ac:65:cc:8d:f4:99:26:0b:63:16:b5:ac:bd:
                    72:5d:61:bc:d2:ab:37:59:ef:f5:0f:0e:39:7f:9f:
                    5b:6b:e0:62:a6:ee:11:da:fc:79:45:f8:85:e3:4b:
                    22:e3:d7:5e:15:dc:c4:57:2e:57:7d:e6:dd:36:53:
                    2f:8b:9b:1f:2d:38:78:ec:07:5f:12:7b:58:01:7b:
                    c8:f0:4f:2a:a7:7d:75:67:b2:b0:f3:b9:d9:6f:c7:
                    b1:25:0b:f9:a0:cc:09:d3:4a:2b:17:d7:b6:99:4a:
                    13:ed:26:52:04:c0:95:41:24:2a:4a:c1:41:fd:01:
                    5a:9a:90:9c:dd:14:3c:0a:ef:3f:75:54:0a:aa:0e:
                    75:9d:e0:b7:d2:dc:0c:b1:9c:d6:f9:2d:34:15:3f:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A5:2E:A7:C9:8B:90:B1:F4:7C:E5:B7:CB:41:27:9E:95:8D:8B:5D
            X509v3 Authority Key Identifier:
                keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ca:39:9a:f9:dc:9d:36:71:ba:26:c9:39:18:c8:68:80:d9:
         cd:4b:21:f4:2c:a2:13:7b:0b:24:4a:8c:42:0b:c3:7b:ad:13:
         7f:bb:01:ca:31:ad:a3:33:6e:bf:02:5d:a4:50:3a:8b:17:e5:
         7e:76:c6:9b:02:97:18:13:88:07:93:63:2b:f9:60:fc:1f:10:
         fb:f8:74:8e:11:35:26:fb:39:e6:6e:bb:fa:08:bc:58:60:cc:
         2f:3c:0b:d2:ea:dd:3c:fd:e9:92:1c:df:24:55:32:42:7f:91:
         78:43:c5:3a:0b:09:5b:15:d6:b8:17:6d:ee:d0:ba:cd:9f:fd:
         bf:48:5f:57:60:f1:1a:76:cb:02:0a:a1:fe:4d:c6:8d:72:7e:
         c8:c8:fe:dd:14:fb:26:fa:65:a0:95:3f:66:ac:37:56:cf:cd:
         e3:30:f1:1c:17:a1:b8:ae:25:35:91:da:a9:6c:3e:57:85:1a:
         33:fc:c9:36:52:69:ca:8f:b8:d8:24:a8:02:93:70:b5:66:05:
         1f:58:ad:ac:a5:3b:53:d1:c5:d8:d2:c8:8b:6e:64:c1:3a:1e:
         9c:b5:1e:d1:3e:42:67:40:8c:22:d1:6e:03:87:3a:81:76:08:
         44:5a:f8:e1:c2:dc:d9:b4:3a:1e:14:59:14:bf:1f:b2:b7:e7:
         9a:0f:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----