Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
File:                     67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json)
Hash identifier:          d3L/amjwdZ1aYGVhoAdtweHmmKQDpo+8bUY3gLPon+U=
Subject key identifier:   7D:4C:48:6B:90:19:89:32:FA:C6:D6:8E:45:66:83:60:72:C1:9E:90
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Certificate issuer:       /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial:       0194BD857BC5F7FC158BCC02C037A6C11F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 18:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:29 +0000
Files and hashes:         1: 5zUKmRm-wVqTunF2tT-7Cqs_OWs.roa (hash: 9aHvAui4+yZdhtJErGw75MAtLb8+QGjtqwMfMZbFd3M=)
                          2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: cdvC8HwizHyuZ85GzMaCTR8hTXPdJHyfDLpfbB5qVeI=)
                          3: QvxWT4xY-nx_D6ZNWO2yetZnnpQ.roa (hash: 5hYT1EwCoWhfN9hDbCeHVlJcTh6HqFEGgKcOBfv7338=)
                          4: lzphi4MxBp9BaUcphSOwLVmwZEE.roa (hash: P65ZeDMhywEETdGJgUa5vU1aMaDLOyoDprfHHXlTBBM=)
                          5: v3SWv1n837zLkNGdleDKsMBQDv0.roa (hash: O8MJh8aunH8A9IiDr50FU3GzSB/FL6Wl7jBlBla6VVI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:7b:c5:f7:fc:15:8b:cc:02:c0:37:a6:c1:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
        Validity
            Not Before: Jan 31 18:00:29 2025 GMT
            Not After : Feb  1 18:00:29 2025 GMT
        Subject: CN=7d4c486b90198932fac6d68e4566836072c19e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:01:b7:d8:35:b3:a0:de:99:38:d5:0f:ab:
                    23:1b:b7:fd:15:8b:c6:20:13:21:a7:72:70:f1:17:
                    47:29:38:77:8d:ea:21:f0:da:8d:db:88:3b:31:e1:
                    29:3d:3b:3f:b1:46:9d:e1:16:a1:8a:30:fe:90:93:
                    ae:a2:6f:3b:07:2e:fe:8e:5a:0f:26:c9:53:a6:50:
                    95:c3:99:1a:bd:8c:c2:2d:f8:08:9f:4c:6a:4e:2d:
                    0f:43:cf:d2:e7:a4:00:13:b1:14:f0:9f:e9:09:29:
                    cf:4a:b3:90:01:4c:dd:d8:71:49:ca:e8:6c:52:bb:
                    70:c5:4d:69:5e:50:d7:2d:97:0b:42:69:64:2f:49:
                    9f:f8:9b:a4:b5:e4:1e:27:6e:22:d1:dd:de:03:9b:
                    7b:f6:07:88:b2:68:7d:c9:40:48:df:2c:f5:6b:e1:
                    d9:53:ba:82:89:f2:a3:21:51:27:c7:87:dd:8b:aa:
                    d1:5c:a5:91:34:87:d9:e5:3c:06:ef:a4:c7:12:a7:
                    68:d5:81:06:68:92:44:cf:77:ed:72:e7:4b:5a:0a:
                    59:86:a6:27:85:0a:ce:67:f5:eb:3f:e5:eb:cb:40:
                    2e:8d:e5:81:b9:b2:a8:ad:68:1d:29:5d:93:94:57:
                    d8:c8:95:ef:fa:b0:a6:e1:9c:73:63:b9:9b:26:d6:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4C:48:6B:90:19:89:32:FA:C6:D6:8E:45:66:83:60:72:C1:9E:90
            X509v3 Authority Key Identifier:
                keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:39:12:9a:24:b5:e1:c9:12:dc:e2:71:bc:b3:d1:a1:07:a9:
         9c:c7:fb:8a:2f:89:a7:be:a1:33:19:b9:41:93:81:09:0b:fe:
         63:5f:79:c7:27:6c:53:ec:27:ed:a6:10:ed:a1:a7:28:f6:05:
         dc:70:21:a9:2f:41:19:c5:b3:eb:5e:0b:77:7b:6c:c6:58:d9:
         38:bc:42:07:5d:69:ef:4d:50:82:57:f8:92:32:37:d3:7f:0b:
         b9:c3:87:47:8f:9b:3d:2e:2d:3d:24:b1:72:cc:47:b3:c9:3b:
         71:2b:7a:7a:a2:12:81:2d:95:9f:ff:5b:a0:b9:77:7a:71:ad:
         85:3f:ed:c4:0d:1b:2b:da:d0:6a:d6:bf:32:5d:d2:4a:cf:c8:
         9a:c0:61:78:56:98:da:94:40:78:5a:40:b0:d4:2a:09:71:a7:
         30:a8:e4:49:e3:8a:73:1b:89:a0:0b:2a:09:a9:4c:99:bb:62:
         3e:90:23:e4:18:3b:30:7e:b4:74:58:a5:ef:91:ce:a3:9f:1f:
         e6:66:e7:9f:83:76:6a:6d:03:be:1e:95:f1:a5:04:71:39:22:
         a4:fc:49:08:45:0a:0f:95:09:89:cf:70:9b:e8:90:17:46:8a:
         1f:5e:3b:ba:fe:06:72:57:32:3c:4b:d3:0d:70:f0:5f:b1:d0:
         da:a2:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----