Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File:                     4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier:          /djA1aXwpHenXKhnlNeZOXOeFFjXEqShho1FSoe47Z8=
Subject key identifier:   79:AF:F0:26:E3:25:68:88:B1:EF:FC:76:9E:D2:49:2F:23:55:D2:A8
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer:       /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial:       0194BC3C9F192B197F014F8A16E97B8DD907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:01:17 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:17 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:17 +0000
Files and hashes:         1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: RPYGG73KY87iacrWPgKAHcKRcmTCWsnM2c4f3Lgl84s=)
                          2: IcskwdSROKi9qZels4yHQYnddgE.roa (hash: vPtKorJ6NxT7CsrYyPVFrqYiL53IkN4t+VtNjaUnOjc=)
                          3: R1WYdjBFxaqOJXdmYl0VkK_31-A.roa (hash: jZxWD0uM9IaDgIRuAxwkdjeq40Xiof3RV5ZUg9OIXw4=)
                          4: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (hash: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:9f:19:2b:19:7f:01:4f:8a:16:e9:7b:8d:d9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
        Validity
            Not Before: Jan 31 12:01:17 2025 GMT
            Not After : Feb  1 12:01:17 2025 GMT
        Subject: CN=79aff026e3256888b1effc769ed2492f2355d2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:67:ba:aa:7a:e5:9b:34:b3:8b:e9:f8:c5:
                    9c:5b:5c:0f:69:5d:99:ea:4d:3e:c7:8c:c7:50:8d:
                    15:1a:52:7a:08:ae:7a:a1:a4:30:77:f8:c6:39:7b:
                    fc:9d:d0:6a:98:bd:a7:ce:d3:3f:cd:22:34:48:57:
                    17:f9:65:47:01:89:1b:9a:71:9d:8d:0d:ed:af:ec:
                    58:49:8a:f4:f7:3f:7f:9b:16:60:7f:81:42:71:2b:
                    8e:34:63:c3:6d:17:fe:78:b0:65:1f:5d:77:26:8a:
                    04:99:2b:3c:94:32:25:4e:0b:23:75:e3:45:c1:83:
                    83:80:a0:94:02:a5:2f:f6:40:40:0e:48:12:f7:52:
                    7f:ca:2d:cd:91:5e:bc:a6:e4:08:88:4f:e0:2a:56:
                    41:89:14:3d:93:fb:df:ce:2f:40:e1:d5:11:d6:7b:
                    20:0b:19:0d:37:5d:ab:5d:61:ab:5d:0f:1d:0e:19:
                    30:9b:90:9c:7b:a8:5f:20:8c:6e:8a:a2:7d:0b:78:
                    05:a0:c3:f3:fd:5b:e9:ad:74:ff:81:23:b2:33:90:
                    bb:18:88:4a:e7:23:d4:e8:0c:96:21:fb:ad:f5:3e:
                    0e:8f:85:9f:e2:95:16:69:53:3e:80:d3:02:38:2c:
                    3e:58:fb:1d:1f:9d:ac:57:25:c8:04:b4:b4:be:90:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:F0:26:E3:25:68:88:B1:EF:FC:76:9E:D2:49:2F:23:55:D2:A8
            X509v3 Authority Key Identifier:
                keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:57:5f:df:13:07:68:79:e9:6c:79:bd:62:c1:55:da:c8:72:
         1b:d0:84:e8:21:88:4b:ee:e2:f2:16:43:1e:c5:d9:ed:a5:f9:
         7c:b4:39:f4:ee:74:4c:bb:bc:77:78:0d:73:63:b3:ac:d5:a1:
         8f:ea:53:77:d5:35:f9:d8:66:ce:9a:f3:ed:78:76:e8:d7:ab:
         80:48:98:de:39:44:64:54:ef:40:6d:d3:22:24:f9:93:43:ca:
         ee:e2:1c:3e:f0:73:cb:1c:1b:ce:3b:61:c8:34:a7:81:70:e6:
         e9:76:35:b6:c7:ee:d4:88:1f:e0:63:74:d9:07:3e:d7:f0:80:
         75:c7:0e:f3:7d:56:d1:d9:6b:d5:33:da:7c:56:66:a7:55:7f:
         e4:d1:d5:04:77:ce:4f:8f:43:3f:1b:77:ea:b1:30:76:5b:f9:
         10:5a:78:de:cb:2e:89:6d:a4:10:32:15:8f:7e:c0:17:21:a7:
         34:08:bd:db:9d:23:fd:1d:41:41:61:0d:8b:3e:51:98:9c:09:
         cd:7a:87:e2:6c:e3:1c:b7:c6:b8:80:a3:73:1d:ed:76:db:b8:
         16:17:fb:a0:38:95:5e:e4:c1:c8:20:2a:97:ec:81:31:40:24:
         34:71:10:9a:e9:27:3a:5e:04:ac:63:cb:80:5b:74:5f:5a:f2:
         8c:9b:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----