Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          4XZLJZlb/aPClInX6Gy1Dt9VxUlwqwH1JkRiOrgR0Jw=
Subject key identifier:   84:07:F1:7F:FB:23:F5:D6:BE:B7:EB:FB:E0:87:4F:35:F8:89:85:14
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       0194BD8552418532CD884B52BD28D03B7E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 18:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:18 +0000
Files and hashes:         1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: SK0pRYFUiAgYwYPaP4JltW4ufeX4dCpiirRgsE/exzw=)
                          3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
                          4: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
                          5: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:52:41:85:32:cd:88:4b:52:bd:28:d0:3b:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Jan 31 18:00:18 2025 GMT
            Not After : Feb  1 18:00:18 2025 GMT
        Subject: CN=8407f17ffb23f5d6beb7ebfbe0874f35f8898514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:80:fe:63:12:f6:70:c9:2f:b5:92:c1:84:
                    78:02:79:b8:f2:92:74:8f:da:99:ae:bc:20:17:75:
                    15:6f:f2:07:79:35:a6:cb:fc:46:fa:10:bf:d8:1d:
                    d8:e0:b3:21:80:00:ed:76:5c:86:28:9c:29:08:f6:
                    1e:e6:5a:09:86:9f:d7:f0:90:5a:6a:05:df:e8:47:
                    04:f9:fa:46:4e:58:6b:cc:1c:33:10:b7:de:ac:69:
                    f3:76:c0:39:21:ce:e8:63:5c:97:3a:b5:9a:4b:1c:
                    a7:f4:b3:35:2f:85:ae:db:41:e2:18:e7:94:15:b0:
                    b1:58:dc:51:b9:f2:a6:d5:5e:0d:cb:06:70:50:1e:
                    c8:0d:fe:9a:d4:7c:ba:ff:47:54:3a:6b:ac:78:0b:
                    57:24:3f:2e:2b:b0:a7:81:56:0e:17:6b:b2:fc:9b:
                    6d:ea:27:80:be:df:8a:33:2b:00:59:d4:ee:bd:9b:
                    f8:35:92:8a:d8:54:9e:e0:d7:ee:5d:0d:f9:64:0d:
                    ba:31:6d:dd:3a:cf:d4:2e:e4:55:ea:eb:a9:57:e3:
                    3c:19:21:e6:80:7d:af:e3:fc:e9:a6:71:fc:37:00:
                    79:6c:ae:56:ae:ef:07:e5:4e:57:70:da:4c:15:54:
                    85:fd:bb:1a:6b:6d:95:a6:37:73:24:07:51:a1:40:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:F1:7F:FB:23:F5:D6:BE:B7:EB:FB:E0:87:4F:35:F8:89:85:14
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a8:1f:c2:b8:7a:eb:a6:53:5f:51:69:af:1c:99:52:3d:7c:
         29:8f:11:0e:ca:3f:04:5b:24:69:e8:dc:b4:ec:bc:3a:6b:95:
         ae:79:fc:af:37:c8:71:32:14:62:a1:75:5e:07:ca:22:42:2b:
         02:01:bd:f6:c3:ea:63:a6:93:42:cf:58:99:33:4b:76:18:4b:
         c5:ff:5b:59:7f:7f:a5:e1:af:e0:57:63:78:0c:c9:20:c6:ce:
         1c:05:16:02:be:d9:9d:3f:6c:06:08:0b:3e:2c:70:29:66:b3:
         e5:c3:52:ab:94:87:14:1a:bb:4c:12:a4:43:cc:09:05:44:27:
         2d:d9:7a:73:af:25:3b:d2:73:28:66:09:66:11:2c:61:a5:ae:
         82:41:61:72:51:6a:17:ba:11:5a:c2:e6:a1:77:21:99:48:58:
         f9:2f:fc:a4:ac:89:5b:dc:5f:df:b3:a5:d9:70:62:75:f9:31:
         45:3b:a1:bc:a8:89:83:df:3d:d9:f7:69:b1:45:91:7f:e3:ed:
         04:b7:b4:ce:6a:70:85:51:a7:c7:d4:ea:c2:e5:07:f1:aa:56:
         99:1a:a5:4a:af:25:1f:81:98:29:0a:77:c0:7c:92:88:29:46:
         1f:08:0e:b5:77:65:ab:76:10:c9:73:80:87:a9:15:96:64:ad:
         71:e5:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----