Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          beZI+WR2WtB0TRBc2/Gkm8XIlbTMkT5hUhr7eKlEEak=
Subject key identifier:   39:8B:DA:28:3D:29:E9:2F:EB:4E:2F:0F:83:0E:69:9D:7B:F6:DF:05
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       0194BD1782AEB5627EDDB5258BD5C29449F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 16:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:22 +0000
Files and hashes:         1: 52J0BX8GyMgXNdNkq4VTfUaee1I.roa (hash: LxSMbtmqO4+rlUteg1TptU78C+skPNBOYr9gFEq1vgs=)
                          2: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: UMxq2zDBKxTcbYliZXbuVQ8Gbj6PBXtXerQcEfCNg4Q=)
                          3: DhrEeypsTDYQFqtn5MxSVP9RNeU.roa (hash: YbsKC7hbnZNHtFxguJmaXdHmEbB7PGi2yECVIv3in+Y=)
                          4: ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa (hash: Q7ZeIOfUNPi7mpE3FmolNTr+UgiuMWmE4orBE7DJEUE=)
                          5: bU9Ico-cyM-PvgK1SQj6vU4e1Ls.roa (hash: doVS673KgZlyTzdhMbWDR8Kab55ovw32HoLTIKOV1EA=)
                          6: zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa (hash: nyGClrw0gv+ItcF8Z6pEhgDK/R+w+uNDhXQXgQXv0GY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:82:ae:b5:62:7e:dd:b5:25:8b:d5:c2:94:49:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Jan 31 16:00:22 2025 GMT
            Not After : Feb  1 16:00:22 2025 GMT
        Subject: CN=398bda283d29e92feb4e2f0f830e699d7bf6df05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:8b:d3:66:af:0f:5e:83:2c:d6:c2:e5:fb:
                    20:7a:bb:3c:4a:e4:a0:ec:e3:35:d1:73:5f:4c:fd:
                    3e:9d:2c:65:0b:32:5b:d2:d3:dc:6d:98:dc:c6:e3:
                    04:98:27:2f:5c:53:78:a5:b3:15:7c:80:5b:d6:b0:
                    fc:f5:0c:1d:8c:79:47:dc:7d:1b:5e:35:9e:91:ce:
                    10:2c:93:93:ea:94:b1:3f:2e:00:8b:38:f2:c9:c4:
                    be:3f:22:20:bc:e8:92:2b:46:d5:a6:d5:c2:d2:dd:
                    27:6a:49:b9:63:89:82:25:f9:08:7f:38:12:d5:32:
                    60:86:9c:16:1e:99:1d:bf:9b:9e:da:09:bd:3c:89:
                    0b:26:a9:3d:69:48:d1:d4:41:52:02:5c:5c:f9:39:
                    87:00:91:3f:93:03:7e:05:bb:16:3d:85:8d:de:48:
                    31:e1:37:0d:ec:73:f4:94:1b:95:f2:65:cd:91:f0:
                    c7:21:21:5d:82:c4:ad:f3:bd:9d:40:24:f1:21:54:
                    98:4c:2b:6e:44:e8:af:43:a0:86:d2:b0:b6:b8:76:
                    b3:04:b7:1a:af:13:db:ae:b6:21:34:e4:67:87:d6:
                    df:b6:96:b2:26:1e:50:99:4d:6d:ce:60:20:ed:a7:
                    ec:d7:a1:d4:c1:25:d5:9d:3f:4c:c5:2f:00:0f:c4:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:DA:28:3D:29:E9:2F:EB:4E:2F:0F:83:0E:69:9D:7B:F6:DF:05
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:42:3c:e7:ed:e8:06:e4:00:40:c6:a7:89:79:ee:37:d9:29:
         07:bd:a9:43:8f:e0:8e:67:db:cc:11:66:4f:02:23:02:78:43:
         fa:18:4e:37:11:88:df:06:88:d2:ae:e7:31:a7:fe:56:43:6f:
         95:24:77:99:6b:a8:e3:38:6c:c2:c8:ae:b3:b8:66:7b:8a:98:
         5d:29:3d:b9:de:5b:60:fd:31:f1:30:97:b2:f5:8c:f6:97:8d:
         23:91:fc:fc:a7:b1:3b:5b:a2:13:43:de:65:91:fc:95:e2:07:
         65:c8:f6:2c:b6:4f:a2:a5:52:ea:25:e9:a3:b0:be:f7:7e:05:
         28:f8:e3:cd:19:3f:62:2a:6f:bb:7a:53:6e:57:b8:9a:02:bb:
         da:20:ae:c4:73:f5:42:7e:d6:ef:a0:9d:b8:b3:fa:e0:d3:44:
         97:2a:f2:ad:43:fa:45:81:87:f5:23:82:f1:a5:81:41:fb:7a:
         f7:a2:cb:d9:f7:8c:ee:68:93:6c:25:69:7d:c0:ba:ef:ed:a9:
         57:f9:3c:71:0a:99:e2:fc:cb:65:78:03:69:47:8d:5e:c0:f5:
         2e:76:50:34:c7:46:aa:b7:03:03:a2:ce:08:93:d4:d4:23:8f:
         dc:ef:2b:2d:5a:62:28:56:f7:1c:be:6d:b4:be:09:b2:57:55:
         c5:32:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----