Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
File:                     5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json)
Hash identifier:          9cDcd21zcEPLXBVoCq5Lb2OGPfJ1bIcUMVsMe9HfvNw=
Subject key identifier:   85:D1:66:60:0B:B4:A0:D9:63:97:84:FA:0E:A0:26:19:2C:90:D0:1F
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Certificate issuer:       /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial:       0194BCAA363F9094686394FA0977E16F44D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 14:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:59 +0000
Files and hashes:         1: 1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa (hash: EQ/MDCmgP9HHmI8iGVKEHtzDiwjBn6MBBAbffCHgFus=)
                          2: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: POMAzlWJ5yorFkB2fGCv8h6FGlWJCocgH6qH3SndvNU=)
                          3: GSndTXoc8xWBynRYSOSImTWizWI.roa (hash: m9YHTlxhLFxSnEdQXQV56My1RhJzuPVGWH107hhpQxQ=)
                          4: HyczfulBdiGXqNt52BO2o4LV9yU.roa (hash: x9uCEMOnws5vMXyPMhg97WPs5qUhjuF314Fl6KzRZMY=)
                          5: P6YsCB60bdxzv4t_5XQIIDzFPeY.roa (hash: xUCT7UgrS19y4qu5oqKezYDaIbTPOH3d0vqLz4yp/ZM=)
                          6: X1X7ZkF1pBeBlChTftAa-gl-dqU.roa (hash: Gtx9uFZigYKIeTJhv0iE8fOk8wT5aB+bybyaVuFnzWU=)
                          7: qG5K341kb3h2E7rZoTDgHUpgRn0.roa (hash: sSAY774ANoBJ8I/YSkHzgUMD3dk/efHXAZH71Rv6miI=)
                          8: vTdkc2WjRZI77wKyTBFTapZQVng.roa (hash: eGfs9oYTpFW6sbSe0FWlo+6uWtvtpVaDkVPiueIt1K8=)
                          9: xaMWuZ7kA8X17tv7JPD3cAO2gaQ.roa (hash: ATONBIDi86t/gP28VGMYu3coL6c7BDeaABl8Z6IklbE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:36:3f:90:94:68:63:94:fa:09:77:e1:6f:44:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
        Validity
            Not Before: Jan 31 14:00:59 2025 GMT
            Not After : Feb  1 14:00:59 2025 GMT
        Subject: CN=85d166600bb4a0d9639784fa0ea026192c90d01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:72:92:18:01:cc:ca:03:3a:ad:b2:8e:26:
                    b6:f6:e3:1b:0c:81:fd:88:41:59:b9:a1:be:58:14:
                    e6:2f:a4:62:65:c7:e3:d5:31:5a:33:66:6f:b7:f8:
                    b7:e0:98:27:78:63:4d:35:69:1e:fc:35:01:e9:20:
                    8f:c6:c7:64:de:90:ff:1e:68:70:80:a6:8b:f3:1b:
                    bd:5e:08:f6:4e:fb:c8:01:63:6e:0f:f1:dd:41:64:
                    1c:f8:24:3a:90:fe:b0:24:7b:fb:43:af:e6:c5:ae:
                    a8:58:d9:f9:8a:35:8e:54:c4:cf:b9:3c:9a:1f:de:
                    e5:70:54:dc:9a:d8:cc:96:72:58:f6:68:50:bc:b4:
                    3a:f3:da:9d:47:25:fd:b1:d8:1c:e5:08:ad:70:4b:
                    2a:34:e9:e7:80:23:1a:06:2d:30:b1:58:c0:09:48:
                    5c:93:17:2e:40:0d:a6:d1:58:f4:3b:f2:12:b2:08:
                    4e:7f:78:4d:0a:33:d9:7c:fe:a6:22:bf:a3:85:f4:
                    11:81:86:63:67:2a:74:7a:fa:e1:ea:62:b9:f1:64:
                    d0:09:f2:a2:b6:db:d3:73:8b:4c:da:a6:3f:6e:72:
                    46:bf:53:80:00:42:18:4e:16:01:2a:16:6a:79:32:
                    55:46:f9:09:5f:8e:78:a9:76:24:64:ce:5a:5d:39:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D1:66:60:0B:B4:A0:D9:63:97:84:FA:0E:A0:26:19:2C:90:D0:1F
            X509v3 Authority Key Identifier:
                keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:20:6d:36:d0:fd:b9:7d:f6:f9:0f:77:df:1a:78:3e:df:4b:
         b6:76:79:6d:5b:91:31:ac:ce:ae:cf:f6:a8:71:c3:0c:1d:d8:
         93:01:1b:2c:8e:e1:2e:f6:b5:71:98:42:bd:01:49:b6:d5:05:
         99:e1:9a:c6:8d:1c:fc:5a:6c:d1:29:4a:6b:f6:b0:21:64:71:
         a5:18:e3:7d:e2:4e:c2:6d:13:85:19:76:18:a6:07:e4:97:5f:
         a7:b8:f4:a1:69:18:13:8d:52:2e:d9:5b:e4:aa:73:6c:c0:04:
         d9:26:0b:c3:29:3b:d8:09:77:fb:42:b0:6c:83:42:26:1d:84:
         92:ee:33:be:ef:dd:63:5e:67:f2:3d:00:eb:3a:21:83:ee:f4:
         10:29:76:2b:91:fb:8a:e1:fc:8e:70:fe:9f:37:12:20:cb:3f:
         7e:e4:fc:53:c0:32:cf:7e:ea:7e:20:93:7d:88:83:5c:ce:71:
         f5:aa:fa:b1:10:a4:75:37:fa:62:62:18:47:71:25:91:18:16:
         3c:07:09:a0:78:34:a2:75:8e:8a:b4:cb:7f:9d:b5:eb:2d:37:
         7d:c4:7b:c7:33:81:90:88:f4:f0:e8:61:b0:37:e2:73:bc:4b:
         27:32:b2:b7:ce:e7:18:2e:de:c7:d1:b4:48:5b:47:c6:36:3c:
         00:e1:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----