Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          SmL9L+N3tf4w9vk6eOCHMNLiLrw33/kpU2eJt6cBKxg=
Subject key identifier:   56:D6:3B:1B:FA:19:63:ED:77:96:CC:8E:28:F1:13:0C:45:22:13:9A
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       0194BCE0BD2F8A8E8E49EAE52095D82A01EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 15:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:32 +0000
Files and hashes:         1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: Tfz3sc/ZNHPC43x3+dvGlwHWnF+Bi+FYhvbX2RoR+DM=)
                          3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
                          4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:bd:2f:8a:8e:8e:49:ea:e5:20:95:d8:2a:01:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: Jan 31 15:00:32 2025 GMT
            Not After : Feb  1 15:00:32 2025 GMT
        Subject: CN=56d63b1bfa1963ed7796cc8e28f1130c4522139a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:dd:80:f6:2d:b1:3c:ea:72:5c:d2:0e:3b:
                    93:10:8f:f5:57:1e:0b:6d:5b:13:28:b4:52:c2:65:
                    e0:8e:58:35:fa:96:1e:61:63:c5:dc:1b:ea:32:43:
                    df:a3:90:95:52:f6:6c:17:64:36:bc:a1:cc:eb:70:
                    a0:bf:71:db:2e:d8:a7:b8:d0:c2:3c:b1:3e:0e:bc:
                    20:b0:ad:0f:87:eb:e4:0b:dd:64:93:55:b4:fe:26:
                    8d:b5:17:c2:09:9f:9b:ef:87:4f:a2:f6:ff:6b:ce:
                    86:52:a3:bd:18:26:6c:2e:a7:eb:50:54:63:4a:2b:
                    d5:36:9b:a4:e8:a0:41:39:52:44:42:21:5c:3f:95:
                    5a:67:38:76:7d:82:af:1a:6e:26:86:05:b6:5e:b9:
                    c2:26:3a:e4:0b:c8:76:71:c9:f8:4c:b7:01:df:f0:
                    8f:f9:e7:fb:d3:93:1b:5c:2f:2a:a6:d8:e1:a5:9c:
                    9f:4b:d4:90:3b:c6:98:55:5f:03:90:28:07:25:28:
                    ea:45:81:ee:d8:6d:70:ae:6a:6e:3f:b6:0d:8f:34:
                    31:30:d9:16:88:9c:a5:38:8f:6d:1e:5e:9f:fc:09:
                    ba:9c:50:3c:81:a7:28:79:29:79:ef:ad:53:67:21:
                    41:2d:0e:00:72:c2:79:ac:ff:a5:94:14:91:2d:bd:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:3B:1B:FA:19:63:ED:77:96:CC:8E:28:F1:13:0C:45:22:13:9A
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:80:1a:01:2f:98:df:42:cf:46:83:69:43:55:86:83:95:
         17:6d:d4:1a:18:e5:6c:4c:36:4e:72:e8:4d:0d:a4:88:0e:8c:
         45:56:8b:0c:fb:ab:d1:db:ea:0d:cc:a5:06:f8:89:89:f8:b3:
         d3:56:78:c8:e1:b1:8b:80:9b:6a:06:4e:bf:f1:8a:79:2a:f6:
         63:e0:1d:25:5f:84:e9:f1:3d:0b:9c:68:65:63:ad:90:53:5c:
         80:7f:4f:bd:ce:41:93:d5:ab:e8:62:02:1e:8d:54:71:41:48:
         f3:09:42:98:47:ee:cf:71:23:e6:06:2b:7e:41:0a:38:b9:69:
         28:9b:91:66:b1:a4:12:9f:b8:0b:21:de:d1:57:98:d6:3e:31:
         e1:6c:de:3c:c7:34:a2:bf:63:a3:aa:3d:09:fb:f4:d6:b3:cf:
         dd:72:f0:12:9f:0f:0c:c1:91:7e:70:53:7d:f6:db:07:b4:36:
         a6:57:a8:3a:9c:f3:d7:70:fb:4a:b9:cb:aa:e6:18:06:7e:a5:
         ee:bd:09:3c:1b:d5:09:0b:2f:77:02:6a:23:63:40:95:ca:68:
         d9:c4:ab:0b:ce:e1:ab:38:9d:6b:26:bc:f9:32:a6:53:08:6b:
         16:5d:4d:8b:36:6a:53:b2:5a:41:ce:2b:43:b2:3e:6e:4d:61:
         10:2d:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----