Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          zoe/yU9BcfaKwS+5O0CizlO+ILI4aW6KbWIMb+Encsw=
Subject key identifier:   62:9A:70:7E:50:40:1A:5F:37:D8:7D:9B:09:78:41:0F:99:24:94:2B
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       0194BD85980B43B421AE5167AC95CEF70DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          064B
Signing time:             Fri 31 Jan 2025 18:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:36 +0000
Files and hashes:         1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=)
                          2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=)
                          3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: S+fmixxh7Ys7bDXP+63gnrWR6CfTEbH8tEfPq+9VxLY=)
                          4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=)
                          5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:98:0b:43:b4:21:ae:51:67:ac:95:ce:f7:0d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Jan 31 18:00:36 2025 GMT
            Not After : Feb  1 18:00:36 2025 GMT
        Subject: CN=629a707e50401a5f37d87d9b0978410f9924942b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:8f:dd:d8:aa:3f:9b:2e:d0:e0:ad:b9:a7:
                    09:6c:f6:6d:d9:a9:ac:55:bf:a5:2f:cc:13:fe:90:
                    45:6f:a8:1a:6f:54:67:6f:6f:e3:e9:86:76:b1:09:
                    76:0d:4e:2e:3d:1b:be:74:54:f7:c3:bf:8c:02:a8:
                    5e:44:64:a0:17:7b:de:63:58:7e:e3:0e:11:e1:d3:
                    73:c5:1b:90:73:3f:a2:de:5b:90:c1:8c:5e:2e:37:
                    f4:46:05:f1:f2:ec:43:24:52:1b:2f:42:3d:5c:c2:
                    be:c2:e3:76:31:b5:4c:a1:05:3f:24:b8:8c:a8:89:
                    82:b9:3a:5e:4a:c5:fa:74:1f:60:20:eb:bd:0f:cf:
                    4f:90:ae:9c:08:d3:43:f0:e0:eb:5f:2a:52:e2:97:
                    c2:2e:15:6c:24:c8:a2:f2:e1:ca:6d:45:3c:55:91:
                    7f:b8:b6:9f:cd:f5:d1:23:3f:cc:95:69:60:a5:7f:
                    2e:4a:d0:1a:f8:a0:15:b6:73:77:9d:89:ba:ed:fe:
                    29:fc:02:59:9b:d8:71:20:0a:d8:bd:62:05:7e:e8:
                    c1:d9:2f:01:fc:dc:76:a8:dd:bb:a8:5b:f0:35:1e:
                    b0:32:4f:be:88:20:24:8a:19:d0:d0:08:15:70:c8:
                    19:f9:19:f8:d9:cc:48:35:d9:0e:c8:93:b6:6d:b0:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9A:70:7E:50:40:1A:5F:37:D8:7D:9B:09:78:41:0F:99:24:94:2B
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:02:32:92:d4:0b:1d:f8:74:23:d3:94:f4:b7:95:3f:c4:81:
         aa:89:22:cc:f3:d6:f2:d6:90:2c:7e:31:ed:6e:10:50:c7:dc:
         96:e9:63:5c:64:e0:7c:a8:06:91:2a:16:92:6f:1e:1f:59:48:
         57:ce:b3:cd:6a:35:17:a2:a8:bb:10:f8:0b:3c:fa:39:84:93:
         45:94:db:09:36:a7:68:c6:1a:39:cf:e3:6b:b5:2d:f0:7d:38:
         0a:55:5a:0a:da:09:48:85:c6:9d:18:e9:e3:98:08:1d:be:bf:
         64:b8:81:1f:24:13:bc:3d:4b:79:30:67:bd:2b:a2:d5:3d:5e:
         e4:a4:82:9c:0f:26:ee:fe:85:11:99:f7:63:52:7e:16:c2:77:
         f2:83:c8:92:44:67:ab:2e:7e:58:c2:5e:60:7b:30:d4:71:0a:
         82:91:cf:d1:71:47:15:09:34:f2:9c:a6:03:ce:f8:7b:c9:39:
         ed:1c:b5:4b:d1:39:17:04:9a:fa:0b:88:0e:dc:65:39:26:84:
         bb:09:11:6f:3a:00:97:10:ca:c8:02:f1:f2:ce:92:ea:8f:ab:
         d1:5e:73:08:76:23:47:49:62:0b:c1:80:87:51:f8:d3:49:f1:
         b4:d2:84:5e:a8:88:3e:2a:48:45:a4:cf:d0:21:52:15:c0:8e:
         ee:c0:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----