Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File:                     yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier:          aQVu1DPL868OFV2cjy5OOhOdmS9u2CaxG+3QvZqlLQw=
Subject key identifier:   1B:B1:98:30:C7:5F:F2:4D:D9:DF:ED:79:4E:D1:A1:56:48:E3:49:E7
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer:       /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial:       0194BCA9AE55559522CAE3D4A4A05C321F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number:          0853
Signing time:             Fri 31 Jan 2025 14:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:24 +0000
Files and hashes:         1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
                          2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
                          3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
                          4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
                          5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
                          6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
                          7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: s8i0fVCNwEPsWbsoTV3QsMc9bejERTZLE6Uw+8bC/aY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ae:55:55:95:22:ca:e3:d4:a4:a0:5c:32:1f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
        Validity
            Not Before: Jan 31 14:00:24 2025 GMT
            Not After : Feb  1 14:00:24 2025 GMT
        Subject: CN=1bb19830c75ff24dd9dfed794ed1a15648e349e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:6a:14:a5:5f:af:ef:56:b1:ca:1e:ae:89:
                    70:34:19:82:a7:c8:1a:0c:f8:01:e7:e4:8d:57:15:
                    5f:2b:ff:56:90:a9:c7:f9:3a:c9:66:44:dd:3a:d8:
                    ce:71:38:dd:e5:38:1a:f7:85:8f:43:63:03:87:28:
                    75:64:7a:9f:ed:ed:06:2b:a3:51:5a:7d:67:08:77:
                    48:83:89:a0:92:28:c9:a3:ce:84:67:cf:7d:35:38:
                    8e:47:6c:1d:eb:44:7d:c3:4d:7b:c7:d3:3e:80:ad:
                    01:54:07:8e:3b:ba:eb:17:b6:d7:2b:d2:31:ca:ca:
                    26:f1:16:3c:d4:73:1d:5f:01:30:2d:3c:85:92:1c:
                    d0:0d:93:a6:03:97:23:83:95:74:3d:f4:72:37:d2:
                    e9:f0:68:56:49:b6:8b:eb:8c:32:cd:5c:ae:19:69:
                    d9:c7:f7:2b:0c:62:5d:bf:d9:6b:a4:80:85:b7:e1:
                    bc:ac:b8:08:7d:42:c8:f0:6c:ce:17:60:1c:88:d4:
                    79:9d:79:c2:c5:e9:ed:51:49:10:31:3f:2d:f4:04:
                    c1:25:77:f1:62:d2:15:bb:5e:a7:74:ac:66:00:35:
                    0f:d7:d8:26:5c:dc:18:59:24:5a:3a:0c:0a:e2:47:
                    c7:a2:4e:c8:71:fc:7a:66:0b:ff:84:f3:2e:82:d7:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B1:98:30:C7:5F:F2:4D:D9:DF:ED:79:4E:D1:A1:56:48:E3:49:E7
            X509v3 Authority Key Identifier:
                keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:42:e1:ff:d1:9a:27:99:06:15:eb:9a:80:55:59:2f:6b:a2:
         04:5a:a2:24:3c:8d:c5:d4:a7:db:f4:dd:1e:b6:23:e7:76:19:
         57:9a:9c:0c:d4:f1:3d:ae:db:4c:78:aa:66:a0:e3:07:b2:99:
         25:de:67:2e:40:2d:bb:10:ab:69:ab:a6:4d:ab:ad:3a:0a:e0:
         8f:f0:28:98:73:77:69:b3:a7:f1:65:ae:8c:9a:0f:98:c7:24:
         48:e4:68:64:e5:9e:67:e2:86:a2:76:bf:bb:8c:59:19:81:f0:
         de:c7:2e:60:06:cc:56:d0:b4:74:08:f5:2e:e2:33:2e:8f:fd:
         2d:85:9e:ad:54:6f:51:28:96:a0:f4:08:1e:a5:4d:de:a9:e3:
         89:fd:b3:df:55:de:a5:80:ac:28:fb:5a:f9:4a:61:2f:08:df:
         71:0f:f7:f5:aa:82:0f:97:16:48:fc:2e:1a:85:62:35:12:95:
         38:70:1f:43:31:ef:2b:04:a3:b3:07:e1:9b:62:e3:7e:a9:61:
         ee:a1:3f:72:a0:f4:bf:fc:56:33:be:e5:d7:1c:91:26:9d:3b:
         75:06:2d:53:23:f8:15:5c:29:15:ef:b0:3c:c3:3c:19:a0:fc:
         22:6a:a5:d0:1b:43:ac:f5:ff:c7:3d:2c:63:20:ae:75:ce:45:
         ef:08:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----