Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          3XyOviAeuFqpqje3jhndzbPItALaEnuyxPnuY6R2ROc=
Subject key identifier:   C4:C0:01:C3:72:B1:7F:FE:37:B0:0D:2A:67:99:A9:6E:60:19:EF:64
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       0194BD4EBA0F2611CA97D127C17040EB0B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          0725
Signing time:             Fri 31 Jan 2025 17:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:40 +0000
Files and hashes:         1: 2IgIKjFRZxy-bzZFKHn9K063leQ.roa (hash: TaUEcihPZQmLVAdKpeFJ7LvkJgT/8Wrq1d0eu+d7laE=)
                          2: Xh1bBljM71iO_oPVnAiexaSjqeo.roa (hash: ejNr43+KNV38s1i2sDwqEp2C8gdCzF3rTEIHrYa15TU=)
                          3: h323ydO3Sd9v2YsN-zcDQa1mrh8.roa (hash: QvKrOv+tpTvsWx2fk3xBAryJLHVIduNpWuaMDmpS6tY=)
                          4: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
                          5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: TJUBG0u57R+02vtkKSYiZbz95/i0etDlH1CoxnyXo4o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:ba:0f:26:11:ca:97:d1:27:c1:70:40:eb:0b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Jan 31 17:00:40 2025 GMT
            Not After : Feb  1 17:00:40 2025 GMT
        Subject: CN=c4c001c372b17ffe37b00d2a6799a96e6019ef64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:7c:c5:e4:2a:c2:ca:01:6f:62:8b:4a:98:
                    24:c5:8e:6a:e5:76:2f:d3:57:8a:f6:18:1b:f7:ef:
                    47:42:14:d4:29:4f:b8:12:1f:79:fe:9e:c2:cb:8e:
                    43:a4:63:00:f3:d7:15:25:b7:0c:7a:40:54:91:5b:
                    8d:de:29:a0:03:97:29:47:25:0b:4c:72:a3:d9:db:
                    cf:59:16:7b:6f:a0:db:6b:f5:ec:9b:73:9e:b8:78:
                    bf:c5:e9:4c:1c:e1:61:fb:7a:cc:89:10:fe:24:98:
                    56:30:1e:8c:0a:50:74:af:ae:6e:0d:0d:74:62:30:
                    5a:59:56:37:ad:7e:66:08:40:b6:60:fd:08:f9:63:
                    6b:c7:6c:1e:87:bd:c3:1d:e3:9e:52:81:c1:64:6b:
                    5a:db:a4:a6:33:07:17:43:92:46:bb:64:21:a6:04:
                    80:78:0f:02:49:d1:8c:e8:11:bc:80:1b:e0:04:0b:
                    ab:3c:a9:62:6c:15:3b:a8:12:25:cc:12:cc:83:36:
                    6b:1e:0d:a1:78:84:73:9c:d0:80:0a:60:72:25:c1:
                    f4:ee:13:d4:ed:cb:7e:a3:c2:da:2a:89:46:db:8e:
                    8f:8b:bc:44:89:05:28:40:98:f2:b1:a9:b7:54:d1:
                    64:a9:1d:c7:14:fd:b9:34:5f:d3:cf:10:78:32:55:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C0:01:C3:72:B1:7F:FE:37:B0:0D:2A:67:99:A9:6E:60:19:EF:64
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:f8:77:f8:d0:fb:81:d7:f3:1a:c5:af:70:ad:a6:84:4b:
         d8:2a:d4:39:c9:b3:77:a2:46:52:4e:e6:5c:86:2f:be:3b:70:
         17:26:ce:6f:2a:6e:9b:40:13:e2:7f:d2:9d:c0:30:2c:a9:2c:
         e5:06:dd:1a:f6:70:88:25:4b:61:cb:b4:d3:74:24:7a:23:ca:
         ec:1a:93:ef:13:b0:b7:e0:75:ee:4e:fa:25:d8:33:41:ed:fa:
         1f:fd:9d:ff:b7:71:89:f4:e3:f4:fb:7e:c0:43:06:b6:5c:40:
         d2:4e:84:fe:fa:e2:84:9a:59:ed:43:7c:66:d0:c4:d4:e9:ea:
         17:67:47:0a:73:30:d5:4d:a1:69:0f:01:7f:68:6b:45:8a:79:
         32:12:6a:05:b7:b0:52:80:d0:19:ea:e8:a9:c7:2a:30:06:74:
         22:fa:c9:6c:6b:d8:2a:c4:05:76:62:09:cd:b8:c6:72:dc:36:
         0c:44:86:31:a4:8a:50:f4:e3:2a:34:c3:84:b5:0a:c3:10:00:
         a9:57:eb:ea:7b:ac:c4:65:6e:cb:6a:c7:83:40:ad:d0:51:ec:
         1d:e4:6d:10:5d:e2:f7:27:bc:46:49:e0:7b:80:bd:68:ad:b6:
         6e:3c:f4:fe:b5:ad:c7:70:da:96:cb:3c:e4:6c:47:78:24:ba:
         c5:89:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----