Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          oXpVU6vX5eai/OTm1KPQRLJsA8vvoFf8MqLM+79Z36k=
Subject key identifier:   B9:2B:17:93:34:5D:2F:FA:E7:5D:49:8F:C8:92:8C:6C:9F:D4:F4:34
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       0194BD85A14EAE564C8C86A3AEEDFF16F549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 18:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:38 +0000
Files and hashes:         1: 8Ka9rxc0YKocFkWcaDXR1ONcgME.roa (hash: usLLszkWwMw6Nc8UOkM6uTFB1CmI/iSWcsPGfnYTo08=)
                          2: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: Gyj7busqiQ3aj0ktyK7otbPP/6BWXUt29vTgmCDIpDs=)
                          3: Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa (hash: rqvXt2CssSw6L3PQ9/nqjpjhgnLM7ZB7CTFTgI4c5Qs=)
                          4: ajS1l9bTEjVqB1ygFPAWcG-Q9kQ.roa (hash: uL6fZ/UsSnnW3wqVpmK15xjLej5W2U7a16D6Y1oklZo=)
                          5: vukdtTF8gJW6aLYtFAgpB-1xyO0.roa (hash: m3ugJ7KMai4fpszgDOIdVX816p3QuqcOk8kPIMOxT+c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a1:4e:ae:56:4c:8c:86:a3:ae:ed:ff:16:f5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: Jan 31 18:00:38 2025 GMT
            Not After : Feb  1 18:00:38 2025 GMT
        Subject: CN=b92b1793345d2ffae75d498fc8928c6c9fd4f434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:40:6a:10:d6:99:7c:dd:c4:aa:f8:6c:d4:
                    46:d6:35:21:12:d2:b0:ee:aa:9e:50:df:b1:d4:aa:
                    bf:a9:02:3c:15:3d:42:c3:9a:3e:57:a3:55:c5:10:
                    8e:d7:f3:15:e0:74:f0:97:ed:49:d3:d4:04:de:9c:
                    c7:5c:8e:76:a4:5d:19:0b:54:8a:56:cf:e5:d6:dc:
                    e2:bc:a9:6f:d9:70:75:8e:81:14:3b:d0:61:3a:18:
                    4f:a0:c7:e3:e0:9d:dc:bc:62:c9:ea:b7:32:7f:a9:
                    a6:c6:25:21:b8:8b:c9:44:26:2d:3a:df:92:0f:1f:
                    32:3f:cc:2a:2a:22:90:a8:a2:d1:5f:50:1d:d2:5d:
                    c4:a7:15:62:5f:4c:32:c8:28:33:b0:cd:01:d5:f9:
                    91:e6:b2:d8:a7:b2:73:0b:b1:d6:f2:a3:60:68:24:
                    3b:4b:38:44:df:ca:91:a0:41:99:1d:ad:b2:9c:35:
                    5a:e0:08:fd:af:7e:3d:55:22:ad:57:ef:2b:09:7d:
                    59:7a:a4:fc:34:83:2b:1a:ae:05:b0:d5:06:32:be:
                    34:d6:68:9d:64:b3:6f:45:18:f2:1f:af:22:4d:27:
                    4e:3b:ed:3c:63:96:62:e7:69:d8:a2:56:c4:9b:f4:
                    79:ba:e2:9d:07:96:80:cf:fd:59:58:2d:e5:ec:38:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2B:17:93:34:5D:2F:FA:E7:5D:49:8F:C8:92:8C:6C:9F:D4:F4:34
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:e7:e5:ff:48:86:b3:0b:93:c5:27:b5:14:c1:ec:bb:f4:
         dd:b5:08:3b:21:e2:45:a8:2b:18:42:e2:69:5c:e0:e1:62:08:
         04:5f:5e:da:11:4b:e1:20:28:46:e0:d8:5b:63:d9:cc:b6:bc:
         c7:8b:54:11:45:27:5d:a2:4a:32:f5:dc:1b:9e:fb:b9:4b:27:
         dd:c4:fe:5e:07:2f:8f:0d:08:60:c4:67:6b:89:e8:16:1f:45:
         05:b3:90:91:80:a3:95:24:94:f6:3b:7f:c8:4b:ef:07:28:58:
         0e:15:89:62:df:1d:dc:47:38:3f:60:06:35:8c:78:4c:c2:1c:
         75:d4:96:fa:e4:b2:35:ab:b3:1a:75:de:dc:c0:76:f8:d8:81:
         4b:7e:96:82:69:c9:e2:e0:3e:ec:81:4a:85:43:7a:4e:25:2b:
         0e:74:ac:c7:4a:02:9f:bb:23:7f:b4:8a:4b:c9:98:b5:b0:34:
         69:69:89:2a:39:3b:e0:03:b0:cd:14:69:a5:71:e5:56:73:81:
         8c:6d:ec:3f:25:09:e7:9a:17:b4:f6:e3:a1:b0:f9:d5:88:98:
         a6:a4:90:1c:7e:7f:3b:0d:76:51:5b:41:cd:0f:06:94:3a:96:
         20:14:6a:48:cb:84:64:30:64:62:9a:6b:e6:e1:eb:fd:54:f2:
         5f:d4:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----