Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          ZJtO7N06/eqws/PfVapF4x/prqNwueYE21bWlK54NrY=
Subject key identifier:   DA:C3:93:19:83:75:8F:8F:61:52:07:06:93:BC:F5:78:38:B3:D2:1E
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       0194BCE066DB965F7EB8305F1454D3B97716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:10 +0000
Files and hashes:         1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
                          2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
                          3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: skXfB7n7eZmGCjU4EmzUfr3/exzNrGT/JCbHb+LnA3M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:66:db:96:5f:7e:b8:30:5f:14:54:d3:b9:77:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Jan 31 15:00:10 2025 GMT
            Not After : Feb  1 15:00:10 2025 GMT
        Subject: CN=dac3931983758f8f6152070693bcf57838b3d21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:d1:e2:0b:00:35:12:b8:0b:42:04:99:7a:
                    11:f1:58:72:0e:20:36:01:49:96:1b:5f:54:53:74:
                    f6:68:3e:e0:05:e6:00:cc:0c:2f:d4:c1:18:d4:66:
                    1a:24:e2:80:a6:c3:fa:65:9c:bd:e5:27:d9:91:ee:
                    27:0c:8f:db:55:d0:47:15:8d:62:73:ca:61:36:25:
                    35:76:61:47:88:fe:ec:76:d5:e4:30:c5:5b:1f:58:
                    de:cd:7c:93:05:d1:cf:9b:34:c9:73:58:c0:bd:35:
                    fe:62:a9:fe:de:de:66:69:af:63:eb:e6:14:91:60:
                    79:87:94:47:b0:94:51:ec:10:b5:c8:a0:cb:8c:0e:
                    ab:e5:10:e7:71:81:6e:a7:b1:84:a6:0c:cf:42:f0:
                    1c:46:92:a4:5b:e4:ff:86:cf:fc:e7:27:cf:a8:96:
                    f6:b0:72:b1:4d:f3:b1:ae:f1:b1:c2:57:4d:b4:43:
                    92:42:c8:14:3a:ee:43:f8:e6:c6:ed:a4:49:4f:d7:
                    70:45:9e:48:b6:64:e9:bb:f8:9f:1e:5d:e1:66:18:
                    08:d4:7e:43:88:98:92:52:17:f6:e0:47:a9:e6:83:
                    3a:c2:50:1c:04:f1:44:d6:d5:c0:54:ad:20:d9:39:
                    4f:4d:54:4d:e4:df:6c:52:f3:28:11:f7:75:de:a9:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:93:19:83:75:8F:8F:61:52:07:06:93:BC:F5:78:38:B3:D2:1E
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:97:50:f1:97:7a:e6:73:dc:ed:bc:0f:40:52:c1:dc:e6:f9:
         9d:5f:bc:f2:23:81:cf:27:e9:43:fe:dd:23:60:c0:9c:7e:98:
         8b:af:99:de:3c:08:c1:ab:f7:0a:8c:92:1a:0b:3c:b0:af:6b:
         6f:d9:a9:3e:42:06:ea:c1:8c:5b:15:15:a1:16:fb:37:92:21:
         3d:be:a6:f9:93:b8:63:ce:3f:ec:ec:c7:be:f7:bf:0f:05:71:
         16:9e:b2:c2:09:a9:e2:fb:5f:50:f3:d3:8b:4b:f8:31:fd:aa:
         1b:86:66:2b:6c:12:94:b3:ee:bc:9a:0c:94:e3:02:ba:d2:c2:
         69:48:39:6d:6d:6b:91:77:72:9e:d1:63:64:7a:fa:10:6a:8f:
         fa:d5:47:0c:36:46:97:18:8a:a1:9a:02:6a:7d:5d:b8:49:76:
         46:32:ec:bc:27:2f:92:b1:5b:66:3f:52:c0:95:c7:db:1a:5b:
         dc:40:77:c3:22:7f:63:17:3b:67:be:2b:10:de:04:cc:1c:38:
         a3:2c:d2:61:7b:cd:f5:05:7f:53:e8:33:d0:c2:76:44:98:fa:
         c2:0c:fd:7b:13:e3:64:49:92:53:b8:1b:16:5a:a3:65:aa:16:
         e7:15:96:f9:c1:9b:66:81:a0:28:3d:db:f3:7e:06:a6:71:d9:
         96:cc:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----