Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          FqFFn/ZSfikq3rqmbelFRmbHvX8TwxlUvHMQtxB2L7Y=
Subject key identifier:   BE:32:94:D6:94:97:C2:D9:EC:28:4B:39:52:10:DE:ED:4F:C2:A2:67
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       0194BD85670EE0497251812682C12D02C4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 18:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:23 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: lieR7Ew7ScLdfH7P37pPA0gTa73JBzhNnACewFBfnZI=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:67:0e:e0:49:72:51:81:26:82:c1:2d:02:c4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Jan 31 18:00:23 2025 GMT
            Not After : Feb  1 18:00:23 2025 GMT
        Subject: CN=be3294d69497c2d9ec284b395210deed4fc2a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:2f:4b:04:d7:aa:0c:13:e8:2b:b7:b3:bb:
                    8c:96:6f:35:ea:ed:4a:15:d2:01:86:b3:00:42:f3:
                    a2:93:48:b0:87:09:93:db:01:fd:5e:47:b8:05:09:
                    66:8c:f1:a0:e9:da:7c:28:f7:8f:f4:65:20:7a:37:
                    9d:65:77:c0:3e:28:a0:a5:42:24:ca:73:d6:22:40:
                    0d:bb:e2:71:f8:18:56:e4:96:49:88:62:22:bb:26:
                    2c:db:21:89:ff:00:b1:f0:58:ff:96:83:4d:57:4f:
                    b6:95:b4:38:e6:fe:ac:f0:1b:64:77:70:63:2f:ea:
                    af:d6:8f:ca:d2:1d:5d:38:42:14:44:8b:67:38:18:
                    ee:9c:a5:f5:71:b9:b8:99:a0:d5:51:ae:b1:37:3c:
                    4c:ce:ed:dd:38:46:41:40:2b:49:d0:1d:56:bc:92:
                    bd:69:f0:d6:e1:61:8f:7f:30:e4:c5:44:91:a3:c1:
                    38:a2:de:0f:01:81:3f:45:c0:4a:d7:eb:23:63:60:
                    06:22:80:44:34:9f:74:8a:05:9c:cf:cf:cb:8e:2b:
                    b4:33:11:ef:df:3d:c9:6d:cb:1e:1a:8c:81:1d:61:
                    e6:0c:b3:44:b7:58:38:6e:83:c0:05:a3:26:a0:28:
                    c1:d1:00:f5:f3:54:14:0d:e9:5f:43:c1:4c:d2:2a:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:94:D6:94:97:C2:D9:EC:28:4B:39:52:10:DE:ED:4F:C2:A2:67
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:b5:5b:b8:f7:ae:13:43:e4:4c:c3:95:88:34:c5:27:02:
         de:52:95:52:36:66:bd:20:cb:4d:01:17:96:39:5b:67:c9:88:
         9f:29:8c:2d:0d:bb:91:c7:a8:5b:ad:fe:3f:75:f3:51:09:db:
         87:b3:5b:5e:77:26:84:e4:1c:b2:27:6e:95:2c:04:87:5e:1e:
         3b:c5:df:5f:99:56:c3:d0:a6:07:c2:43:6f:fb:92:a0:5d:52:
         26:78:1e:23:35:5a:d5:63:a9:91:f6:1e:2c:de:d5:20:0a:3f:
         54:b5:b7:fb:08:ce:71:2f:67:f1:36:ab:e6:d2:25:16:aa:9e:
         57:0c:3f:f3:76:86:3f:bd:3b:a2:85:a7:a8:47:66:38:9f:8d:
         55:00:02:3e:af:f3:37:6b:f6:11:16:05:40:7a:d8:32:4b:6a:
         e5:1e:f1:c1:fb:91:72:39:9f:01:46:3a:f6:c8:3d:9c:fe:e0:
         52:89:ad:d5:e2:d2:83:7a:1e:ed:50:88:cb:ba:ac:43:fc:5d:
         b8:98:b3:19:f6:17:a6:3c:b5:7a:22:c9:a0:4b:63:b0:5f:08:
         46:79:16:b7:ff:45:65:6f:14:a6:63:8e:dd:b0:02:59:f8:01:
         2c:85:61:5b:b5:92:5f:fa:a0:59:1c:e4:33:57:01:3e:4f:df:
         19:4f:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----