Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          NV6C3JZUbK2i3ABdLZVfl+eQvpHIJUkQbKhfanNaBuw=
Subject key identifier:   CA:C2:77:F1:80:CE:F9:DB:C8:25:3F:2A:84:DF:79:9D:9D:50:C6:E8
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       0194BC73184504CA9EE55DD464E2F02B6328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 13:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:46 +0000
Files and hashes:         1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: R982mvP57fZ3dL/cFNhyfbOUV8EyOABeqazSbfnND6c=)
                          3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
                          4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
                          5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:18:45:04:ca:9e:e5:5d:d4:64:e2:f0:2b:63:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Jan 31 13:00:46 2025 GMT
            Not After : Feb  1 13:00:46 2025 GMT
        Subject: CN=cac277f180cef9dbc8253f2a84df799d9d50c6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:a7:9b:b4:4c:fd:b1:dd:1f:24:c9:42:b6:
                    12:4a:b6:ff:ea:1d:cb:ba:65:e7:b5:3a:4f:00:0e:
                    10:4d:76:eb:8e:fa:db:26:66:9f:fc:0c:c7:09:ce:
                    34:c6:57:17:e7:a6:ad:de:2f:f8:f8:86:cb:24:6c:
                    bd:be:93:31:8a:88:06:80:00:a7:1c:4b:72:6d:f4:
                    a8:da:53:26:85:57:89:5f:b1:dc:1e:18:d0:47:bb:
                    5f:b3:c4:aa:20:6e:5c:e7:98:cb:99:30:b8:4b:b7:
                    c4:f6:66:bc:d9:13:18:f3:f9:99:fa:82:20:b0:fb:
                    87:0f:d1:ce:c8:24:b4:10:1a:f7:05:bd:0d:e0:2e:
                    c3:48:11:a5:6f:ab:02:a9:c6:4e:5b:f6:46:c6:14:
                    02:09:de:26:d9:3b:01:db:1a:8b:11:d1:60:ab:3a:
                    a1:ef:43:cd:5c:4d:84:94:0a:9c:81:f3:a3:ca:19:
                    c9:e1:0f:a5:88:7d:17:e4:ad:71:f1:b3:4a:16:54:
                    cd:c6:9d:7b:4b:c4:89:12:d8:69:2d:88:6a:a6:2c:
                    51:d0:4f:a9:bf:c1:17:b9:59:28:67:19:22:ac:7f:
                    50:b9:43:33:1a:2c:7c:cd:03:9d:a2:78:b1:13:aa:
                    a2:8d:ef:04:62:12:9c:00:07:a6:d0:ac:4f:d6:4e:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C2:77:F1:80:CE:F9:DB:C8:25:3F:2A:84:DF:79:9D:9D:50:C6:E8
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:2c:20:c3:51:40:31:72:fd:91:d7:08:ea:4e:18:88:71:b2:
         14:40:2c:b5:07:1d:23:cd:38:96:6c:b8:32:74:d0:3a:47:33:
         b9:ca:1d:10:d8:02:6e:2d:78:46:09:03:a9:7e:a7:58:89:12:
         49:5b:70:63:45:5c:31:d1:11:fa:74:b3:73:75:c7:d4:09:08:
         ed:ff:c9:3c:51:c3:3f:62:39:b6:ee:9c:f8:10:ee:3f:6c:13:
         f6:e7:87:a9:28:b3:0a:d4:2f:26:53:52:ce:0d:34:a6:fd:f5:
         25:6e:54:10:a6:90:5d:ba:ef:76:0d:e8:f6:d9:fc:df:66:fa:
         4f:05:38:aa:a1:4a:c0:74:16:e8:67:54:ba:f4:62:5b:69:11:
         a4:b9:e7:b9:1d:cb:9d:ec:eb:ea:b8:04:b5:f3:e6:7b:ef:2e:
         d6:92:53:ea:52:49:0d:9b:1c:c3:43:fa:e2:8c:db:fc:ac:ea:
         03:ec:73:bf:3c:4a:e0:0d:68:06:91:ee:fa:f6:4f:c5:e6:d7:
         34:84:2e:55:c6:43:99:e4:ee:eb:5d:a5:15:91:fd:35:f1:4f:
         95:15:e1:0c:f0:04:51:03:87:34:e7:9c:c2:86:de:25:31:d2:
         28:fa:82:c3:3c:e0:49:df:50:8a:ab:c5:c4:39:23:d6:2e:b7:
         01:bf:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----