Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          1shVly58ma249AgSk4doF2/aG3HbrmEE65lGaQnDIA8=
Subject key identifier:   10:48:04:DF:AA:93:56:0D:92:D1:DB:15:96:C8:A1:58:94:E3:67:DE
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       0194BC7292D54E88DE95525156D80A972B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 13:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:12 +0000
Files and hashes:         1: 2pE0oMIP3Tz1w2_Xq5HX5IVErYg.roa (hash: imwzpoGiOATUp0Mtdl7n1pWxHoBVgMKLDu0IclMIwM0=)
                          2: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
                          3: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: 8ZyZZ1YMud26TYDwAZlsvF4Ftd0qaytbteLRdojc/xs=)
                          4: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
                          5: djO61kFjXCO0xocrlmDU-5Sp0fc.roa (hash: 0xAZ2mBFWaSkxTIzlV61jjTIXCybIBFSVEhc6UeddnI=)
                          6: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
                          7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:92:d5:4e:88:de:95:52:51:56:d8:0a:97:2b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Jan 31 13:00:12 2025 GMT
            Not After : Feb  1 13:00:12 2025 GMT
        Subject: CN=104804dfaa93560d92d1db1596c8a15894e367de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:45:61:35:88:ab:28:60:51:a1:e7:aa:d7:
                    1f:cd:27:dc:62:6d:86:14:75:72:11:d5:0d:b0:9e:
                    54:e8:8b:8f:47:56:cd:f1:17:ae:71:48:27:05:f0:
                    70:1c:e2:63:55:83:e1:17:c8:b9:3e:49:99:78:c3:
                    f3:da:79:14:a9:76:d3:f8:0e:b7:ec:7e:8f:b1:41:
                    40:68:9f:22:db:e3:a9:f8:24:20:b3:98:86:81:dc:
                    b6:32:61:9e:4b:30:84:8d:9f:27:3d:15:0e:d6:cc:
                    6e:ce:33:74:f5:bd:31:5f:5f:2b:44:7c:11:88:fb:
                    99:0c:f8:18:81:ff:91:28:22:bd:4e:fc:18:aa:5c:
                    cc:26:89:ec:b7:56:8f:1e:40:f6:2f:b6:7d:a0:63:
                    59:cb:8b:ac:a9:03:f7:7c:d4:d3:11:8b:78:47:98:
                    7b:db:bc:5d:9d:38:c8:2c:fb:26:6b:d7:63:ea:0d:
                    9e:db:55:6d:be:54:29:b9:d2:b1:2b:09:3e:d5:4a:
                    05:03:ca:aa:f2:e0:e5:b0:7c:0c:cc:19:7d:00:27:
                    64:ea:5b:10:5f:34:3c:53:59:33:c7:03:c7:f4:6e:
                    4d:5d:64:33:68:71:7f:4f:8a:7f:4c:12:fe:0b:95:
                    54:d9:fc:de:fc:f8:22:c6:0f:25:7c:94:e9:7d:f7:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:48:04:DF:AA:93:56:0D:92:D1:DB:15:96:C8:A1:58:94:E3:67:DE
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:b4:09:66:f8:42:81:67:47:d5:8d:c5:4c:27:62:db:38:
         d3:93:29:87:73:0a:26:98:32:c5:17:67:6f:89:f4:ac:17:07:
         8c:1a:c7:d2:6a:bd:0e:9e:51:a0:af:23:43:85:1d:83:86:3e:
         d9:8c:12:f6:9f:c5:08:af:9f:4c:7f:04:c6:d6:ea:ef:26:20:
         46:31:12:e0:8f:68:bf:ee:b9:32:fa:5f:9d:2b:0c:74:df:ad:
         88:cb:94:16:8f:90:f3:ea:12:84:15:47:81:a8:eb:d3:9e:d3:
         90:61:93:15:b6:16:8f:dc:f2:c0:54:a2:89:61:62:77:de:5c:
         6f:6c:0c:3e:95:da:7b:a4:af:d9:42:66:dc:71:3a:ec:44:2a:
         f1:b2:55:af:89:3f:e5:9f:81:99:38:69:70:e6:c7:9a:fb:11:
         9e:2c:c0:a0:d6:c7:b0:68:65:37:85:aa:42:73:5d:c2:58:87:
         ed:f7:b5:5a:33:cb:c7:e5:99:a0:29:17:25:3e:ea:07:ee:73:
         7f:ea:e8:bc:ed:24:e5:15:28:0e:65:50:0c:92:bb:c8:6b:e8:
         91:9e:d3:53:6e:b9:9b:b2:2b:73:ac:89:d2:d3:fe:4a:7c:a2:
         08:f5:f8:c0:d3:44:2f:0f:cf:e6:42:17:40:2c:bc:3b:5f:13:
         3e:b8:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----