Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
File:                     gyhvptp9JS54KPhJI_VZGRQrAH8.mft (raw, json)
Hash identifier:          tnfJeNwmovWddcyOKvcN8h+tCTVFT5JPt7HvOLwRbro=
Subject key identifier:   1C:23:FC:DF:87:09:63:A9:B5:45:77:D6:B0:3C:1C:5C:C9:0F:18:F9
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Certificate issuer:       /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial:       0194BC04CD04DFF5A9B86FDD08AB8152FC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 11:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:18 +0000
Files and hashes:         1: 2Fa9I4eMPzfo939SHVylXbzPrz8.roa (hash: nGUhV51P4Xt7y4WWujwqar1e4qSQSqC/VceFTeZqU6Y=)
                          2: ZMF2Y9q561kXaTBQ4t89zr0lDYc.roa (hash: UdPY/zqbZWjWwLmgxqb4FQw1KPzVA4rF4zGBmlupa9U=)
                          3: eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa (hash: BYkfcjQqotFe4I9Ab8fvUQ8zQzC2L9Hl2RpFT9l1Q4M=)
                          4: gyhvptp9JS54KPhJI_VZGRQrAH8.crl (hash: Vpx+kKuyCMS95KZPxPbRcADeJ8eo6aKKcv2ixy+8Asc=)
                          5: zbHf3SPKUQqKlSY2p0HB9p9XL90.roa (hash: csBeTbNKWq57qRnNo/tNdPyrIrtIdDZKmu8r42Yia8w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:cd:04:df:f5:a9:b8:6f:dd:08:ab:81:52:fc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
        Validity
            Not Before: Jan 31 11:00:18 2025 GMT
            Not After : Feb  1 11:00:18 2025 GMT
        Subject: CN=1c23fcdf870963a9b54577d6b03c1c5cc90f18f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:de:0a:8d:42:40:c3:db:08:63:2d:46:78:
                    6c:58:0f:80:98:62:a5:00:c1:81:c7:ac:13:cd:7f:
                    e8:cd:10:0b:9f:86:d2:bf:62:a1:b8:75:95:56:42:
                    65:61:fe:57:71:d5:72:c3:86:2c:f4:c8:3a:63:24:
                    61:8a:0c:e8:b3:a2:dd:63:05:a9:13:9d:60:62:f7:
                    40:6b:35:5c:17:cb:a3:a2:98:38:b2:f5:2b:d3:15:
                    7d:54:ee:55:37:9a:ac:69:fa:f0:3b:90:b5:87:a6:
                    f8:29:14:13:c8:15:24:9e:f9:1d:6b:1a:c6:8a:d5:
                    ff:79:cc:b6:30:ce:a0:3f:1b:cf:bd:ad:8e:cd:39:
                    3f:d8:cb:1b:73:fa:a7:0f:ec:71:fa:ce:d5:5c:9c:
                    d0:a8:91:de:e8:b8:8c:45:df:ca:5f:1c:b6:3f:8b:
                    0a:23:81:31:f0:5d:33:a2:b2:7d:c9:f8:0d:e0:6a:
                    53:66:c2:3f:58:31:ee:0f:6a:27:aa:f6:56:bc:c1:
                    23:53:1d:75:69:86:ff:c4:a9:ef:e5:ed:99:ad:5e:
                    60:01:8f:a7:d1:85:36:3c:4a:ea:ad:15:ce:c9:ad:
                    bb:46:5f:51:61:6c:70:54:fd:6e:3b:8b:8c:1a:48:
                    00:c6:d8:f1:c3:15:39:ec:8e:4a:2f:63:6a:42:95:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:FC:DF:87:09:63:A9:B5:45:77:D6:B0:3C:1C:5C:C9:0F:18:F9
            X509v3 Authority Key Identifier:
                keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:41:e9:da:5c:1b:03:4e:98:8d:b4:d5:52:05:86:2c:55:
         70:04:69:02:7b:cd:a1:e3:ee:2f:ae:2b:4b:47:a3:64:08:9a:
         77:d0:88:99:ae:fa:55:c4:40:a9:cb:20:f8:6a:aa:4b:83:4d:
         bf:3b:71:1d:f3:33:af:78:da:a0:c2:4a:7f:f3:50:e5:ca:ba:
         c6:bb:aa:5f:14:f1:35:68:68:b5:50:22:2b:b1:8b:65:ba:20:
         65:70:3b:75:31:38:d0:62:cb:73:a3:2f:df:3b:d4:52:13:4a:
         d5:8a:58:d8:db:9d:a5:6d:ec:b7:20:c6:13:74:75:03:79:6c:
         f5:cc:a3:82:2d:15:4d:82:ac:6c:60:4d:c9:ef:c6:c8:0c:f4:
         0d:67:5e:9d:f3:92:54:28:2d:3d:a5:ec:bf:2f:42:9f:a3:ec:
         3c:31:7e:66:e6:18:e7:0f:8b:8a:3c:69:47:9f:fa:93:59:03:
         d8:bc:26:b4:07:b3:0c:59:45:b0:9f:4c:38:4b:92:80:95:e9:
         1e:79:83:3d:ff:29:9f:27:56:02:60:a1:4f:45:1e:a6:62:66:
         9a:05:ea:bf:e0:c6:9b:7f:90:12:fb:93:ca:99:55:24:f4:e2:
         93:cb:c6:3a:25:d9:48:08:8b:34:33:41:c0:0c:a8:88:a7:86:
         cf:17:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----