Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          lODFcbqBsMT91ClDlscV9xZzVxPhtO0MSi+HlGd6Ysc=
Subject key identifier:   7E:8B:93:C2:FB:EA:45:33:01:B2:3F:5E:B3:7C:5B:27:F3:0E:8E:CF
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       0194BCAA08B4902EA37F83EFED88B1BE5965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=)
                          2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: kzHZ8UEcdEWtnNyj75wq+MXLyYHHGHgKqZ5FsKnKn9s=)
                          4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=)
                          5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:08:b4:90:2e:a3:7f:83:ef:ed:88:b1:be:59:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=7e8b93c2fbea453301b23f5eb37c5b27f30e8ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:7f:a5:32:68:e1:8f:82:0c:1b:04:fb:9e:
                    c4:23:54:bb:12:a4:a9:2f:fc:d9:13:9d:7e:2f:50:
                    f4:cd:e1:a7:f2:64:48:4c:fd:c9:72:75:af:ca:1b:
                    f3:89:fd:df:60:77:78:5b:55:19:c0:64:60:a1:00:
                    46:5b:bc:81:e5:a3:f7:d2:df:de:e8:ab:9d:3d:25:
                    1c:2c:5e:f0:cd:48:9d:b9:b7:0f:da:8f:9c:9e:61:
                    7f:f3:56:7c:92:ec:9e:1e:05:28:0e:7a:b2:ac:df:
                    d5:9d:68:fe:7f:e5:57:27:59:e3:42:4d:cf:8a:e7:
                    ee:c1:b4:c3:e5:f7:03:56:5c:d2:5f:03:6c:49:2d:
                    35:86:a9:b4:8e:80:4a:49:1b:a6:ef:75:07:48:3b:
                    ce:dd:54:9f:42:a2:cc:90:51:a6:77:d1:c7:10:f8:
                    41:bd:b0:bf:2d:8f:b9:8d:ae:a3:29:99:bc:9b:a7:
                    fd:f1:d6:cc:7f:b2:9a:c7:40:6e:c9:28:7b:53:e5:
                    75:f0:69:4f:66:6e:8b:21:95:17:46:43:d5:32:36:
                    46:b9:6f:1f:ff:4a:3b:b0:5a:0b:06:27:ca:13:9a:
                    1c:7e:5c:6d:39:26:6f:04:30:16:c9:3d:66:cc:44:
                    eb:5d:f1:ea:24:b0:0d:36:ca:6c:11:ad:d9:8f:0c:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:93:C2:FB:EA:45:33:01:B2:3F:5E:B3:7C:5B:27:F3:0E:8E:CF
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:a5:06:d2:ef:a0:65:1e:e0:25:c3:5d:da:39:8c:1c:3d:
         1b:ac:0d:17:14:36:72:b7:f9:df:15:db:f5:47:10:ca:67:75:
         28:3a:60:f4:0a:4d:dd:b3:9a:0f:7e:ca:48:24:a7:b3:93:5a:
         64:2e:25:6f:b2:28:93:6d:10:2c:6e:f5:90:20:0c:1b:63:d7:
         97:30:a7:e8:6f:5f:58:90:1e:bc:25:05:b9:f1:1d:db:57:5e:
         d6:19:23:68:93:6a:bb:42:3f:60:8a:bb:a4:c8:a2:98:ca:53:
         da:2e:2c:ed:1e:3f:28:b3:a9:92:80:9a:85:52:7a:b9:ba:cf:
         a4:17:09:4d:f3:39:db:9b:43:1b:97:7e:f5:0f:f1:20:d8:ff:
         22:2e:d4:71:0f:ed:21:fa:20:07:9b:72:f2:99:78:1c:cd:6c:
         40:1d:cc:41:5f:2d:5c:17:33:ed:f9:b7:f6:ae:9b:f1:05:6d:
         c7:c3:7d:73:4b:3c:0f:f2:12:44:c4:58:a7:ee:53:19:a0:74:
         fb:49:32:63:f9:31:93:9f:c5:0f:26:3e:40:ae:96:b5:27:2a:
         f4:d3:dc:0a:26:b3:8b:e2:09:14:79:8c:65:08:23:91:5b:9e:
         bf:51:dd:71:5d:ce:45:15:c5:42:65:f6:d7:9e:da:91:49:2a:
         c5:c2:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----