Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          /qQWhfRnbWGDzjF72UEEyxbQ4g9jE0FctjIH2GhyVBc=
Subject key identifier:   16:07:0A:4D:4C:A8:45:C9:7F:5A:27:2C:E3:8A:4A:A6:CD:F2:02:A2
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       0194BCA9FDA742E71E2696EC2411ECE781CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:44 +0000
Files and hashes:         1: 1-DR1I-0Q86yRegJRW48TcU9jkak.roa (hash: BbaoF4QpKICKvF2DFJvuoi1HekvHPPg57x8hdzzKsN8=)
                          2: QRsEK7Mm82AysiVwrsI0fcQwGZk.roa (hash: +14a6gbAtC3j39lO1seQMdbzRZUzjrGGX9KqhXCRQaA=)
                          3: bMolsew2aNfnwVEKpwDy2jyM58c.roa (hash: 6E9s83W/T6d5cC26/y3n1N8eAzWZSpgeiiEyiR8AjmM=)
                          4: exOJgZWKhs3CfxljzDJO3y7m_kg.roa (hash: sLEFa7RsALBhT6NfAUon7unSxy37m3yVXscXWcoyxvY=)
                          5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: LvSCoP0aTBsKUe3APU7xfEHJ3+nNh10q12tPwSy+kpw=)
                          6: nfEFUPm3YqGp7FQGkGbFir0VX4k.roa (hash: wcnZ1tdaEqbHq23LSrQJa3uBDPQRdB3Kf9OV1V7J1L8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fd:a7:42:e7:1e:26:96:ec:24:11:ec:e7:81:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Jan 31 14:00:44 2025 GMT
            Not After : Feb  1 14:00:44 2025 GMT
        Subject: CN=16070a4d4ca845c97f5a272ce38a4aa6cdf202a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:e4:a8:45:af:a4:d0:4a:4b:50:7b:69:34:
                    34:4b:66:4f:e6:3f:b4:c6:38:73:ad:8b:40:6a:81:
                    16:f4:fe:dc:2f:0d:1c:40:a9:8d:b9:d6:9d:7a:50:
                    b4:8d:6b:a7:c3:3b:f3:d4:ad:3c:85:0c:5b:2b:a9:
                    c9:d1:6f:f7:66:4b:33:24:cc:18:63:df:af:42:9f:
                    a8:93:5e:26:43:ce:7f:7a:e8:02:2e:49:d7:82:34:
                    ba:8a:e2:ce:2f:3b:93:ed:b8:52:31:94:f2:83:86:
                    8d:e8:4d:33:e3:79:7d:98:df:09:93:ff:77:4f:74:
                    b4:1c:15:2f:b2:ed:e2:4e:00:e6:b0:76:9b:fd:57:
                    07:fa:dd:5d:e6:42:7d:25:74:2b:05:fc:27:84:69:
                    20:e7:7e:77:7f:7f:66:cc:8e:39:03:92:72:77:fe:
                    e4:58:4c:69:18:a9:1e:d1:4c:ef:ce:32:50:ec:b8:
                    87:7c:f1:16:16:01:14:4e:73:14:44:c9:63:27:7c:
                    82:a3:f6:5b:ca:b5:85:a3:8f:87:bd:1a:83:e3:2a:
                    05:e8:82:d1:7e:24:1a:29:ec:4b:54:f9:4d:a7:6a:
                    a8:1c:00:16:52:58:e5:cc:f3:8b:6d:d2:f2:00:6c:
                    70:34:c1:b1:3e:84:f9:8c:4f:37:34:d0:ac:52:6f:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:07:0A:4D:4C:A8:45:C9:7F:5A:27:2C:E3:8A:4A:A6:CD:F2:02:A2
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:64:97:b0:22:c7:4c:1a:95:49:4a:7f:dc:c8:91:4e:4a:59:
         e0:a9:3d:d5:89:17:a0:3f:b3:3c:32:a1:35:76:85:6b:29:57:
         00:ce:c2:b6:93:d2:e4:4f:de:4a:ae:ad:61:db:94:45:3d:75:
         66:e0:d7:b6:d6:d2:33:42:9b:25:51:7c:f9:e5:95:b3:1c:f2:
         ba:eb:07:a3:59:fd:23:87:dc:08:d8:5f:88:0f:58:d5:de:dd:
         bf:f2:d4:70:4e:11:1d:9a:bd:70:c4:ff:f0:64:a2:e3:24:c6:
         c0:ff:3b:ea:48:7b:38:05:23:13:c7:d5:b9:6b:48:67:4d:33:
         19:83:7d:ca:c9:c5:64:44:4f:d5:ee:e4:c8:e6:53:5e:6f:84:
         e0:7c:cd:45:b9:16:f5:19:29:3f:8a:f3:97:e6:86:6c:f5:72:
         13:df:7b:fe:32:18:fe:6d:33:9b:02:62:fb:35:a9:2f:dc:0e:
         14:7a:48:46:80:bb:9f:1e:75:9c:29:f0:5e:29:f9:c0:19:4d:
         35:d8:62:4c:9b:4a:2d:ce:89:e7:b7:b7:47:24:76:1a:9c:0d:
         12:62:38:cc:aa:44:b6:67:48:9f:5d:41:ea:ff:93:43:e1:8e:
         85:81:ad:bf:be:11:8e:08:69:6a:03:be:c5:2c:36:89:f0:bf:
         2b:4c:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----