Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          3h2nWe+JcTZQRocd3GjrfQR8QL/6Lyo8NXF1F4Q/2r4=
Subject key identifier:   77:D1:3F:DB:B5:18:D0:80:E0:57:82:69:A6:82:78:50:27:EF:D8:2B
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       0194BC72B29FC4EAD507D65D78DF605A40AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 13:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:20 +0000
Files and hashes:         1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
                          2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
                          3: 820Ud_GR15OB6xKqzxayx2Vq2Ow.roa (hash: Y4mHtGXvZVwTMpirNMNXroWlScEk84KdYNqjkd/s7Qk=)
                          4: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
                          5: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: 31cggUKF83sL8rSQNXUDzUuttK7BGrl2YNx74p5fqhE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:b2:9f:c4:ea:d5:07:d6:5d:78:df:60:5a:40:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Jan 31 13:00:20 2025 GMT
            Not After : Feb  1 13:00:20 2025 GMT
        Subject: CN=77d13fdbb518d080e0578269a682785027efd82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:63:c8:cb:cf:73:23:7e:f2:47:fd:22:bb:18:
                    e7:88:2a:c1:1b:e6:54:5b:53:bb:e6:44:31:4b:e4:
                    97:d7:58:87:71:76:5c:d1:ac:7c:03:68:a7:62:1b:
                    56:88:69:f2:9e:7a:77:1b:29:8e:5d:a1:16:7b:42:
                    73:4f:48:2f:52:4e:52:c6:75:cb:25:8e:de:8a:a2:
                    a8:60:93:ea:26:8e:71:6e:ed:1b:72:4e:01:9e:aa:
                    af:39:2e:2f:35:22:a3:37:7e:87:d3:13:58:7f:ee:
                    ff:70:ec:0e:52:e7:70:68:50:9c:ff:32:f6:37:79:
                    c7:7e:43:cd:81:93:a8:14:e4:01:3d:07:81:64:82:
                    f6:60:00:d5:ee:d7:d0:58:4b:5f:cb:c1:a4:01:92:
                    5d:b7:2a:0c:20:e4:07:5c:e4:32:7c:0e:8d:6d:65:
                    ab:aa:57:92:1e:a2:60:b7:99:91:81:84:41:89:1f:
                    85:b1:fa:33:69:28:52:b6:b7:99:66:22:43:e5:07:
                    3b:97:74:e3:a1:89:db:9a:5c:65:42:7b:f6:74:32:
                    1e:a4:02:91:2b:93:7e:0f:10:b2:2b:cf:e0:26:f6:
                    d7:ac:72:47:e1:3d:75:c3:42:be:78:4a:2d:15:b2:
                    a2:60:aa:33:5c:13:d3:05:07:c4:08:c6:50:d9:58:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D1:3F:DB:B5:18:D0:80:E0:57:82:69:A6:82:78:50:27:EF:D8:2B
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:a6:42:86:9a:70:5c:61:3f:94:e4:80:32:39:2e:70:36:f3:
         77:ff:91:69:9e:f5:93:f2:ef:d9:f6:0b:f9:76:97:e4:a1:9e:
         b7:a6:1b:9c:7b:e9:62:3a:3d:e4:bc:4e:5b:6d:85:76:dc:42:
         94:cb:83:fd:73:a3:a9:6f:ab:9a:04:2f:c2:cc:45:2b:39:61:
         25:27:29:1f:16:87:5d:b7:fc:c8:a5:21:34:e2:97:db:1e:a8:
         f6:f0:7b:65:72:50:cf:74:1f:58:59:ef:a1:b3:9b:65:75:3e:
         f8:4b:bc:bf:bf:34:82:1b:3d:ec:e8:ad:93:48:de:ab:eb:85:
         64:8c:7a:11:3c:a9:87:22:97:a6:3b:69:7e:a4:e9:3a:35:06:
         d5:8e:d1:dc:fb:ed:17:ee:2d:f3:77:ab:41:13:58:13:b9:f7:
         41:8e:92:bb:94:01:b7:62:95:68:89:81:61:c6:9e:c8:d1:9b:
         21:21:9b:c7:1c:8b:b1:1c:14:33:ca:25:72:fe:45:9e:a9:71:
         78:2d:e0:6a:db:1a:fb:95:8a:6c:23:bf:99:ae:1d:5c:3b:16:
         e4:b6:c8:4c:b2:d5:41:b2:5c:2b:dd:e4:0b:60:ad:53:0b:3f:
         ad:af:fc:1a:3f:db:46:47:fb:64:66:47:ed:93:ed:82:30:73:
         f5:c7:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----