Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          /MKHv9NixTBFEgzhuDf+5q1KPxpl8zNdRvdFBu6hucM=
Subject key identifier:   D6:AC:E1:80:D8:9C:8E:45:93:33:A2:C3:00:FA:76:4F:FF:3E:C9:D9
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       0194BCAA093C913A7A5CAB3F9D5E57FD3254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=)
                          2: Am8JOUS_pv4aGyonpJm3aY43kFA.roa (hash: hel/WsPbSFwbb5JTEfjY35Y4+JW18MVGcJtVTdlc80w=)
                          3: C3FHaTVyQ086WMPBag3rQPfajw8.roa (hash: f/oNhKigKco9tBiGw31uoIotXboAy39S9i+k1rCBUzQ=)
                          4: DA0kHu5lmZ3I75oOpHyNKtgtB84.roa (hash: zAjq70WaZThcl6zn5x1b2kYqJctyb35T4j4pwEGzxHU=)
                          5: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: xz7dCktJqZUjX2cCmivnkrw1xnV2O4SbfDUI7cTwrUQ=)
                          6: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=)
                          7: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=)
                          8: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:09:3c:91:3a:7a:5c:ab:3f:9d:5e:57:fd:32:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=d6ace180d89c8e459333a2c300fa764fff3ec9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:80:7e:da:b5:b6:68:81:ea:b8:b1:51:31:b2:
                    c8:6e:1c:27:33:2c:9a:d5:1b:87:e9:95:58:40:07:
                    9c:2c:af:d0:bd:0d:d0:ba:b5:61:d4:a8:7b:8e:58:
                    da:7d:4a:8e:9e:6a:43:4f:7b:44:ab:53:3e:a9:86:
                    e8:a4:af:6f:14:94:f1:c7:a7:5a:c2:3f:a6:34:bb:
                    d8:cc:03:5c:6f:37:5c:7d:7e:c1:f2:af:49:b3:de:
                    b3:2b:77:32:19:39:b3:7f:5c:6f:b5:03:c9:7c:6e:
                    98:09:25:27:7d:c7:5f:ad:96:cc:6a:b8:78:75:dc:
                    49:ae:2e:be:9e:3c:6f:81:d1:2a:8e:14:d1:2e:dd:
                    0e:ab:ba:f2:09:b6:62:b8:d8:6d:66:5f:ae:43:87:
                    44:0a:40:8a:a1:a1:be:e7:67:12:57:92:63:10:3f:
                    7e:5a:fd:aa:c1:fc:3c:27:f0:f0:19:99:2f:44:4f:
                    8a:27:07:b3:5c:dc:5b:c7:d4:98:5b:ee:4a:7f:3e:
                    2d:57:c0:b2:e3:ab:20:07:ad:64:07:f2:a6:dd:d1:
                    48:fc:f2:a9:d7:f1:b4:fa:e6:d9:72:89:43:de:35:
                    19:76:af:77:90:52:a5:a2:d2:4c:4b:85:6c:00:12:
                    d6:24:b7:db:ff:c2:68:e2:74:89:fe:b6:c5:03:2c:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AC:E1:80:D8:9C:8E:45:93:33:A2:C3:00:FA:76:4F:FF:3E:C9:D9
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:8a:7a:80:b1:49:fb:56:70:87:67:9b:7c:6f:1b:8e:30:
         86:10:43:fb:5a:51:85:df:60:8d:6d:93:71:22:88:35:c5:f3:
         15:87:dc:b1:12:14:16:95:c6:54:ff:8a:67:2a:97:27:ae:9c:
         e8:7e:76:14:81:84:f9:23:29:d7:fa:35:8f:a7:5c:92:a2:0c:
         18:e0:9c:df:3b:28:a9:8c:8d:4a:a0:b8:d9:e2:dd:60:86:f0:
         bf:ba:55:4f:0f:d5:62:35:e5:8a:83:a0:35:da:58:6f:76:5b:
         05:76:2d:72:d1:cb:91:fe:97:9c:c9:a5:c3:2a:07:7b:50:d7:
         fa:ad:cb:27:21:4a:38:26:f9:12:ce:17:b4:30:ba:a3:06:1f:
         6a:15:11:c2:d5:55:d4:d8:7e:28:84:07:46:b4:f4:c6:6a:40:
         ca:b1:79:c0:c9:0c:99:2c:d0:9b:3f:5a:55:5d:a4:e2:b0:20:
         e1:50:66:e0:7b:f1:60:bd:fa:4d:52:09:fc:53:b4:d8:a8:6c:
         44:c7:a8:86:dd:50:67:46:16:14:04:dc:f5:0d:16:8d:4a:b8:
         11:bc:97:92:3a:b5:59:ed:38:c0:8b:10:36:db:d8:a2:f9:4c:
         3d:ab:93:d7:c2:74:fe:22:43:10:0c:11:84:b4:14:c5:6b:b1:
         50:12:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----