Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          8xaSA0QxdZDUsJkiBORIuu7xRSfY35+MI8N2KH7jf6w=
Subject key identifier:   9B:CE:4B:48:B3:CA:B1:C7:FE:7D:25:D2:62:8A:52:42:64:4C:D6:6C
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       0194BC04E03EEB543D9B7461527F3D759A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 11:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:23 +0000
Files and hashes:         1: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          2: ZmAtu4Kgc44O2Fmh4xQhLC5PBOY.roa (hash: TJmbxRyQFIY6VcDPUuSoE6Qt5/hQS48IXEu9RZIIb0Q=)
                          3: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          4: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: LSFIC5khCRINgEWwRZRkyaDpG4emswlN0ZUs3yybgko=)
                          5: t4JBZXmAW_d8BSoeUOrd8Kx9UsE.roa (hash: jLWI9LG04MHbLButB8FUXC1TakRjIOUdxhwpEWLwwqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e0:3e:eb:54:3d:9b:74:61:52:7f:3d:75:9a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Jan 31 11:00:23 2025 GMT
            Not After : Feb  1 11:00:23 2025 GMT
        Subject: CN=9bce4b48b3cab1c7fe7d25d2628a5242644cd66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:ca:33:f2:34:0d:6b:8f:47:51:8b:34:d9:
                    52:51:03:e9:56:aa:85:21:ef:01:95:e0:5b:32:fa:
                    ef:a1:62:a7:85:ab:a7:8f:d6:6b:b9:c6:00:9c:5d:
                    63:0c:7f:21:3b:d5:f8:92:74:d7:2e:42:cc:07:86:
                    7b:4e:1a:c8:e8:2b:03:98:d8:f8:61:2c:d5:ff:03:
                    a0:d4:79:2e:ca:df:77:10:24:8c:d5:ec:45:69:62:
                    91:90:a3:fc:9b:a3:55:cc:45:71:2a:1d:e7:cb:f8:
                    b5:ef:49:99:32:06:2f:25:ec:be:ec:c9:36:2e:a1:
                    80:fa:7d:c7:62:24:df:65:c2:9a:56:6e:d3:cd:ba:
                    27:fc:e8:bd:02:22:3a:bf:1d:7d:61:1b:4b:80:3b:
                    60:88:eb:fa:e7:50:58:ba:9a:00:b9:47:dd:73:1c:
                    d3:bc:62:45:7f:5c:4b:0e:3b:cd:2e:88:36:97:02:
                    1f:a4:ee:db:e9:b9:8d:75:dc:37:0b:8e:e1:a4:47:
                    e1:5d:21:03:c2:6a:03:f7:ad:00:bc:6d:37:72:ef:
                    bc:e5:66:bf:ee:66:df:18:55:0c:0e:44:a4:f6:3c:
                    98:53:bd:10:bf:7e:a5:25:87:93:9d:03:ea:e7:e9:
                    7a:39:5b:7c:1d:90:f8:42:ea:ae:16:d9:94:33:60:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CE:4B:48:B3:CA:B1:C7:FE:7D:25:D2:62:8A:52:42:64:4C:D6:6C
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ac:e2:26:bb:b1:ca:45:cb:fd:7a:48:41:86:fb:9c:7c:cf:
         ed:a9:0d:e2:6f:bb:69:63:81:ff:fa:e7:ce:ac:f5:c1:d9:d4:
         ad:48:4e:3d:1f:45:47:42:0e:d1:ae:80:8a:2b:a2:e2:35:82:
         d3:e3:73:ea:1e:fc:ee:31:3c:bb:54:16:79:1d:00:8b:ec:94:
         5c:69:49:cf:ad:06:0b:ed:e4:4f:98:61:25:f8:a3:08:1a:49:
         84:77:6e:19:bc:11:ff:f5:c3:95:80:24:c7:ae:32:b9:d3:a6:
         a6:86:da:2f:a7:8c:33:15:22:d1:b9:5a:1d:4b:51:44:a1:52:
         2b:ca:e5:68:48:90:dd:8c:dd:db:a4:2c:79:b9:b8:73:e9:63:
         2f:72:55:5f:01:3a:50:fb:d1:3e:29:de:f1:1e:91:21:e8:b9:
         f3:e3:ee:22:56:4c:ea:69:47:79:42:7c:fc:b5:eb:cf:8b:0b:
         73:7f:b3:96:fb:7a:fe:41:39:8f:64:27:47:ce:aa:76:f0:fa:
         82:b8:44:bb:34:f0:1a:51:35:de:fe:23:70:d9:c1:46:7a:41:
         98:e3:9b:3e:01:fc:ab:cf:3b:45:b5:26:bd:f4:dd:0b:be:46:
         ef:2a:ee:52:99:7c:b5:ff:bf:a5:fb:02:7e:3f:b7:d2:8f:9f:
         8d:dc:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----