Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File:                     DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier:          bvaz22hE6APi0yjjSO2FLo+ItQObDWJyRPhHVWQic9A=
Subject key identifier:   16:81:32:29:EC:22:9F:9A:D1:15:F6:4F:E1:88:62:80:4E:97:33:FB
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer:       /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial:       0194BBCDD07C378F8B226A92A18489813BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number:          0465
Signing time:             Fri 31 Jan 2025 10:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:15 +0000
Files and hashes:         1: 1CUYBHeno8DyBiBJk58s01Vn7kE.roa (hash: Ac/cK8Y5Q3k/sidFyKghklZaDLlcZdtQLnDhxt2bSNo=)
                          2: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 13g7FbXNksM4+2YggzCrRboxrFuoxIiNTrzcQtOCVq8=)
                          3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
                          4: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
                          5: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
                          6: b-qLuN7LcWCmXzuyYW3S2X2JsvQ.roa (hash: LFWSIiOVLb/1xuV5ZI3+NKtHy2uXnhNazP8T4sdyYgo=)
                          7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
                          8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d0:7c:37:8f:8b:22:6a:92:a1:84:89:81:3b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
        Validity
            Not Before: Jan 31 10:00:15 2025 GMT
            Not After : Feb  1 10:00:15 2025 GMT
        Subject: CN=16813229ec229f9ad115f64fe18862804e9733fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:db:e6:7e:3e:e5:c5:82:be:ad:d7:b4:29:
                    7c:29:b8:e5:98:f9:0b:e8:54:92:99:57:b4:61:a6:
                    1a:79:d6:07:55:bf:51:6a:8d:b0:e3:ee:e3:ab:c0:
                    cb:c8:dc:25:58:eb:f7:9e:4a:36:75:75:89:43:e5:
                    26:90:2a:78:b3:82:43:b9:88:83:8f:8b:82:4b:76:
                    7f:7d:0b:05:38:95:c6:1d:97:ac:1e:6a:ce:17:da:
                    f3:e1:eb:26:89:78:f1:a3:34:10:85:74:59:e2:83:
                    1e:08:a1:48:67:71:0e:d0:9c:ab:e2:fb:77:7c:6a:
                    35:a7:96:4d:9a:e8:39:e9:ed:a0:8f:bd:80:9d:47:
                    ac:d1:a4:d6:13:f9:21:0e:80:5f:6c:eb:c3:9c:e8:
                    ca:57:27:48:3c:80:18:91:13:aa:8f:34:38:39:09:
                    3c:f1:e4:79:bd:6a:c1:79:87:b6:dc:89:2f:1b:ab:
                    a5:15:76:e7:f3:24:c3:f9:82:f3:ad:b0:95:3b:bb:
                    50:78:a1:6b:b1:1a:5d:ba:52:3e:c8:87:a7:e9:11:
                    c1:11:3a:09:87:51:20:3f:17:6c:f7:d6:5f:de:19:
                    06:3b:1d:ef:3e:37:d7:17:bb:5d:c4:7f:45:53:c4:
                    c9:dc:18:d0:e5:73:16:8f:5e:bf:5d:d0:32:71:8a:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:81:32:29:EC:22:9F:9A:D1:15:F6:4F:E1:88:62:80:4E:97:33:FB
            X509v3 Authority Key Identifier:
                keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:15:7a:12:9b:57:06:ba:dc:72:83:4c:90:5d:e3:98:53:
         3e:25:68:93:44:5b:bf:99:17:53:3e:af:a5:63:70:73:e4:b8:
         5b:93:55:b2:b0:79:58:2a:37:70:50:63:41:26:7e:c7:5c:62:
         66:89:9e:dd:ca:f6:97:1b:0d:e7:03:b2:c2:7b:81:cd:71:aa:
         12:cc:d4:44:9c:74:29:e4:f7:28:02:be:a9:2f:66:ff:a5:43:
         c4:12:0b:84:0d:c6:bd:c2:48:30:68:38:1c:6a:39:93:3f:7f:
         77:2e:e1:4a:e8:5a:19:12:7c:0b:ab:fd:b4:bb:5a:e7:4c:c7:
         ba:66:0d:06:8b:3f:b0:4f:c2:56:5f:c9:be:59:5b:59:88:5f:
         e8:ac:bb:36:70:bc:7f:ea:e3:d0:ba:39:26:3c:dc:81:7e:4e:
         67:c6:92:91:5f:a3:27:7e:4a:59:ed:62:c4:2c:18:26:01:a2:
         fa:14:ec:ff:54:91:38:a5:29:7f:f9:5f:0c:8b:b8:27:56:99:
         c9:83:71:b8:a5:97:1d:e1:42:49:41:e7:d9:76:53:4f:81:4b:
         11:85:00:a0:e2:0f:77:d1:b4:34:dc:dc:b9:93:62:67:d3:01:
         3b:93:b4:54:89:21:83:5d:65:f5:ec:80:ab:1f:c0:50:e2:1d:
         23:6e:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----