Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          tjdh/EAbmvoKlu+LOXzFrjBCX6kQR9zAaXpJsEx5HFU=
Subject key identifier:   54:44:38:ED:3C:EE:93:14:5C:1A:52:86:EF:B3:0E:1C:02:27:9A:9B
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       0194BC72BCB452E47B688794B496D47EF605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 13:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:23 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: Tw+MHuM4nGJ5egH/9JGM2tmsVQ85G8xFoWn6W+hT+2k=)
                          2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
                          3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
                          4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
                          5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
                          6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
                          7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
                          8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:bc:b4:52:e4:7b:68:87:94:b4:96:d4:7e:f6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: Jan 31 13:00:23 2025 GMT
            Not After : Feb  1 13:00:23 2025 GMT
        Subject: CN=544438ed3cee93145c1a5286efb30e1c02279a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:27:44:83:3d:14:48:3a:c1:70:6a:11:ce:
                    3b:1c:98:c7:dc:76:4b:96:61:b0:7f:e0:8d:1f:61:
                    9b:b3:89:85:24:c2:35:f7:0c:d4:9a:23:d7:0f:2c:
                    c6:b4:fd:0e:f3:03:7b:b4:1b:d0:f1:e3:72:e4:cf:
                    95:4f:6b:5f:d6:5d:a1:2d:54:85:f3:e7:b6:32:6d:
                    e6:e9:04:ee:2f:5c:59:8f:ae:46:91:80:9f:61:c1:
                    7b:7c:4d:85:01:3d:47:44:7f:a6:19:c9:85:46:e7:
                    dc:5d:ff:6d:30:68:49:1e:87:9d:26:31:dd:b8:51:
                    46:a4:75:25:99:b0:cd:02:ec:8c:10:9d:b0:42:20:
                    25:48:f2:b3:62:3e:41:7c:f8:79:0f:8a:70:fd:f9:
                    88:e8:80:ee:7f:c6:9b:ba:6b:85:f7:71:46:5e:84:
                    0e:d2:62:85:9e:f2:0d:70:d1:4a:51:30:14:70:28:
                    1e:8e:f1:5e:8c:50:ec:01:bc:6c:90:0c:04:b8:8e:
                    fa:c5:30:ba:17:c8:1a:33:ea:b0:15:ec:3b:1a:54:
                    7e:34:b7:b6:55:6c:33:ee:f4:26:00:52:b0:00:31:
                    66:aa:7a:ae:cf:49:9e:ee:67:e8:ca:a3:ae:71:06:
                    80:a5:5e:a5:63:4b:8c:c9:86:af:6a:f7:0a:c8:10:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:38:ED:3C:EE:93:14:5C:1A:52:86:EF:B3:0E:1C:02:27:9A:9B
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:1d:3b:43:a0:25:43:60:23:08:66:5f:d1:e4:62:5f:02:
         af:42:58:14:55:e6:8d:8d:3f:b5:bd:3c:78:58:e4:2c:5e:bc:
         32:e6:76:bb:6b:ad:5f:38:32:3f:58:0c:9f:5a:71:c1:5f:99:
         98:6d:a7:fa:2c:82:1f:f1:93:90:90:86:25:51:a9:b2:99:12:
         e4:89:ac:96:5b:fd:78:95:35:41:00:d8:72:42:89:d4:14:77:
         52:0a:49:50:7f:df:ae:ed:db:1e:e4:15:9a:a2:4d:74:eb:49:
         46:3f:f3:b6:89:86:40:d4:ef:c7:7e:a6:dd:de:12:85:8f:ee:
         66:51:3b:ba:fe:a2:fc:a7:b4:98:08:d8:2f:a4:ce:e3:a4:9f:
         c4:b5:a7:ca:16:ac:dc:f0:15:35:dd:41:80:07:31:22:de:4b:
         6b:90:10:b9:e2:1e:c6:31:92:df:65:6d:79:af:d2:37:66:0b:
         1b:a5:71:c7:b4:e4:85:6a:be:4b:3b:7d:98:2a:98:fa:80:e4:
         ea:92:ca:31:77:d7:ad:5b:a2:9d:62:7a:08:9c:83:a6:d8:c4:
         f0:f9:17:68:d9:86:bc:9f:ea:53:75:af:50:15:e5:da:32:db:
         f3:44:b2:84:b6:c9:76:9a:61:91:f9:3c:ae:73:e8:6b:8d:07:
         8a:84:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----