Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          9FqJyrJr+fDUb3JnkBeIHpX2RKskjnOmKZ0l6iLQRvY=
Subject key identifier:   4C:68:09:00:84:90:70:F5:8B:49:D8:A5:D5:6B:11:AA:0B:B0:81:00
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       0194BBCE8E4DAE7A9E1BB3EB69FFB4C96DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          0517
Signing time:             Fri 31 Jan 2025 10:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:03 +0000
Files and hashes:         1: 0vxyY18z--b4iS_pZFzvI9_SB7U.roa (hash: 1Jvz4pKZFtOvCwEt8hcBx6oyfff6pk2biZCpyN1rTSE=)
                          2: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: 1iLqvm/gTkl+j0HFzcqTgMMhrLpKBem/Bn/RaYT8eh0=)
                          3: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=)
                          4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=)
                          5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=)
                          6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:8e:4d:ae:7a:9e:1b:b3:eb:69:ff:b4:c9:6d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Jan 31 10:01:03 2025 GMT
            Not After : Feb  1 10:01:03 2025 GMT
        Subject: CN=4c680900849070f58b49d8a5d56b11aa0bb08100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:53:61:58:fa:68:70:19:00:38:88:81:03:
                    40:1d:34:dc:23:e0:d6:6a:b3:d6:f8:12:db:b8:56:
                    fd:30:56:09:d6:90:ca:83:40:d0:83:c7:c9:ef:d8:
                    12:18:a3:a7:45:32:a0:d5:c6:b6:ec:00:a4:05:97:
                    a4:ce:ba:33:05:2d:53:b6:0b:6b:a8:28:ad:e5:3a:
                    37:bf:8a:83:90:83:84:ab:38:0a:92:2f:e1:c8:e6:
                    ed:03:67:15:c9:1a:e4:48:e3:b0:14:44:ca:12:84:
                    00:19:d1:6e:7e:b7:93:d1:83:37:67:5e:18:a5:7b:
                    8e:af:fe:56:64:ee:6c:92:c5:a5:3b:94:4d:04:c4:
                    d2:e4:30:6f:ff:f7:35:a1:a5:db:c3:41:4a:b3:ac:
                    3e:f8:50:d3:22:b8:26:53:dd:a1:7e:56:5a:1c:59:
                    9c:67:cd:87:b4:16:d9:3e:14:30:70:3a:ef:b8:76:
                    83:ab:4b:f0:00:e4:be:98:f7:9d:7a:a1:60:ce:68:
                    18:47:22:9c:9f:a5:14:df:2b:89:66:56:2b:a0:2e:
                    d6:96:e8:e1:ce:9a:62:fa:2a:6b:4f:f6:0f:3e:3b:
                    3f:6a:02:49:dc:09:dc:75:14:da:27:85:cc:5c:30:
                    ab:43:ca:72:0f:d5:91:d4:3e:e1:e6:9f:f1:40:66:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:68:09:00:84:90:70:F5:8B:49:D8:A5:D5:6B:11:AA:0B:B0:81:00
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:b8:47:a0:2f:f3:4d:3c:6c:0c:2b:85:7e:e4:92:d2:8c:
         96:3d:d6:8e:05:6f:f6:6d:67:4f:3b:f4:c9:92:3d:19:86:34:
         7f:7e:cb:f7:75:ac:82:c7:00:7b:d2:be:ac:67:a1:af:08:99:
         5a:82:5d:b6:a5:d6:9d:a9:21:1b:da:a9:26:df:13:e4:9c:49:
         ef:5c:bf:77:e7:21:af:62:c7:79:a1:b9:14:be:d7:5c:2e:f9:
         e9:be:b3:17:a8:05:88:b8:89:ac:dc:4f:f2:87:bf:7f:12:ff:
         47:38:db:8a:36:6c:ea:d2:39:7e:16:91:b2:73:61:c8:12:bf:
         0a:4b:7e:62:63:b5:51:7c:76:1d:5f:6e:fe:92:fc:8b:d0:ef:
         74:a6:79:c3:9e:1d:fa:df:2f:d3:5b:44:e3:51:f0:6f:1e:35:
         d7:59:d2:34:3a:f5:f1:c7:3c:a0:95:73:ae:bd:03:11:1c:f0:
         4f:52:25:46:3c:8a:f0:f5:f8:8c:73:93:4c:56:fc:c2:87:d2:
         db:2a:21:1b:31:0b:bc:6e:12:da:6a:b5:2b:2a:e6:e9:17:ca:
         8b:a9:55:42:1b:c8:4d:5e:de:26:f3:a0:a1:66:00:d2:50:c1:
         3b:4c:21:6b:3f:b0:e6:89:34:8e:11:4e:e9:18:70:ac:40:17:
         47:d3:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----