Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          cb6VnSB6N/BvZqeAyFs8Sy0D4+wn//5pNENhYpIMPew=
Subject key identifier:   53:96:46:73:25:10:A2:50:77:C7:B6:92:3F:BE:20:52:DA:2F:25:F7
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       0194BD4E7D720ADD6998B4B5CDA26263996C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          113F
Signing time:             Fri 31 Jan 2025 17:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:25 +0000
Files and hashes:         1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
                          2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: 429UxUwlfso5CDO6x7ASAz50wUG2vH5WE/7Q0TkoAyk=)
                          3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
                          4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
                          5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:7d:72:0a:dd:69:98:b4:b5:cd:a2:62:63:99:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Jan 31 17:00:25 2025 GMT
            Not After : Feb  1 17:00:25 2025 GMT
        Subject: CN=539646732510a25077c7b6923fbe2052da2f25f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:17:ba:4f:13:64:14:b1:28:8e:ee:89:f3:
                    5a:b9:c1:85:3c:d1:d1:fe:4e:d2:45:cf:03:95:16:
                    c5:27:a2:43:8d:1a:5c:94:39:a3:81:7c:6b:b3:4c:
                    00:7d:bf:cb:7b:51:0c:7e:cf:16:15:39:a6:77:41:
                    8f:21:d0:6c:ea:04:bd:49:88:c8:df:38:02:fa:80:
                    e6:e1:9b:d4:ed:4d:e6:20:16:76:a5:b0:34:09:18:
                    d2:8b:a9:f9:4a:68:a9:ca:6c:13:a4:41:83:3a:11:
                    c2:09:9f:7f:d2:aa:31:b5:b1:51:b6:66:71:94:a2:
                    6d:4f:6e:f9:05:68:d7:83:b4:4a:2e:c4:39:2f:3d:
                    c1:7f:50:e0:02:f2:18:5c:e3:17:93:6a:62:b9:8f:
                    ff:77:8f:f5:87:8f:a0:e3:36:2a:7c:22:7d:76:7d:
                    77:d1:ee:f4:df:4b:cf:0b:d8:a0:d4:f5:44:1c:3d:
                    2b:6e:98:2a:76:e9:66:23:47:56:c9:fe:7c:46:28:
                    58:4b:cd:06:0b:7b:c3:90:31:46:ce:e9:60:97:b9:
                    3b:e8:5f:b9:ae:45:1f:12:68:41:38:c0:2e:e5:d5:
                    1e:99:9b:41:b9:a2:aa:a4:5d:34:9e:60:dd:50:06:
                    ac:8d:c4:27:61:32:f8:49:b9:67:0e:59:d2:0b:e4:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:96:46:73:25:10:A2:50:77:C7:B6:92:3F:BE:20:52:DA:2F:25:F7
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:b0:ea:bd:dc:eb:d7:32:6b:e4:75:c9:9f:74:e3:7d:ab:
         73:75:d9:2c:83:8f:09:83:1d:8f:c9:09:fd:00:e8:37:36:55:
         5a:71:9e:7c:d1:df:2c:57:f0:90:c8:7a:20:5f:10:03:ea:e7:
         62:ee:dc:6f:19:bf:04:54:93:68:45:a7:d5:be:0a:42:8a:0d:
         f8:10:ec:74:a2:19:60:a4:43:3a:fa:80:8a:66:c0:3e:ca:7e:
         37:48:60:67:1b:fc:7f:9f:ce:4b:98:8b:0d:c8:ab:4b:c4:df:
         11:19:86:43:03:e2:f5:a5:f4:1a:fc:49:d1:c6:b8:2f:a3:87:
         c5:34:60:d8:ce:cc:e7:58:fe:e8:c4:49:7d:6c:8b:75:cc:10:
         70:5f:b0:9f:39:33:5c:03:d0:40:68:12:8c:c2:f7:d4:8a:9b:
         47:f3:a8:7d:b6:f8:8a:92:f4:f1:b5:8c:98:06:89:c2:d5:46:
         cc:2a:2f:a5:af:ca:a3:bc:b3:7f:87:46:c9:6a:75:06:d6:16:
         19:12:5c:3c:97:fb:b6:59:68:59:e1:ef:cb:35:1f:7a:0e:41:
         82:81:ca:bc:1d:74:d0:dd:5f:a4:d7:c8:84:7d:b1:b8:79:1a:
         60:f0:c3:bd:41:fd:13:bb:9c:fe:6c:4b:4e:80:94:70:53:c6:
         f8:0c:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----