Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File:                     JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier:          X5vRuwalYhW8ku1pXcgHCJKZ7CowaDjAW4h1K7BOKhg=
Subject key identifier:   52:E6:97:B5:E6:4D:75:03:14:6D:44:2C:A0:E7:CD:34:76:B7:14:3E
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer:       /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial:       0194BC3C4472B19D2CC2E149FC185203A9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number:          0C5B
Signing time:             Fri 31 Jan 2025 12:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:53 +0000
Files and hashes:         1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
                          2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
                          3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: bxii/uYU3c0mpCG8at5RJARNHzG6dLoP31jjNXFON6Q=)
                          4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
                          5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
                          6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
                          7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
                          8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
                          9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:44:72:b1:9d:2c:c2:e1:49:fc:18:52:03:a9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
        Validity
            Not Before: Jan 31 12:00:53 2025 GMT
            Not After : Feb  1 12:00:53 2025 GMT
        Subject: CN=52e697b5e64d7503146d442ca0e7cd3476b7143e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:64:6c:1d:f4:bd:5b:33:14:53:69:47:a9:
                    c1:24:9c:62:0a:f2:aa:74:b5:ff:3e:f4:de:0a:60:
                    05:bf:69:d7:12:5f:fd:1f:b5:a1:c1:fc:6a:df:e9:
                    a2:78:12:f6:db:a4:38:92:07:77:5c:50:50:eb:83:
                    b7:16:d7:b3:e5:64:d0:de:8e:52:bc:98:03:60:d1:
                    22:99:db:cb:ff:0f:2f:fa:09:a7:91:54:ba:96:1f:
                    8e:f2:89:93:52:7a:00:39:92:ad:45:70:ce:e7:c1:
                    ad:e6:1c:c8:28:01:d8:2a:91:f2:1a:f6:7d:02:e9:
                    22:cf:2a:a7:71:c5:7c:ff:55:27:4b:4b:ef:e6:26:
                    ff:f4:ba:9c:6f:a6:b7:34:85:60:92:fb:56:34:d7:
                    81:9f:87:30:c8:0d:3c:16:bf:30:81:6a:ac:f8:1d:
                    52:4d:83:30:67:ee:5b:e8:7d:5f:c5:8c:63:bd:4d:
                    c4:74:26:bd:04:69:7f:30:8f:df:dd:84:28:00:6d:
                    6a:34:09:db:bb:f8:26:6d:20:e0:0f:c9:5c:39:9e:
                    3d:cd:77:3b:2a:98:a8:44:ea:3a:8c:b0:bc:a9:bb:
                    d9:16:2e:b5:7f:0f:0e:59:6d:46:01:60:2a:c7:dc:
                    0b:20:69:aa:87:55:0e:6f:a3:2b:d9:86:e5:26:fb:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:97:B5:E6:4D:75:03:14:6D:44:2C:A0:E7:CD:34:76:B7:14:3E
            X509v3 Authority Key Identifier:
                keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:d6:6a:79:f0:7e:65:71:84:bd:22:92:0b:7c:5a:fe:90:
         74:40:32:0e:4c:e3:bf:36:6b:9e:50:2a:51:58:59:4a:af:be:
         a1:7b:5c:44:f9:ba:56:91:55:55:0b:4f:c2:55:7f:af:b5:f5:
         95:3d:4e:34:f3:49:28:df:a3:61:92:0c:fe:74:48:16:e3:5d:
         30:13:d1:03:4b:2e:88:22:58:db:f4:ff:76:3a:7b:03:2f:12:
         04:f3:af:ed:36:8d:a2:7e:7d:db:0c:d4:4f:4f:a1:1e:5c:27:
         db:a1:53:12:ef:b2:f8:22:05:b4:a9:ef:11:ee:bf:9f:cf:29:
         8d:e8:c0:aa:1d:cf:ba:21:61:c8:e0:90:28:0d:57:8d:6b:e8:
         1a:25:8f:f4:91:54:68:2e:b4:a5:24:cd:77:a8:f0:cc:25:4a:
         35:09:11:d6:ab:eb:72:ee:8b:79:58:57:f8:0f:58:30:65:65:
         85:3a:03:ec:ef:f4:68:1c:4c:0b:a9:60:c0:59:9d:c8:44:fe:
         bd:3a:1a:6b:5b:03:4a:d8:62:da:dc:64:57:a1:a0:3e:a9:b8:
         a8:a0:23:cd:b6:a7:cb:fd:cb:ff:7f:37:3b:55:3d:14:97:54:
         a7:24:d3:41:92:d7:53:97:fc:0d:50:cf:80:0f:35:63:00:86:
         76:8d:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----