Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File:                     JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier:          C/QKa342RhFijjaVj5yFiCHbBXP8ZzMDpCCRqH6M6xU=
Subject key identifier:   C3:B5:D4:D0:6F:9A:E4:92:22:CE:E1:34:6B:3F:6D:C0:3B:36:A3:5C
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       0194BCE0EEA822F6E9AEF64CC5701DB70BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number:          10DB
Signing time:             Fri 31 Jan 2025 15:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:45 +0000
Files and hashes:         1: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=)
                          2: IzLkhR_yv-v1GWTNh9mHUxrH6l4.roa (hash: Gz5yahpviiaRhf/uooYdv+kvLqcJz9y4V27m2bP2qhQ=)
                          3: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: pdDsYNgJ+dSA2Hj41olujwpRH8iJucXSoTbEcOKbQWg=)
                          4: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=)
                          5: LzqzV901FJ7L-pE2io0JnQT7BO4.roa (hash: GQqWNE02zR7Pp1sxpXbJtIEQadxv84uYnIivoQsK42g=)
                          6: PSAVpGqbLcX36nvl195Ht9uZru0.roa (hash: zB4ZQEbAnrwd223bn2HnWhFXbaVVIUWcshlHHT8Vv9g=)
                          7: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=)
                          8: aQ6I41_QRPvjiU5_qo41tOo2WTI.roa (hash: /IaHjjTynvY919oXe4RI1UBce0aF6SrvJgv1JXcNU5M=)
                          9: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=)
                          10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ee:a8:22:f6:e9:ae:f6:4c:c5:70:1d:b7:0b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Jan 31 15:00:45 2025 GMT
            Not After : Feb  1 15:00:45 2025 GMT
        Subject: CN=c3b5d4d06f9ae49222cee1346b3f6dc03b36a35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:e2:cd:48:42:7c:47:49:61:63:7b:a3:2d:
                    cc:21:12:22:50:dd:dc:e3:ea:e1:26:08:f1:82:76:
                    ab:c3:40:06:44:2f:97:2c:7a:63:e2:43:08:a7:c8:
                    38:86:be:0e:47:58:8f:09:59:e7:8e:b1:c9:2e:42:
                    f3:a1:52:03:66:05:bf:b5:2e:bb:bc:f1:c5:55:66:
                    4c:25:d7:a8:30:d6:32:0d:3b:6f:3c:4a:da:dd:17:
                    8f:04:a1:7a:f3:15:a7:8a:0a:b3:23:b5:34:04:75:
                    c2:98:74:bb:04:3b:01:06:92:6e:9a:96:0f:73:38:
                    82:bd:04:3a:7c:e0:c3:c1:da:58:64:7c:30:62:ea:
                    bb:47:65:9a:88:f5:20:66:1c:db:e6:5c:78:49:0d:
                    65:46:f6:93:21:53:ad:53:59:c8:40:44:e9:6c:a8:
                    a4:59:8b:c4:06:f1:2f:78:33:29:52:72:1f:7c:b2:
                    e2:a6:f2:33:92:66:a3:2f:7f:b3:4b:6c:3e:8a:69:
                    1b:14:2e:87:5d:d5:93:4f:c3:ef:64:9d:7e:bc:74:
                    c8:82:ff:f4:55:31:0b:7f:f6:a1:e4:8d:1d:df:fd:
                    b4:81:a2:72:d0:e1:6e:15:3e:4a:5a:5f:f4:fe:93:
                    ba:28:60:d7:49:41:8a:b8:70:af:9d:7c:9f:ca:dd:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:D4:D0:6F:9A:E4:92:22:CE:E1:34:6B:3F:6D:C0:3B:36:A3:5C
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:0a:89:8b:c1:48:52:02:1f:a3:d2:41:27:6e:87:0b:f5:
         94:c1:14:81:df:02:f5:eb:ab:e7:89:98:0e:29:72:e2:23:8a:
         b1:a9:59:5f:3f:0a:60:16:68:db:2d:f4:c0:1e:be:83:df:6c:
         bd:0b:25:22:e6:e6:83:39:5c:3e:42:16:cc:40:16:46:c0:1d:
         27:d3:93:1c:5d:a2:ac:2c:74:39:66:65:b2:3c:89:9e:d1:46:
         53:58:80:68:da:f3:d4:ff:6e:3f:f7:0e:17:e3:9f:e0:e1:e8:
         06:33:de:4a:18:be:7a:99:a6:c0:15:7a:1b:8c:5c:e0:3b:9c:
         b5:4d:8e:9f:13:9c:a1:f5:63:fb:31:41:f1:f0:4c:25:1f:d5:
         b7:1a:a9:1d:cc:cc:a8:b4:7f:7a:e1:12:fb:69:63:6d:f1:00:
         29:2e:ff:89:56:69:0c:33:31:d0:3a:be:ab:1a:a2:94:3e:33:
         22:f8:f5:c9:07:fc:a0:33:2e:cf:3b:b7:b4:a7:fc:cd:29:30:
         e6:30:e3:cb:1f:cd:c3:72:7d:f8:68:f8:50:ec:b1:e6:42:91:
         dd:b7:87:1a:55:5a:20:a4:33:c3:a1:5e:05:d3:87:1b:d7:a9:
         9c:43:dc:8a:c3:5b:31:5a:68:78:34:a2:75:a9:f5:4d:68:5e:
         36:33:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----