Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          9U9UKxdLS7TSyQR77IYwES/U1jcfsH4hoV/ec7ILcBg=
Subject key identifier:   A7:5C:54:92:3D:AF:9F:C2:FB:B8:3D:14:DC:C5:21:42:66:66:7A:B0
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       0194BCA9B9216CD768A29E91215FB3EDEBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          1165
Signing time:             Fri 31 Jan 2025 14:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:27 +0000
Files and hashes:         1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=)
                          2: 6n6eBKfvBliO2E4gkLt3eFYs114.roa (hash: RH+pf4eZP9zTs6UNzlcLIEdcDd3ZwVvqZYyWYbfqbRQ=)
                          3: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=)
                          4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=)
                          5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: bWZBj5G/Ai4zNeGflv+D4KY5vmSeqY2INN6BycGIwX8=)
                          6: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=)
                          7: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=)
                          8: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b9:21:6c:d7:68:a2:9e:91:21:5f:b3:ed:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Jan 31 14:00:27 2025 GMT
            Not After : Feb  1 14:00:27 2025 GMT
        Subject: CN=a75c54923daf9fc2fbb83d14dcc5214266667ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:7f:eb:dc:18:8a:7d:76:0a:0c:00:16:94:
                    7a:cf:86:73:ed:28:77:0b:7b:e6:64:b7:ee:3b:ca:
                    4f:cf:9c:f0:c6:da:42:cf:21:b6:af:3d:23:f4:55:
                    d7:53:fa:dc:50:f5:21:26:14:56:1e:08:80:21:d7:
                    14:2f:19:bb:f4:b1:7d:63:e2:9b:87:c9:89:f1:32:
                    bc:2c:cf:59:bf:23:6c:65:be:17:7e:41:ef:d1:82:
                    7c:a9:3c:5b:17:1c:46:73:5a:e3:88:63:a9:27:28:
                    6b:a5:96:ab:0d:3f:d1:c7:10:cf:46:87:6d:89:68:
                    f9:5c:57:f1:d0:fe:f3:7c:4f:36:01:a8:1b:14:dd:
                    62:a5:63:06:c3:c2:ea:9c:14:ed:4c:8c:7c:23:71:
                    cb:07:9e:d1:13:13:4b:7b:6f:8c:5f:a4:54:cc:93:
                    4f:a8:14:0a:77:e1:8b:c0:a5:60:47:1a:9f:ff:8e:
                    ff:6d:44:80:2e:e0:ea:3b:c3:b5:a4:e3:3b:69:c6:
                    73:6d:c3:b3:32:0c:3e:e8:b7:27:9e:88:53:96:e7:
                    9d:2b:48:76:fb:db:4a:a0:58:cc:a2:26:b0:bf:c6:
                    11:0e:be:7f:70:0d:b9:e9:ca:f4:7d:10:a2:93:54:
                    b7:94:e8:ce:56:c7:2d:ce:05:88:54:ad:e5:bc:67:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:54:92:3D:AF:9F:C2:FB:B8:3D:14:DC:C5:21:42:66:66:7A:B0
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:f6:8f:47:bb:19:b7:01:44:a6:83:a6:d9:07:61:76:b9:
         34:16:0c:bf:74:56:3b:7a:9c:52:4f:6b:10:d3:6e:a6:83:b2:
         6e:be:c3:aa:50:62:8c:07:0b:af:a5:1a:68:22:2c:db:83:af:
         3c:e2:06:af:ed:c7:3c:4b:79:3a:d8:10:6e:79:54:a5:4f:9e:
         a5:17:98:85:1c:18:09:84:d6:9a:c7:a7:20:0f:5b:90:cb:66:
         f4:06:aa:ff:69:f0:eb:e4:88:4a:09:e3:76:35:40:ea:2f:c9:
         14:85:52:56:14:34:6e:6b:19:e4:23:cf:eb:85:f0:32:0c:7a:
         31:a0:f0:71:6f:9b:f1:72:41:1d:5a:bb:ff:f4:21:18:a5:1d:
         46:b6:9a:11:d8:42:74:92:f7:a1:9e:d5:44:12:0f:98:92:8c:
         ad:e8:f0:2f:51:08:91:dc:7e:5c:15:41:4a:09:1a:5d:1f:06:
         ce:c5:26:ea:9d:2a:0f:d8:85:cd:11:e0:b7:38:39:6b:4d:02:
         b2:66:8b:d0:96:c0:c0:56:df:1a:63:70:bc:67:a7:cd:36:b2:
         c1:ae:7e:88:91:f2:fd:5c:c2:00:ee:8f:df:2a:17:ab:89:02:
         69:73:17:4b:ad:20:03:e6:a5:11:ed:e9:ba:b5:52:51:16:2c:
         24:65:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----