Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File:                     uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier:          yOR8eX1ya1blJTMP6uXGP3f0+JtRWzkpqKsDwxlQHBs=
Subject key identifier:   B4:5A:4A:85:56:46:FA:BE:F9:03:A2:BA:C4:20:F0:0B:77:08:FB:9B
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer:       /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial:       0194BC04F860CA6CEC5982BFAAFF68F4A51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number:          055B
Signing time:             Fri 31 Jan 2025 11:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:29 +0000
Files and hashes:         1: 2t371AmA6am_gT2DygfV8oUEot0.roa (hash: jKlYnyLUgDsZbjU8rac27z9vNrX7VaKOYzCWe3mGEeg=)
                          2: 3uSBRyWYKWFXh6fJBh05eSD-NPU.roa (hash: Dmiovbs0P8NPsrWA6ocpp2+fAbq0ynsSfysA/ZSoY4Q=)
                          3: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (hash: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=)
                          4: Q-ERh4C_fIreU1kJHqIbiCU1JV4.roa (hash: CvofurTY3xCBBIW91EGU3e0F4XVRnYSMNX8fSyDcopY=)
                          5: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (hash: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=)
                          6: eDpZd8hCNjolSN4qkPkdEuk5Cpk.roa (hash: GpXxUwCVOcT9tKB9rJ3lQPazQRu2PeNiLt4ytxxEgyk=)
                          7: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: U3RsgfnEaJADNwzzW4bBIcd7/rYvDVPuTp1dEJYJhD0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f8:60:ca:6c:ec:59:82:bf:aa:ff:68:f4:a5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
        Validity
            Not Before: Jan 31 11:00:29 2025 GMT
            Not After : Feb  1 11:00:29 2025 GMT
        Subject: CN=b45a4a855646fabef903a2bac420f00b7708fb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:b3:75:3f:5c:8f:08:73:e5:7f:6e:e6:c3:
                    97:65:ee:c0:81:ea:37:87:4b:c5:a6:dc:8d:a6:a0:
                    12:0a:84:79:3c:05:cc:af:88:4d:46:fc:89:4f:85:
                    77:f8:91:4b:b0:0c:86:b6:5a:74:e8:6e:89:cb:5d:
                    7b:67:ca:0b:3d:36:60:36:05:ff:43:a6:4c:85:0f:
                    c4:2d:aa:44:b8:ef:c9:11:da:cc:5b:c3:8d:93:10:
                    df:fe:68:41:6c:fb:81:51:51:72:57:ea:46:51:76:
                    e3:0e:fc:9b:39:93:61:58:1c:7a:8f:95:a4:37:76:
                    5c:9d:d1:b8:81:02:ba:27:e0:e0:59:63:c4:ef:6c:
                    b2:b4:70:89:23:75:18:a3:e0:50:89:67:e0:be:f1:
                    52:b7:f8:34:71:52:0f:48:f2:75:b4:d9:37:ce:f6:
                    46:58:43:de:13:3e:e6:37:8c:81:8b:1e:58:34:5c:
                    1f:36:02:65:e3:74:b0:55:4f:66:5d:06:f2:33:ef:
                    75:e3:47:89:81:b9:98:6f:bf:dd:71:fb:35:77:b0:
                    33:fd:ba:05:93:45:7f:12:f6:29:f0:7e:7c:96:f6:
                    24:02:e1:4c:ff:1f:6f:65:cb:fb:c5:cf:4f:b6:b6:
                    9e:d7:e6:52:2d:b2:cf:99:fb:e9:0a:c8:4c:c9:92:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:4A:85:56:46:FA:BE:F9:03:A2:BA:C4:20:F0:0B:77:08:FB:9B
            X509v3 Authority Key Identifier:
                keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:46:06:6c:a7:8f:50:74:87:c5:4f:e8:aa:66:8c:a8:b0:23:
         bc:7e:49:15:11:b1:a0:16:47:d5:95:36:62:69:64:9f:92:39:
         c3:b6:3c:91:f5:8d:6f:3a:fe:87:89:74:70:16:62:f8:ae:5c:
         c6:4c:e3:15:fc:bc:55:e1:5a:13:30:73:a0:23:3a:92:a7:90:
         46:4c:5d:f3:02:b6:c9:74:cd:c2:8a:8f:2a:a7:4a:b8:eb:49:
         49:94:44:86:8e:2b:50:f1:d4:71:ef:14:ef:c7:7f:be:da:77:
         a1:ce:39:cd:92:99:6d:05:dd:68:89:72:08:d0:bf:39:fb:24:
         62:b1:e0:66:7a:4d:e4:46:45:f7:6c:d3:da:9b:b8:5f:27:1a:
         97:67:5d:3e:47:20:fc:fa:36:58:12:b4:b4:cd:c0:3e:d2:c6:
         78:d5:05:a2:e0:ae:6c:9d:64:c2:c6:40:5d:21:c1:a6:11:15:
         4b:7c:37:77:c8:26:84:d4:49:84:e9:19:4e:8c:ee:e3:0b:71:
         fb:75:17:fd:54:aa:43:e9:5b:ac:30:76:eb:12:3f:38:eb:75:
         40:06:d1:b9:6b:68:7a:17:97:bf:83:90:c0:b4:2a:60:ea:02:
         5c:ce:64:1b:e6:1e:4a:01:9c:2c:5a:f4:0b:ac:15:31:fe:fb:
         9b:2c:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----