Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File:                     HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier:          MjLSQRHxcZzCIH7jTv2cIrDIge+Ee+1gA77Epivro/4=
Subject key identifier:   98:56:62:46:95:46:CB:86:64:70:B2:7F:D3:B7:59:B2:3B:4E:92:34
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer:       /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial:       0194BC72B50A096B695D704E7C0BDFA09AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number:          139C
Signing time:             Fri 31 Jan 2025 13:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:21 +0000
Files and hashes:         1: 1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa (hash: OZx3u6xzIMjyl5Um2kz+G+WpnO01yNqGdt7/mp9FJDI=)
                          2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: /3Loo9DKkvy8+kgZvm+fFgpnjk74j4P8gFpCt9CdpxY=)
                          3: I7yYY6oN8nbmOzWKLfxUY08F4VM.roa (hash: OpjuP5bzSExVmZzxUJkOBU+S1bIyOKqFxjUEQGmtVXk=)
                          4: Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa (hash: P/0Xq7jm9FfNGJ2i4ahCVuaX5VvDxfSb57nEi8i1Tlk=)
                          5: o33kvNGiVE5QwGbXRcS1WVlFPa4.roa (hash: tbXNsaKqMuIQJAxtvQCEh1A+tSp7ogPpQ+0PODtQq48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:b5:0a:09:6b:69:5d:70:4e:7c:0b:df:a0:9a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
        Validity
            Not Before: Jan 31 13:00:21 2025 GMT
            Not After : Feb  1 13:00:21 2025 GMT
        Subject: CN=985662469546cb866470b27fd3b759b23b4e9234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:94:aa:a9:b7:0c:42:a5:0d:16:01:49:13:
                    b9:17:60:f8:32:86:ea:41:c4:69:c1:5f:78:ce:fe:
                    e0:ca:6e:f0:f9:f8:fa:3f:2d:36:df:31:4d:b4:db:
                    d1:16:48:b5:92:d9:df:54:0b:6b:82:d2:0f:bc:f7:
                    bb:6a:b8:71:3a:14:5d:ce:19:3e:7f:56:5b:a5:0b:
                    f9:f2:f8:08:fa:05:3b:53:2d:7e:92:2d:7e:3f:c8:
                    dc:ef:a6:f9:24:3f:a3:c3:e6:ed:a5:05:47:46:81:
                    b5:6e:1b:9c:16:a7:be:e7:0f:2e:76:aa:60:46:d9:
                    fe:e5:16:c5:3d:43:a9:7b:6d:6f:2b:78:4b:96:7c:
                    b1:91:d2:16:37:4d:cc:82:6e:2c:71:2d:ac:71:b6:
                    19:33:da:3c:20:d7:af:4e:d6:8f:ae:85:33:43:17:
                    16:58:15:55:d5:43:b2:79:37:d7:1b:68:c1:da:b2:
                    a9:6d:3f:23:54:fa:45:7a:8e:ea:5a:af:5f:9e:3c:
                    1d:72:22:fd:06:c1:1a:70:59:7b:a3:f2:2b:89:95:
                    3d:8b:08:06:b4:05:ee:e7:e3:3c:90:81:bf:21:07:
                    81:c9:61:2f:a1:e0:19:e7:be:32:03:cf:e6:df:09:
                    a6:9b:01:09:90:6d:4c:36:bb:6e:3e:6f:8b:da:1f:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:62:46:95:46:CB:86:64:70:B2:7F:D3:B7:59:B2:3B:4E:92:34
            X509v3 Authority Key Identifier:
                keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3b:c2:44:3e:10:c7:64:14:cf:f2:8c:b2:8c:ca:bd:a9:42:
         d6:c6:9b:b5:02:28:a6:0a:52:3b:a8:8b:51:d3:cf:7e:40:65:
         6a:3d:18:34:09:92:5d:be:0a:72:1b:ad:8b:9f:dd:ba:73:1a:
         81:ac:0d:51:8d:3c:40:b0:91:84:29:45:61:c5:c3:57:58:79:
         34:b9:ac:96:14:4c:21:e0:33:a7:f2:55:46:3d:b1:e1:84:da:
         b5:78:55:2a:c8:c5:50:d7:51:bb:0d:91:ff:ee:4d:98:d7:55:
         78:13:df:4a:d7:d4:b2:67:03:22:41:80:98:15:96:44:e2:00:
         41:85:57:74:9c:95:04:55:72:4e:7f:f0:ee:1d:6d:96:7b:8a:
         1c:65:f9:75:95:6d:9e:de:e1:b1:ef:c6:a5:82:f7:78:6e:0b:
         bd:cf:64:d2:2a:58:45:14:19:a2:3a:6d:17:a1:f9:71:64:7e:
         48:05:cd:90:4e:d2:48:d5:98:3a:14:60:6c:a9:7e:ac:7c:09:
         85:e2:3f:2c:f1:31:a5:17:c8:ed:e3:79:16:5c:30:6b:fb:85:
         a5:06:6e:37:3b:a4:03:9c:fd:45:ce:20:12:4a:82:2b:8c:9e:
         ea:c0:c6:b5:be:0b:6c:e8:df:c1:e4:49:39:38:76:01:81:6b:
         f8:51:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----