Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
File:                     5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json)
Hash identifier:          MleXfcGMs0b6B0yed6GUfXdhgzpMeDpZIIRtPoEqdKQ=
Subject key identifier:   CE:83:6A:2D:3E:45:6E:E0:91:26:E9:2A:FC:4D:18:E3:A3:B3:02:D1
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Certificate issuer:       /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial:       0194BD17D57230C85AF7F4DD742848705F12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft
Manifest number:          146E
Signing time:             Fri 31 Jan 2025 16:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:43 +0000
Files and hashes:         1: 3KkVFS5E_0OXY2I0JPm831xlJRY.roa (hash: O3hSmLSCj4vhYoS62smX0V+VSwAD/D1TNqXoWq8n6pI=)
                          2: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: R5sWJX210CZJ0ZHn2pU4MjuL+4QIVV/oARxw790/4MA=)
                          3: YYYjBm1cHK07qbUZvnPjiWS8SJc.roa (hash: MDsHneIlPDU9EFijEVHpgaP4TeikhndTgWyCvxSYX5M=)
                          4: ZLyEHguTDj7_eAwLYTv1l-ESnW8.roa (hash: kfxLXEBdhl8n9+7tXLKP0Rx1fp10fHwf5ZErtSpKDqE=)
                          5: np5ApzvF3lA5ni3WwjjgrcdZ2Tk.roa (hash: jhCq+3Rux2qXuCc1aEm0+2wjAzlzRIc5exfEKvJ2iL8=)
                          6: sJLQX0xj_JXH1h41N6UVjiWKBII.roa (hash: +Hmj+iesuGr60ujxMyJDlZF5PIcV2l7P1ugWqsp11rI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d5:72:30:c8:5a:f7:f4:dd:74:28:48:70:5f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
        Validity
            Not Before: Jan 31 16:00:43 2025 GMT
            Not After : Feb  1 16:00:43 2025 GMT
        Subject: CN=ce836a2d3e456ee09126e92afc4d18e3a3b302d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:ef:d5:4b:ce:ee:67:54:8c:f9:00:f4:bb:
                    85:0d:92:16:d2:b8:2a:f4:92:71:d6:58:94:56:22:
                    fc:f2:fa:86:4d:e7:42:45:59:e7:58:8e:6b:16:13:
                    47:84:1b:d0:c0:d6:4e:fc:6c:d9:04:0a:48:97:e7:
                    0e:21:c4:db:b2:4a:22:cf:3e:3f:25:c7:76:08:bf:
                    2a:e6:fc:d3:d7:f6:19:54:be:37:0a:12:7c:58:2f:
                    e4:8e:6b:ed:26:b7:7f:7a:dc:a1:d4:21:3c:f5:74:
                    5a:22:97:24:e3:ac:f4:36:40:74:5c:96:9d:3d:49:
                    7c:dc:0b:6f:90:f2:c3:94:d9:4a:76:da:bf:3c:37:
                    23:d7:0d:a7:29:00:7f:9d:00:9b:f2:1b:94:c6:96:
                    de:c2:1f:5d:ce:22:f6:99:8a:7d:6d:11:92:23:0f:
                    6a:2e:2a:2e:e9:ba:c2:9b:2f:bf:d5:6e:53:30:62:
                    7d:69:e7:88:19:a9:56:72:8f:ee:e9:cd:26:5e:b9:
                    8f:97:0c:3f:35:24:89:68:ad:46:e8:36:e1:3d:fe:
                    e6:16:7d:39:f5:82:5a:b9:3b:80:96:79:11:8b:d7:
                    01:d3:85:71:c9:28:2f:07:f3:18:f9:9a:f2:1f:8f:
                    e8:36:bd:31:23:c5:dc:db:e0:c8:38:8c:28:7c:86:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:6A:2D:3E:45:6E:E0:91:26:E9:2A:FC:4D:18:E3:A3:B3:02:D1
            X509v3 Authority Key Identifier:
                keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:20:7c:dd:8e:ea:62:47:74:df:de:5b:ab:57:13:8b:c3:
         80:ca:5a:71:dc:47:da:63:c2:9f:9b:0d:df:ba:be:80:9f:e0:
         c4:8a:cc:f1:c5:c4:f2:a3:40:3e:a0:f1:81:c3:d9:87:ab:97:
         2a:10:07:ed:0a:fc:e2:f3:d5:36:5d:9f:ea:92:4d:30:22:13:
         9e:fa:77:9f:4b:c5:13:44:37:c3:69:1f:26:cd:59:78:a7:1b:
         77:68:71:18:c9:1d:05:ff:3c:40:89:dd:1d:b4:95:14:52:56:
         72:9d:25:1c:ad:1b:6f:18:44:6e:fc:47:2f:4a:33:b2:c4:1c:
         48:a6:5a:4b:12:2c:ab:3a:00:dc:1c:40:f5:de:0c:71:a4:39:
         b1:22:1f:16:78:39:10:66:1a:84:da:07:f1:f0:9d:27:3c:91:
         34:50:dd:cc:98:6b:05:75:5a:86:42:5d:ff:59:3f:e2:d9:39:
         8c:6d:97:bd:ee:af:fc:0e:fa:81:d4:03:ae:eb:be:76:a3:20:
         2a:06:3d:e9:f3:dd:54:62:6f:87:8d:26:6f:35:e2:bd:0e:19:
         7d:e6:b7:a0:af:3a:75:6a:79:e2:fe:40:54:d1:90:e7:64:e2:
         d6:6b:a7:62:0b:53:7a:6b:7d:c4:71:88:20:13:0e:e2:ee:b8:
         a2:0c:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----