Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File:                     Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier:          K3oCpuWIl4bo1jDd5oRs3+BL8xxjSIObxGg1JbIYUGk=
Subject key identifier:   FD:38:4E:6E:52:12:98:D2:5C:25:33:C8:E1:D8:3D:71:AF:B4:5B:6A
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer:       /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial:       0194BC3C883431FE69EAB1427106E59FCE01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number:          143A
Signing time:             Fri 31 Jan 2025 12:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:10 +0000
Files and hashes:         1: 4SxEa8qHfL0SdS-yvynVjEWywI0.roa (hash: ed273NQ5dggxiwmHaUzsS7LYiMx/0KEG21fx026Qijc=)
                          2: 57zAUxjN80d98_hrUg6wNGuh-LQ.roa (hash: qIcET8+9I+XlvyugPkuqmk4yArAibC2n8LmahOzKwL0=)
                          3: LE7N1a1uboQzN97q5uXEpXRCthI.roa (hash: acxO9/yWByiaEkWpHMZY/pa7lJUQ5fZxyIs+7NiR+UQ=)
                          4: NmoYPoFsB3H-yWZn9Rb0NDz1MJ4.roa (hash: FwqkjteV8mEkwCHBz60OLk0gwsGOE+XgtXFsarBN/XQ=)
                          5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: RmUzSho+7g5bzC0IJ7uB8U0w7bEcQbkHA/Uh8YMw0uo=)
                          6: rnTaQ1uEKUsJsa3f9-uniTuwHWo.roa (hash: 65NB0UfxYYmSvSLb5gS9zELjlvrzXWC3McdcTIR7Hxk=)
                          7: tIc5dJ9row9Jpwnimlce4tYbp44.roa (hash: ouwAo45RW/R/dO1EFuBCaboweb6Z3RjFTDf5e9DgnQU=)
                          8: xv_S9Q_lixnhLdeB2FeY6-83q40.roa (hash: fpHqpuP8WhUb/qgqx71BT4D9l/LEKw+tKbvv5QvJ1WU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:88:34:31:fe:69:ea:b1:42:71:06:e5:9f:ce:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
        Validity
            Not Before: Jan 31 12:01:10 2025 GMT
            Not After : Feb  1 12:01:10 2025 GMT
        Subject: CN=fd384e6e521298d25c2533c8e1d83d71afb45b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:f2:34:8f:8e:22:17:ad:af:97:c7:44:ef:
                    ec:0b:85:79:a2:89:86:8f:ea:81:04:09:82:96:a4:
                    f9:b9:96:ac:54:55:88:95:ce:cd:4c:1c:ee:02:b6:
                    23:3a:86:ed:fb:c0:7f:69:43:e3:32:a6:0e:ef:a5:
                    c1:51:48:49:38:25:a3:4e:35:d7:68:3c:5b:3d:dd:
                    1b:8a:df:1a:1c:d5:fc:b7:d8:ae:7b:51:12:f3:f5:
                    6c:a3:46:d1:5c:49:56:12:07:c8:17:e1:3d:f3:45:
                    91:ad:59:23:9f:66:15:68:3b:66:a2:02:dd:c9:6e:
                    fd:48:33:79:58:f4:66:4a:7a:dd:34:0b:29:53:28:
                    f0:a9:c7:c5:84:b5:7c:47:b4:2a:c9:a2:c6:08:d2:
                    39:35:c1:cb:2b:ba:4f:4c:c5:4d:bf:37:df:04:d6:
                    a2:4c:b4:37:64:15:5f:00:b7:03:54:82:7b:c5:94:
                    90:49:5e:70:ed:2d:f3:4c:89:9b:c7:47:28:a6:7e:
                    73:44:c2:9a:ff:4c:c6:e7:4f:3f:4d:93:b8:20:5e:
                    ff:c4:de:83:dc:82:0d:05:6f:8f:ce:d0:f3:df:ee:
                    aa:81:01:3e:52:0e:2c:76:55:18:2a:96:e3:9e:c4:
                    3c:17:94:05:9b:80:5d:a2:74:12:54:0d:7e:93:f8:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:38:4E:6E:52:12:98:D2:5C:25:33:C8:E1:D8:3D:71:AF:B4:5B:6A
            X509v3 Authority Key Identifier:
                keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:51:5c:87:c9:f6:e7:53:24:4c:33:f4:48:6d:79:ff:f4:
         51:d7:ab:58:04:5f:f4:05:e0:69:e1:cd:cc:60:21:10:32:d2:
         05:1b:0c:82:19:76:8f:f6:5e:c0:0c:14:a8:dc:ab:5f:c1:68:
         25:02:4b:0b:c2:76:09:c1:fe:bb:49:d9:db:79:03:af:50:38:
         12:44:3c:f3:2f:98:1d:8e:98:86:e5:97:f9:15:41:6a:80:63:
         86:4a:3b:59:be:ce:29:36:cf:5d:76:d8:98:a6:1a:79:60:0a:
         d6:1b:87:0d:d9:be:10:bc:87:36:e6:51:9d:29:27:45:32:2c:
         92:a6:39:85:f1:b1:55:17:cc:7a:ad:be:bb:0b:e9:ab:26:67:
         2f:9a:db:30:db:3e:08:19:18:c2:1d:5d:b7:d8:8f:b2:ee:ca:
         de:a6:d2:a3:a1:9c:91:0c:ab:55:47:57:c3:df:cf:a6:77:f7:
         22:9c:54:3a:a8:b2:2b:02:07:c4:a9:a5:96:bd:ad:75:eb:e7:
         7f:44:f9:be:0c:7a:40:c9:ec:81:a7:9f:7c:a2:e5:1a:4a:ff:
         24:c5:b0:24:7a:f1:6f:d9:f6:9a:6f:ce:99:c7:b2:b2:6c:3f:
         e8:1e:a4:d6:1a:e7:e4:70:4f:6a:97:f3:c0:be:87:57:9e:f7:
         7e:c3:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----