Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          k5wZgxma2SAiwGerXB7YyS56FVJB8g6Lz31dngcYdrg=
Subject key identifier:   55:CB:C6:5D:57:BC:74:0A:BC:63:C4:11:F4:E1:6B:9A:46:B6:CE:66
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0194BC3BFB27A9449F17A2C738123FC6DD77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1457
Signing time:             Fri 31 Jan 2025 12:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:35 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: Ux1xjZtdd4R-4AFfQjDwH2AozmQ.roa (hash: GXSph5a+mZn34ovGM14lZF4X7l9AFbPgw70r+8L+yY4=)
                          3: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          4: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          5: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          6: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          7: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: 1AD98X9kxDzEnm7Xbni/q5+j1pOcBYUj3Md7n36C/4g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:fb:27:a9:44:9f:17:a2:c7:38:12:3f:c6:dd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jan 31 12:00:35 2025 GMT
            Not After : Feb  1 12:00:35 2025 GMT
        Subject: CN=55cbc65d57bc740abc63c411f4e16b9a46b6ce66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d2:e9:62:4e:f9:17:0b:a7:13:1a:80:a4:b6:
                    32:9f:90:40:89:d8:87:1a:90:20:73:70:91:ca:be:
                    72:c4:13:e9:41:eb:04:e2:98:ec:36:8d:5c:30:26:
                    a1:36:77:90:55:8f:1a:10:73:3d:5d:00:89:44:23:
                    91:37:b3:2e:7f:a5:9a:9d:c3:03:7e:29:32:46:05:
                    83:fb:d5:49:7a:9b:4c:a1:a2:74:04:88:84:8c:fc:
                    d0:39:17:3f:f1:cc:7c:1a:99:07:e6:ef:3b:cc:0c:
                    78:e0:68:fb:e0:07:d7:57:15:46:19:9b:ae:10:96:
                    25:38:79:be:5a:f7:8b:c0:ff:86:95:09:eb:9b:70:
                    10:1f:97:54:4e:f5:ed:c3:ec:b5:fc:25:14:17:b5:
                    f1:0c:73:0d:1a:fa:00:70:04:8b:b4:72:5c:26:14:
                    e5:f2:f0:b7:cf:ee:d7:cf:16:54:c6:b3:92:8d:64:
                    82:ac:19:b0:06:3d:fa:ab:13:2e:d1:44:07:0e:7f:
                    3c:6b:53:d3:ba:b9:00:39:87:15:a3:6e:6e:15:2e:
                    ea:00:26:0b:6a:fd:7e:1b:5c:ca:6d:47:09:d3:b1:
                    ad:0c:5a:b6:2e:5b:f4:40:8a:3a:6c:65:ec:c6:e7:
                    fb:b9:36:a3:0e:ba:51:66:98:46:50:3d:ad:cd:4e:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:C6:5D:57:BC:74:0A:BC:63:C4:11:F4:E1:6B:9A:46:B6:CE:66
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7c:f1:a8:da:6f:87:88:b1:23:05:2d:b2:d7:0f:e6:b8:23:
         50:8a:35:51:e5:aa:05:be:3e:b1:4c:97:00:79:00:38:6c:90:
         e2:d0:28:15:a1:e5:94:ab:cd:0a:e0:4e:63:d5:ac:15:30:50:
         c3:19:de:7b:19:37:a8:89:0b:42:79:db:64:72:8e:f7:d9:ec:
         77:ff:4e:9f:ab:40:5e:21:4f:bf:48:bb:fc:58:44:ab:2a:2d:
         c1:67:a7:3a:76:c6:d5:2d:b7:b5:ef:00:89:16:91:79:03:67:
         e6:f7:3e:52:9b:25:c6:b0:20:d8:35:77:3d:b9:82:87:b2:85:
         f2:7f:dc:be:00:18:b3:7f:17:e8:b0:e4:0b:9a:94:f3:3f:9d:
         24:14:2c:be:14:b2:da:6e:70:b1:c9:85:c4:92:a7:39:09:fd:
         b2:c9:dc:f4:51:e9:17:a8:da:f8:c0:4c:e0:27:06:5c:a3:b6:
         dc:54:d3:23:2b:87:f5:62:a0:be:a7:09:79:10:a3:4b:99:18:
         fa:c2:d1:1c:f0:61:69:cf:f4:a6:86:2c:0a:60:3f:35:9e:fc:
         bb:97:be:a4:0e:11:34:cc:39:ed:55:fa:20:e3:35:cb:fb:e5:
         d7:56:83:28:5d:e0:d6:c1:32:25:27:ef:47:29:52:08:68:92:
         0e:3d:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----