Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          OCgkKrGDEiqkwJ8kL42dWO0IPCVDFg4aUo+VXNUrr0c=
Subject key identifier:   BA:DF:6A:D8:81:32:14:09:0E:D4:2E:BD:2D:A7:96:95:01:96:7A:3F
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       0194BC04EF144DD2EAA3F0AEF0FFF9CF1465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 11:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:27 +0000
Files and hashes:         1: 6QhOsCJ9h6HeSXKy_M7Ok4EmHTg.roa (hash: xRJq8TlFtqjHXFvDS46olNKe9KrmjF4yplWKPRJSIMg=)
                          2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
                          3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
                          4: IxtNjuKUizmcc0fUk02pubB13wI.roa (hash: Y/QpK6VZeSMBv18MoDt4uj1oGyf+AVzqAWZs51+HsbE=)
                          5: ik7BczW7s2cKSRXetHUxAcfKSmg.roa (hash: 1phjfls1YRQbAw6RK/ctMkM6JhPIlCwGD3vDCMjjxV0=)
                          6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: K88NQwCNJPBWhCVzpAUG5KQxadQpwcb3cDAgJPWh43s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ef:14:4d:d2:ea:a3:f0:ae:f0:ff:f9:cf:14:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Jan 31 11:00:27 2025 GMT
            Not After : Feb  1 11:00:27 2025 GMT
        Subject: CN=badf6ad8813214090ed42ebd2da7969501967a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:7d:6d:fa:a6:25:bc:6b:cc:a9:eb:02:0a:
                    5c:fd:dd:3a:3e:7c:07:cd:a8:be:d9:5a:37:46:66:
                    6c:c9:5c:40:7d:1f:9f:21:75:6a:d6:7c:58:a1:01:
                    9f:d7:d2:ce:ca:ca:7a:b7:13:7f:0b:07:f3:8b:54:
                    52:ea:53:07:ff:80:0b:51:34:fd:36:f1:6d:ba:b4:
                    6f:e9:d4:3f:8e:77:d7:8a:f5:3c:7d:e2:51:4c:22:
                    a5:cf:df:22:42:fb:30:2b:bd:d3:2b:6e:c3:83:f6:
                    b4:9c:ec:cf:ba:0f:fe:e8:5c:01:57:b4:0a:2f:fd:
                    a1:ef:8a:18:9d:ec:08:69:24:c1:25:9a:64:31:1d:
                    28:d2:b9:5f:f6:2e:61:26:86:c2:32:00:ef:e0:b8:
                    a0:c9:c5:de:0a:51:97:7b:3d:b1:b8:24:b3:6e:c9:
                    95:86:b0:21:c4:ff:74:d9:93:e1:1b:61:14:93:69:
                    f7:d6:80:54:e6:b8:c4:42:52:41:4a:50:c3:1b:fc:
                    79:a7:c4:50:71:a3:ca:98:93:20:6c:05:30:59:28:
                    2e:90:ae:61:57:af:4e:29:72:df:19:67:c6:87:63:
                    f9:a8:18:9c:4a:d4:11:ee:66:71:b3:43:c6:ec:f7:
                    04:f7:2b:c8:dc:98:8b:d6:db:74:93:ca:19:ba:58:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DF:6A:D8:81:32:14:09:0E:D4:2E:BD:2D:A7:96:95:01:96:7A:3F
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:80:91:0a:26:b6:08:37:02:d1:e0:2f:a4:f9:f2:98:58:
         7b:24:00:1f:10:aa:d1:8d:48:fb:ca:05:27:0a:4f:82:4c:ba:
         bd:43:b4:05:41:b9:c3:aa:22:ce:06:a1:be:f2:82:c8:e0:26:
         34:9a:b0:e5:59:34:4e:a2:72:7e:83:2b:b3:4a:0b:9a:5a:c9:
         77:d8:81:f8:20:b0:e1:4e:58:7f:a7:2b:91:dc:11:c4:f1:5b:
         91:a4:ca:77:08:c8:5a:1a:b9:20:44:2f:a5:e1:2e:3b:f5:ef:
         ce:61:bf:03:a3:9e:9b:77:09:fe:b6:b4:30:67:e7:2d:d8:d3:
         3d:99:af:50:1a:1e:40:5f:21:a6:e3:ea:ae:68:b1:82:9e:a1:
         fc:fc:7a:64:d0:6b:f6:84:39:45:4d:6d:57:17:f4:02:15:11:
         8e:ee:92:66:10:c0:9c:94:34:f4:b5:c6:c0:53:5c:ae:bf:7d:
         c9:e2:75:4c:c4:41:50:7d:ea:27:7c:ad:fe:64:58:12:bb:3c:
         fb:cc:08:6a:0b:fb:81:18:08:ee:44:4a:d2:44:ba:b3:65:c7:
         c6:8f:ba:81:c2:4c:55:1f:f7:a6:67:5b:8e:e6:ad:c9:31:49:
         83:37:9b:0b:c8:74:32:30:88:0f:54:b6:1e:3f:3d:31:5e:5f:
         0e:1b:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----