Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          +YepMkjsHlfZUyNX8NIqEOhmfcmYriHU5wyvlYBHhjs=
Subject key identifier:   8A:B3:4F:3C:2F:38:19:7D:FC:99:98:1D:BB:7C:D0:B9:17:39:81:50
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       0194BBCE12AC71D66983540E69D571788F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          0AC5
Signing time:             Fri 31 Jan 2025 10:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:31 +0000
Files and hashes:         1: 4TbrBuZsL88VAAl1QCLmAWghqCg.roa (hash: iopY3SVCE/nuv4+imI+6O+SS27RRrP9dzDqH0wZ+omg=)
                          2: FKQuu6Kj3XuAbhD_hkdmiIg9ru0.roa (hash: BfDYVCCLX0UZgPY+reA/hpbk3+E5qzw6fvZYP021pLk=)
                          3: TBdRYI4Vp-3SsMereWjuJuGMK6c.roa (hash: bWYcU1CjUZXhUk+i248J8pYxf7A24hSe76RbYqPhQc4=)
                          4: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: ZEBCUhDby7vXyVp4el7L48GHrUuRLu8x0UYyT7boObM=)
                          5: V_fCtcHRcIvlGMfQMllvvNseZ5s.roa (hash: pcOqzRDVwxnAc2XcbL2lzklSAVLcGx3z65HCfsZTOqA=)
                          6: XZBUdypJdRsW9C7-bbCqwM2XeyY.roa (hash: Sw9HTQQH5rOvV845qg6T2/HMx+a+lVBlr9o8rtw6bfM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:12:ac:71:d6:69:83:54:0e:69:d5:71:78:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Jan 31 10:00:31 2025 GMT
            Not After : Feb  1 10:00:31 2025 GMT
        Subject: CN=8ab34f3c2f38197dfc99981dbb7cd0b917398150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:f3:e4:e3:76:00:0a:c7:e1:f7:c8:2a:15:
                    94:1f:8d:f2:3e:54:e9:48:05:4c:46:19:f0:75:36:
                    65:dc:73:d0:0d:6c:af:17:3c:01:a3:da:0d:55:6c:
                    fc:91:3a:2d:68:27:92:21:ce:10:78:d3:53:78:f7:
                    52:c0:fa:aa:be:e2:fb:be:84:84:ba:4e:71:0c:8e:
                    69:be:90:66:e5:0d:14:e8:22:27:95:03:31:2d:ea:
                    ab:b0:40:de:0f:70:c2:ee:47:65:63:49:23:df:b3:
                    a6:4c:f4:27:69:10:c2:33:06:41:75:85:b4:87:32:
                    49:f1:83:74:53:a9:a4:a3:a3:78:a9:cd:10:33:83:
                    2c:1b:f7:1c:f5:78:69:4e:68:fa:73:44:cc:b3:eb:
                    c5:fd:34:a6:c0:f1:58:a2:04:be:83:45:3a:7a:f1:
                    69:c1:7e:f5:30:70:2b:06:64:7d:e6:c3:cc:50:32:
                    ac:6e:98:77:28:b4:f7:bd:23:e6:b9:be:b3:9e:65:
                    31:a4:df:b3:a2:62:db:48:27:04:72:cb:2b:d0:ca:
                    98:50:8a:6c:92:c3:42:b7:06:20:5f:df:2c:88:ee:
                    76:2d:89:c2:97:65:6b:d6:40:9a:1e:4d:6a:d8:4d:
                    76:16:52:a7:a6:5c:67:e5:bf:4c:ea:34:97:fa:fe:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:4F:3C:2F:38:19:7D:FC:99:98:1D:BB:7C:D0:B9:17:39:81:50
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:75:d3:70:82:1a:cc:68:ea:52:27:f4:cd:99:4e:3d:f5:a1:
         d1:f1:46:93:25:e1:ad:72:d2:2f:03:a4:e4:33:08:6c:5e:1b:
         f5:ed:1d:f4:53:2f:b2:02:7f:68:8a:23:20:3f:c5:83:84:e9:
         da:2d:60:0e:28:a5:34:c4:32:71:69:2e:97:4d:b7:42:a2:f2:
         a6:9f:3e:f1:98:76:f9:aa:9d:00:19:c4:fc:8f:1c:77:79:88:
         36:a9:fa:a7:43:ee:56:b7:54:ab:da:2a:e9:64:cb:90:61:ae:
         05:ef:3f:e4:3b:41:48:8f:97:9f:ab:bb:98:fc:fa:b9:42:0b:
         e7:bb:02:e8:c1:cd:5c:89:5f:14:78:de:db:13:c2:60:bd:62:
         69:c4:a0:3c:69:d9:45:7e:6a:c1:cb:f2:6c:b5:3c:4d:06:0d:
         9e:6b:48:78:6d:8d:0c:46:a8:e8:db:80:54:7d:53:eb:da:a1:
         f7:b7:1a:b5:13:3e:91:e4:86:d3:6d:a4:aa:ac:34:09:52:9e:
         00:64:c0:72:4c:64:1e:a1:7f:ae:6f:9d:e4:53:d0:17:6b:f8:
         19:d3:e7:a7:55:b4:22:7a:43:3b:4f:ca:38:2c:39:18:42:f1:
         a0:b5:3f:1d:c5:83:1b:8b:e8:86:51:c0:fb:13:b6:8d:1b:b1:
         6f:3f:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----