Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          9K6K9T5VPjtDhRUgTD5ck08rYCUj2TWub4ZxBRuhgpY=
Subject key identifier:   FD:59:CD:1A:96:41:6E:D5:0E:6A:71:25:FD:E2:37:A6:BA:EF:36:91
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       0194BBCDCEDC34BD86CD6E714EC0EF5E5326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          146A
Signing time:             Fri 31 Jan 2025 10:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:14 +0000
Files and hashes:         1: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: 97BCce5aXSKeKbN/mY/yUFec/JhSCtPieQBMv/Hny3U=)
                          2: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (hash: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=)
                          3: PcLN4OCrAYo7gp9-LrNRS28FuGA.roa (hash: 4PVTYuLNKNpIeRdCU1ysaHpHPoiG6A7KV2YGI8bMc1w=)
                          4: Rowc--7buNg_Ew_zrmynFHimxmQ.roa (hash: tRqjTRWW7K8WV4ruLRwNapxECkPe5ofBmkCYh5TfGtI=)
                          5: ubO5COeLYEj8EUH84jT31h_xw1g.roa (hash: s3liWR9u5QAr3kzTofUM8+A1nG9imw9GL31c3qivTBw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ce:dc:34:bd:86:cd:6e:71:4e:c0:ef:5e:53:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Jan 31 10:00:14 2025 GMT
            Not After : Feb  1 10:00:14 2025 GMT
        Subject: CN=fd59cd1a96416ed50e6a7125fde237a6baef3691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:4f:10:b4:10:00:ef:44:88:31:f1:05:68:
                    10:44:02:ca:a9:69:d8:d0:fe:d3:ce:ad:e3:2c:4f:
                    8d:d0:20:f0:ff:a5:e4:31:6f:9f:f6:d4:aa:fc:42:
                    6c:82:20:28:62:6d:42:51:39:31:46:67:09:5b:ea:
                    8a:45:9c:41:b6:6d:41:00:b8:40:94:a3:dc:82:97:
                    2a:bf:82:dc:b7:cd:41:aa:af:2d:32:c6:2b:d5:7e:
                    a8:be:01:fd:cf:c6:37:00:f7:a5:5c:a1:e0:30:fb:
                    38:ad:78:78:c7:3a:da:6a:6c:40:55:86:0f:94:97:
                    86:0f:4d:af:c6:06:5d:c2:bd:d4:bb:63:56:fb:5b:
                    ad:68:47:72:cc:3c:ba:08:5d:0f:e5:f3:1e:61:e9:
                    a5:da:e8:a3:b3:50:7a:76:30:16:92:07:72:a2:b0:
                    70:05:be:03:3a:91:22:d6:62:a2:eb:bb:70:15:26:
                    dd:f5:58:57:f9:1a:90:c2:bd:ce:e4:77:66:10:36:
                    9f:54:6f:7b:14:8b:9b:e5:58:c9:9f:a4:c0:15:4f:
                    a4:bb:61:77:d0:1d:a2:06:a3:85:72:54:90:94:37:
                    ec:75:01:17:ad:45:da:eb:8e:c4:4b:0b:fb:84:8a:
                    29:4b:d7:7c:04:4c:25:62:2d:3a:fe:11:d5:23:db:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:59:CD:1A:96:41:6E:D5:0E:6A:71:25:FD:E2:37:A6:BA:EF:36:91
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:74:db:a3:17:69:17:56:81:d1:51:42:ba:18:cb:d6:b5:04:
         6c:2f:22:90:09:e1:b4:33:4d:5a:eb:4a:45:d9:58:69:56:f1:
         2f:ff:c0:13:fa:09:6d:22:ba:cf:bb:71:3c:4c:7f:dd:77:44:
         b5:4a:24:e9:b0:8f:92:44:9d:e0:1a:58:d5:d7:85:99:a8:75:
         04:37:bd:27:61:13:ff:24:0a:5b:88:d9:18:97:72:db:e2:1b:
         88:be:9b:e2:98:8e:58:10:ce:60:5a:05:b9:fe:20:ef:7b:03:
         b6:68:8a:05:13:80:94:0f:a0:ac:33:a4:69:01:b5:42:d3:19:
         4f:6c:a0:1c:fd:62:a9:b5:db:8e:4c:15:2f:0f:17:f8:87:ef:
         5f:e3:90:6b:d8:0c:f9:09:e8:a0:e5:5e:b0:f6:65:55:bb:b3:
         f5:31:4f:24:3b:2a:86:b8:ec:e1:de:f1:f8:b4:8a:74:28:de:
         81:cf:f9:56:75:62:36:cc:e9:67:cd:9c:a3:a8:7b:17:6f:53:
         70:ad:45:c3:47:e4:b9:58:37:ae:b4:3f:4d:48:af:35:3b:e9:
         5c:a7:3d:db:aa:d1:ed:52:3c:46:31:45:dc:74:44:59:9d:f9:
         5d:88:0f:8e:cd:fb:24:bf:66:38:5e:3f:b8:ed:e5:c0:9f:9b:
         bc:80:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----