Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          6evjrbKe608URucX5rE3YLoEwLepww6/1pq4exsQa9w=
Subject key identifier:   5A:FF:50:58:3B:80:EE:2A:FA:C8:A6:E2:30:75:F0:C0:6E:2F:1B:CA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0194BCA9DB563F6148338C66F7F0E2058D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          1544
Signing time:             Fri 31 Jan 2025 14:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:35 +0000
Files and hashes:         1: 1-8UxcVTla5j7bO3G5vVxQgJ3gzs.roa (hash: ch8dpT85wJEGWDgj3N5hDC8XQYwv3BSkNMrgH1pP29g=)
                          2: 1-GEsloWsIA1riTZJ7U7H9J7088.roa (hash: 38RdBIJOjP7X3OaubxFtDlTM4wwowWFBI4vrACR+NHI=)
                          3: 1-OswzRevrV2DebcIQRHsYjkREFE.roa (hash: P7qDnBUcDVovbH517fq2GYmB24DHk22bZU1xMQXyG9U=)
                          4: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=)
                          5: CT-Ye6MZRoq8k9wtLtOYVZzC7fU.roa (hash: QodVcwl5wSSnP6oFTh1SdwicrRjpjKYib65PR1f9dro=)
                          6: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=)
                          7: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=)
                          8: It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa (hash: QAc5gHOaQXt39S4LjrikuPGmP8en9wsKvBleiEYuYHU=)
                          9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=)
                          10: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=)
                          11: T8nK914dXUKjKwmBTR6OBzRr4W8.roa (hash: lQ1rtnQt8mNlcDp2IXxjTk0VtlErhLs/vW2VTluXoYg=)
                          12: aqcyD04I5tez90f4iAT7WnG7VCQ.roa (hash: Q1+PORgycb9l0/xUPpaAuPXqw8JpkaIq9bzlnN5L4VI=)
                          13: eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa (hash: RcgTIJu/NwqSqC/vmr9OYFdwRt2Fz/3jLy3D9rjl+1A=)
                          14: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=)
                          15: nvWYjhHXGuflWePISaSvNcdKkqQ.roa (hash: hx4+k+ZfhQfERSOkEsaZUId7/mQkGHRFBX4VUBA24sE=)
                          16: ob_RURKVUgsmITZALhVsa-qXolg.roa (hash: Fa1GGWTo+0NV3NehS4X6jfnbmrCwDIsz+qaYmi3m0FU=)
                          17: pYYheMngH9PrFAWYb7D0Rnwh3Rc.roa (hash: Kusa3kjA5UvOGnNhZkPG36CpyMnLT1XxrIsJiFszyIE=)
                          18: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=)
                          19: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=)
                          20: u2lc14tvu5h_9CLcTYmJhXN1dS4.roa (hash: ZEZqgy+vq22Eq2BMU3CLjDKDUayQshMITeCdx49A4Io=)
                          21: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=)
                          22: v4CBgLv9j2JeRIvOJQdKbNxvJTA.roa (hash: Ttid+kREmc6Upy79hRBO9XMBfRE+dqbNAYWtSZGV6ag=)
                          23: vS_G30kRmF5yTvVCZuLriQbTalI.roa (hash: jpLTyi2oD569vb7nR4qsqTlGyMLcUPoGbyflTszDmns=)
                          24: yxb4qAopfVWx9tbVX2D9X8-NDPo.roa (hash: SCjFOGOJpyW+e/90L6KJ17UwdzCSiXn/XxCg01egwec=)
                          25: z5USRWL1xokOYfBSwUf22d4RSgs.roa (hash: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=)
                          26: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: NIlNMFBLahJSrAW/8sAZayzbqP+mzy1NLIPvGJSPBo0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:db:56:3f:61:48:33:8c:66:f7:f0:e2:05:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Jan 31 14:00:35 2025 GMT
            Not After : Feb  1 14:00:35 2025 GMT
        Subject: CN=5aff50583b80ee2afac8a6e23075f0c06e2f1bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:5f:75:3c:0e:11:2e:d6:c0:c0:d3:a2:48:
                    8b:88:cb:03:0e:6b:42:df:28:0a:4c:cd:2e:f2:67:
                    5e:6a:0f:bb:de:25:eb:30:aa:09:8c:76:72:b4:87:
                    99:6c:d9:31:d5:09:c6:e4:5a:10:b3:ae:df:4b:d4:
                    42:68:69:5a:b8:33:f5:99:cf:ba:09:d7:3f:e1:86:
                    b0:5a:2d:72:b3:9d:b6:d3:2b:c3:8d:2b:6f:c8:f2:
                    ee:ea:51:51:55:54:dd:1c:19:99:d4:6e:17:f2:e2:
                    78:a8:b0:7e:e0:8c:98:51:19:94:d8:5e:4b:c4:53:
                    13:a4:a9:d2:80:cc:9a:4e:5f:76:98:13:68:10:a4:
                    79:7c:53:87:5b:e1:01:fe:0e:d2:9b:2a:0c:c0:b3:
                    46:36:e8:52:33:d5:8b:6d:66:9c:02:cc:88:50:11:
                    2d:e2:5e:3e:b1:e2:86:93:b2:56:6d:fc:12:9d:93:
                    a0:ca:72:6d:e1:0a:95:ba:b5:85:6a:5e:d6:20:73:
                    d5:3e:09:8f:b9:d1:5c:d5:21:70:4b:90:a0:5b:73:
                    ec:85:81:08:61:2c:a8:0d:17:b0:b2:5e:27:c0:e0:
                    65:d6:14:07:18:3d:25:6c:08:5d:5b:fa:3e:bb:fe:
                    2d:93:99:f6:2a:e8:94:3e:64:e0:b0:c2:2a:b9:62:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:50:58:3B:80:EE:2A:FA:C8:A6:E2:30:75:F0:C0:6E:2F:1B:CA
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:14:33:af:16:9d:fb:ad:d0:b1:39:0d:ad:32:35:33:84:
         a4:f1:64:ee:e0:b9:51:2d:ab:e0:ca:db:b5:81:29:0d:b4:8f:
         09:32:f6:23:0e:8b:15:0d:28:8e:90:03:9a:67:53:6c:96:27:
         ef:0a:59:8e:62:a3:87:f6:9f:7e:ea:2d:9f:81:63:30:93:2a:
         61:e2:ae:b7:75:91:fe:1e:e4:8a:fc:34:d6:1f:e4:24:8e:58:
         d6:09:22:d3:62:46:c2:49:00:36:51:ef:1c:ce:97:d4:29:78:
         42:1d:8b:18:71:d3:80:60:95:84:f7:07:8a:05:ba:6c:27:b2:
         d7:3a:98:f5:9f:e1:30:86:30:55:d6:cf:eb:72:e7:14:fb:14:
         90:c3:04:b0:02:37:a1:00:8b:8b:ae:e7:bc:29:cc:0a:82:52:
         14:86:ce:26:a5:4b:33:59:a6:5a:68:da:b0:2c:7b:2b:5e:ca:
         f7:5a:00:47:39:22:01:8a:5a:3c:83:ba:38:e0:36:e0:eb:25:
         9b:f7:56:be:10:33:98:c4:70:51:8c:91:60:e9:b5:d2:74:03:
         9d:b3:a7:cb:7f:60:af:7d:2f:5a:d2:df:5e:79:7f:7a:59:b0:
         cc:1e:4f:6e:f1:7f:e2:17:a7:ed:b8:84:df:53:1a:9b:b1:f9:
         0e:6e:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----