Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File:                     kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier:          /jiVDiDz/kthRPFtjl4dwjrFhZD0HuCJt3rXiYNobi4=
Subject key identifier:   F1:74:09:FA:7E:B9:B8:55:F2:96:69:63:38:29:2E:78:C8:EE:CE:26
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer:       /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial:       0194BCE0AEE3B0CBC997F2C2FC97174CF476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 15:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:28 +0000
Files and hashes:         1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
                          2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
                          3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
                          4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
                          5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
                          6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
                          7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
                          8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: ZarQFqrOoMJcCeJkj3KwcpedW/T2AKVnYHzDotgmbD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ae:e3:b0:cb:c9:97:f2:c2:fc:97:17:4c:f4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
        Validity
            Not Before: Jan 31 15:00:28 2025 GMT
            Not After : Feb  1 15:00:28 2025 GMT
        Subject: CN=f17409fa7eb9b855f296696338292e78c8eece26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:79:44:1d:9c:22:85:52:a8:a5:52:ce:b4:
                    4c:36:00:4d:2b:0c:7a:cc:84:c8:b0:1f:07:c1:71:
                    2a:f9:21:93:90:f8:30:b4:33:e7:b3:7d:5c:61:50:
                    ca:a3:7f:f0:17:7b:8a:3e:42:c3:8e:cd:ff:79:ca:
                    23:73:cb:03:56:a7:5d:b2:8d:2f:9e:58:c6:62:0e:
                    65:dc:8a:77:bf:7f:7c:e2:d7:64:f4:62:da:6a:16:
                    2f:62:10:f8:34:00:3c:b5:b9:35:79:97:ab:4e:dc:
                    d0:32:86:af:7b:f0:3a:d2:5c:32:a6:75:f0:7c:ef:
                    8c:77:74:33:e5:f5:65:32:c5:c3:da:8a:75:5a:ab:
                    08:93:2b:0b:8a:c5:82:1c:c6:cb:50:8d:3a:c7:e1:
                    1b:8c:fd:15:3a:72:cc:9a:5e:95:b6:b8:56:fd:d7:
                    2c:8b:22:02:e2:25:f7:86:18:66:6c:a2:16:3e:8c:
                    63:cb:63:1d:09:51:f7:d6:93:9d:1b:a8:dc:c0:95:
                    80:59:66:13:6b:31:6f:ec:e9:98:8b:2c:c7:d3:4c:
                    00:7f:dd:7b:8b:74:e9:13:1a:f3:37:df:12:82:f2:
                    24:65:98:f0:dc:fc:35:14:c6:92:df:a7:8a:8e:e2:
                    18:ee:93:d1:3a:f3:50:a1:9e:bf:05:9d:82:56:27:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:09:FA:7E:B9:B8:55:F2:96:69:63:38:29:2E:78:C8:EE:CE:26
            X509v3 Authority Key Identifier:
                keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:a6:21:e9:8a:2d:a7:f9:50:f0:62:d9:d4:ea:7d:02:4f:
         aa:9b:63:93:cf:57:8a:b4:f2:5b:d6:81:71:88:c8:8c:7e:e6:
         8a:e7:a2:b8:a0:1e:6a:14:9c:be:b3:7c:15:c7:1d:99:78:2a:
         d0:71:1c:28:e6:54:c5:af:05:a0:c8:d8:aa:0f:0d:6b:8c:94:
         c4:36:96:73:81:37:60:6a:e7:ea:b6:fc:cf:76:c4:7f:15:e8:
         da:9c:31:22:e9:1a:f6:8f:9a:40:29:e4:26:40:d0:ab:2f:da:
         49:ff:14:11:75:cd:94:17:a3:63:10:ae:41:4f:39:db:ab:af:
         09:47:e2:d7:8c:f2:89:57:e6:7a:5c:c3:b5:5a:83:ad:21:0e:
         8f:33:9e:16:38:6a:43:dc:35:ab:ac:2c:50:e4:53:e0:b2:93:
         f4:8c:61:f7:b4:4a:50:93:5f:db:9c:3d:28:fd:79:96:5d:38:
         2c:25:30:c2:a0:b8:2c:1e:bc:37:0f:9f:06:c3:88:db:d6:28:
         3f:48:f6:ac:19:45:e4:15:e4:4c:8c:3b:13:36:14:2b:8b:08:
         7c:9c:ce:da:b1:85:a8:85:c4:ee:3b:02:bc:2c:cf:62:10:11:
         87:85:f2:0f:9c:08:81:10:61:eb:78:01:32:26:33:20:8a:dc:
         f3:dc:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----