Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          wb/ysCpllI9bQNs3Rx/YzghQ9He94nif+6exwJeaD7k=
Subject key identifier:   55:F9:B8:88:91:90:1A:5E:7E:5F:6F:41:91:A3:99:56:34:59:DE:14
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       0195E15998B69E5A6C4F43B56788594589FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 10:01:40 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:40 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:40 +0000
Files and hashes:         1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
                          2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: jz9+p2z5F6XIC9SS4xExSG/JnG6gr44tPxLIB0euYcA=)
                          4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
                          5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:98:b6:9e:5a:6c:4f:43:b5:67:88:59:45:89:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Mar 29 10:01:40 2025 GMT
            Not After : Mar 30 10:01:40 2025 GMT
        Subject: CN=55f9b88891901a5e7e5f6f4191a399563459de14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:26:fe:f0:c6:98:dd:77:74:d1:ee:92:f7:
                    0d:32:c4:5a:bf:52:00:8a:52:41:7b:eb:19:3d:f5:
                    ed:b9:6b:b5:6d:99:ef:65:6f:ae:0e:ef:d7:37:20:
                    f5:10:e8:0b:cf:d3:51:04:d2:f2:c4:42:48:28:25:
                    fd:49:67:83:6e:de:40:43:69:6b:a5:61:72:93:c9:
                    a8:0d:da:3f:2f:78:9b:39:38:24:58:3e:fb:68:81:
                    c0:02:16:6f:cb:33:a8:0c:63:25:7c:28:b3:c5:e8:
                    a8:3f:92:5b:e6:4b:9f:43:45:01:a2:e3:cf:37:f9:
                    01:81:4a:5c:ca:ab:14:21:76:65:41:14:d9:22:54:
                    b4:59:4e:22:5a:67:94:cb:bf:85:b2:4f:0e:a5:5c:
                    b7:bb:28:0e:c0:f7:b4:56:37:1a:41:14:90:84:19:
                    6b:51:88:23:59:dd:98:29:fd:32:f4:0a:a3:64:69:
                    63:05:c3:79:6b:38:ba:2e:97:ac:ea:00:c1:bc:46:
                    2e:b3:a3:d6:58:70:60:f9:ce:52:10:e7:fe:51:62:
                    58:fd:3b:dd:2c:6e:ba:eb:d8:01:d8:06:58:bd:f0:
                    6b:3f:cb:5e:8d:19:47:b7:72:60:bd:56:fc:45:55:
                    a5:62:da:69:96:e4:39:ec:eb:d1:24:a9:e6:55:b3:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:B8:88:91:90:1A:5E:7E:5F:6F:41:91:A3:99:56:34:59:DE:14
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:e5:05:91:4a:19:d4:f4:2f:83:1d:c9:08:50:88:63:95:
         c7:23:ef:3d:33:d1:c5:09:a1:a7:66:a9:17:18:7e:04:a1:b4:
         9f:db:24:2b:41:0f:94:aa:94:87:bb:90:3a:9e:fb:b4:b7:07:
         17:50:d1:39:a2:9c:85:33:89:68:25:52:89:9a:6e:79:63:e6:
         85:fe:c0:ae:89:2b:21:57:05:85:ec:c0:5a:36:a5:00:de:f0:
         08:16:ed:ce:ad:75:14:03:08:37:e8:94:3e:8a:61:66:d6:6b:
         97:74:a0:da:cc:95:6b:a0:b8:27:85:32:92:ea:6a:29:83:25:
         b5:5e:4b:b9:00:db:87:aa:e0:f2:68:c5:f1:e2:25:a2:77:9d:
         0d:64:28:27:9f:c3:35:cb:e9:aa:e9:a3:28:15:07:9f:ce:7a:
         35:b3:fa:97:87:ae:a4:2b:da:6d:60:8a:95:23:0b:da:d0:5e:
         de:fd:c4:7f:7c:3a:28:88:74:3f:6e:f5:11:b7:19:1c:f3:12:
         f3:b7:14:91:1e:89:e2:f3:dc:69:e9:b5:83:68:e6:88:72:f5:
         a0:e2:a9:2a:4c:39:78:3e:ca:c0:4d:2c:e2:6d:04:cd:ed:93:
         ac:24:83:c3:fa:ac:10:17:50:dd:d3:06:d4:f9:a3:29:20:ae:
         4b:71:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----