Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          px+vO1Quv5x9Oh82IGOTEXLJ0w0INNCXPA+0Nzt0gBc=
Subject key identifier:   63:2D:2B:88:FE:12:A0:D9:EF:13:ED:DE:F6:A9:37:F3:12:A0:99:D8
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       0195E07DBC528D6EE5548A5663D866B603FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          05AF
Signing time:             Sat 29 Mar 2025 06:01:31 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:31 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:31 +0000
Files and hashes:         1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: YPX8ku/iRobAPkmNfq3DiCNyv/rNAtsvnT/kGlzj5vE=)
                          2: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=)
                          3: hqflcP10fGd_ugaqcibuFjfMGsQ.roa (hash: Ko25/+lhloUhGb/yVx2/b28QF0QoFlF426ib4Pcz3zE=)
                          4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=)
                          5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=)
                          6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:bc:52:8d:6e:e5:54:8a:56:63:d8:66:b6:03:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Mar 29 06:01:31 2025 GMT
            Not After : Mar 30 06:01:31 2025 GMT
        Subject: CN=632d2b88fe12a0d9ef13eddef6a937f312a099d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:e6:66:b0:ad:68:6e:63:25:87:52:bd:00:
                    be:24:1b:f7:7c:4c:fa:78:9d:12:cb:38:ad:70:30:
                    67:a9:3e:e4:b3:19:5a:af:05:61:d9:f1:0f:32:fe:
                    00:eb:64:38:1a:02:0c:e1:2e:0e:5c:1e:ab:58:cb:
                    d7:56:1c:72:62:46:1c:43:38:37:7d:25:29:97:f6:
                    81:ea:c0:ef:f2:3a:18:9f:4c:f2:b6:3a:10:47:30:
                    9e:e9:c8:a3:44:3f:88:67:19:4b:ed:ac:cd:41:f1:
                    c4:16:be:5f:7f:a6:72:96:36:32:62:a5:10:d4:f3:
                    81:91:09:a0:41:57:23:76:fd:76:5c:19:a7:f7:b7:
                    e3:a1:43:b4:ce:14:74:76:d6:7c:43:d4:93:94:7d:
                    78:12:41:04:a2:40:26:c2:cd:c1:dc:35:49:9a:a1:
                    12:88:92:44:03:13:60:14:fb:06:ce:db:a5:33:ec:
                    b0:07:f7:b5:37:b0:75:56:a1:9e:b1:b9:e6:13:d7:
                    16:7b:6a:e4:ae:bf:96:b1:f5:4d:74:e6:81:2d:37:
                    bd:36:13:1b:e5:4a:09:5c:dd:b6:b6:be:5c:1c:09:
                    1d:e8:29:a2:4e:8f:37:3d:6a:87:f0:bc:ce:01:3f:
                    df:24:8f:17:45:81:68:c3:ae:7c:e8:fe:d8:04:81:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:2B:88:FE:12:A0:D9:EF:13:ED:DE:F6:A9:37:F3:12:A0:99:D8
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:b1:b4:a3:f0:f1:86:24:a0:c1:ca:ca:66:36:52:6f:97:
         54:5a:22:1c:d8:05:95:a7:3f:d2:56:c7:79:a6:08:c9:82:d4:
         2e:7c:ed:bb:65:ca:ab:f5:67:61:20:0d:06:b7:90:35:61:fa:
         d3:ff:6c:53:a4:d2:33:6a:5b:dc:5f:e0:c2:95:87:bc:ea:94:
         69:33:1f:07:77:8f:3b:19:ad:6a:a2:f2:e8:d2:3e:ee:1d:36:
         e3:d0:02:0c:1c:83:37:75:e6:b6:32:bc:41:6b:81:a4:eb:a3:
         7a:dc:1c:0e:7a:47:24:1f:8f:db:8c:78:e2:96:a0:20:c2:66:
         ba:9e:e2:11:77:bf:60:8e:77:0e:4f:0d:50:38:a5:fa:d9:d0:
         fc:4d:55:28:92:4d:ec:9d:32:85:7b:ed:b7:14:3e:77:bd:63:
         7c:62:94:5a:53:52:48:3e:ed:46:b3:b2:ea:b9:a1:ca:9a:8b:
         e0:55:1c:32:69:4c:cd:18:9d:de:80:eb:a3:46:a3:5e:a8:ee:
         c6:4e:a7:90:a5:03:68:89:54:e2:9e:6e:82:70:d5:e6:f4:da:
         b7:ee:dc:3e:1f:25:c9:04:40:67:c9:28:69:2d:26:ca:ea:b5:
         8a:e8:80:4a:21:50:c5:88:48:c3:37:45:46:8d:df:cb:5a:3b:
         2a:54:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----