Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          ySIlM+Tzihurt6LWJ/THRAgWLTVeoUcTjmwkMYRvbZ0=
Subject key identifier:   B9:DC:27:47:52:95:3D:C7:65:FA:E2:14:A6:BB:1C:D3:FA:E4:98:2A
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       0194BD178E1230B99E4D7C176981237BA618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          0DAA
Signing time:             Fri 31 Jan 2025 16:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:24 +0000
Files and hashes:         1: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: nzj+KBZyN+6wdZk09bVmKAi7iNloo9GlJD1el9hGt3w=)
                          2: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
                          3: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
                          4: YWsuWp-wiotUOqONsLOIG6qv5Qc.roa (hash: 6AOfh7vJ9yqSODpJLgU65woCWFbenEIfQ8rQX2q18+E=)
                          5: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
                          6: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:8e:12:30:b9:9e:4d:7c:17:69:81:23:7b:a6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Jan 31 16:00:24 2025 GMT
            Not After : Feb  1 16:00:24 2025 GMT
        Subject: CN=b9dc274752953dc765fae214a6bb1cd3fae4982a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:04:9f:3a:3b:9b:b2:21:a3:65:f9:3d:f0:
                    90:b8:2e:c3:ce:04:e6:08:aa:07:ad:47:71:a1:2c:
                    79:5d:d7:81:47:f1:d8:c2:70:8f:5e:45:c9:7b:b3:
                    67:80:85:cc:cb:82:ca:5b:61:25:9d:f9:2d:cb:97:
                    07:02:ff:40:f2:28:1e:e1:e7:79:5d:74:df:a6:b3:
                    9e:0d:be:5e:f7:17:73:27:cf:e4:22:ff:12:61:b4:
                    2e:13:3c:c0:aa:b6:a2:64:6c:1a:e1:a1:fb:cf:a0:
                    05:c0:2c:ec:c5:99:cf:0f:4a:04:c2:5f:c1:0b:76:
                    6a:22:3b:c7:f6:f6:7c:bc:d6:d9:08:68:3e:86:09:
                    ce:83:0b:5e:b5:a3:fa:0e:7f:03:dc:69:b9:c9:20:
                    d3:14:86:18:34:19:39:9b:d3:66:bc:dd:7b:13:c2:
                    cf:85:a6:8b:19:2f:86:d0:13:e5:b1:db:be:e2:e4:
                    43:85:a8:58:a0:0d:c8:3f:a9:23:c5:95:20:36:9b:
                    cf:e4:0e:4d:c7:1b:d5:91:6a:0b:96:d4:b4:5d:ad:
                    e1:d5:80:76:af:bb:79:a3:52:ef:05:70:75:6e:f5:
                    c7:96:a3:3e:a3:39:4b:c1:7c:ad:f4:a1:cc:c8:d8:
                    13:6d:76:fb:99:ab:42:a2:2f:5b:1c:6a:a1:55:a7:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:27:47:52:95:3D:C7:65:FA:E2:14:A6:BB:1C:D3:FA:E4:98:2A
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:12:f2:fe:22:76:5d:e4:96:e9:89:5a:9b:0d:b6:52:c5:d6:
         fe:84:5d:c2:da:8f:84:4a:3c:c5:a9:32:6b:14:70:be:b6:f0:
         fc:00:89:1f:eb:80:29:ff:bf:83:8c:86:0a:59:c1:12:08:a0:
         d0:9b:70:5b:1e:4f:f4:d2:f6:d8:55:ce:cf:7a:41:78:65:18:
         2e:90:dc:34:2c:98:f1:20:a3:48:ce:08:25:de:89:f3:60:e2:
         c7:4a:1b:d2:e7:b3:39:3e:ff:2e:5d:bb:ca:fc:d9:45:39:1c:
         6a:b6:0b:d6:03:a7:1f:9b:53:fc:2f:9b:b4:e4:e3:50:08:0e:
         90:c2:6e:62:9c:6d:6f:01:4c:ab:29:a9:ad:c2:f8:e9:91:07:
         ec:45:49:72:76:e4:b8:22:f9:40:18:7e:6b:52:3d:e4:48:8e:
         81:90:20:c1:54:88:f8:65:ef:07:cd:78:3c:86:c7:d2:89:eb:
         56:74:7f:b1:bc:f6:19:76:b3:20:b4:20:74:66:02:3b:e7:c2:
         d0:b1:3a:66:eb:30:84:b3:e4:ac:b4:6b:a2:bd:6c:0c:92:0d:
         50:1d:d3:77:93:7d:b1:85:15:7d:69:64:57:c3:a0:d3:02:2a:
         79:d5:2f:95:99:4a:35:0a:3e:c9:9b:08:e3:d6:5d:09:78:d4:
         be:95:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----