Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File:                     O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier:          GttGdnm79z+1F/n6QZuxuBG43gts2Xswg7MFSjWcwRE=
Subject key identifier:   F6:B6:56:45:E4:CE:61:01:D2:1D:02:B2:44:F0:49:8E:84:C5:DC:FC
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer:       /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial:       0194BC050DBB20DFEDB91DBDD8E1383A6592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number:          0F66
Signing time:             Fri 31 Jan 2025 11:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:35 +0000
Files and hashes:         1: 4n60dmESH0S_t55G5kL7m5-9nPQ.roa (hash: 8Yl7mPdCOASLn21jFFZtRnqVACPq2IcHgd8DlOM4RfQ=)
                          2: BibofgsXi1m02E0sydv0lSzcS6M.roa (hash: 6kPi5tOuSZ0eERv1ZZd/XUAaafp/Tbm9N/8PWSqizA4=)
                          3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: qqvhySDV29V8Qudz+bkhwGzXvE3VhF6D217Si9RRQ6M=)
                          4: c4wHBWSbrNsVlf_a1cQ3OL9nR-U.roa (hash: b+RfZmuxixUWKJA86U4yLBBzKqnW3kWf0oaDSsDCSts=)
                          5: ovHMIugdzTg_bwipZYtU7WSoXAk.roa (hash: gF8CQNR3IscVXMALoF8UJJgAvjQPh7b9Wa8roCX6mtI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:0d:bb:20:df:ed:b9:1d:bd:d8:e1:38:3a:65:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
        Validity
            Not Before: Jan 31 11:00:35 2025 GMT
            Not After : Feb  1 11:00:35 2025 GMT
        Subject: CN=f6b65645e4ce6101d21d02b244f0498e84c5dcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:c7:92:69:72:2c:72:f6:fc:9e:20:6d:28:
                    68:c9:a2:52:b4:98:97:ad:2f:2b:ad:1f:d7:09:98:
                    1c:0e:fe:bb:3d:50:36:65:02:d1:2c:bc:3d:64:c5:
                    b3:84:17:ef:8f:37:65:df:73:b5:34:e3:0e:e7:ac:
                    91:d2:ca:87:9b:39:d7:46:49:e6:8f:ad:75:9c:17:
                    bf:4c:bf:8a:55:ba:11:94:ca:6e:c2:7e:b3:07:b7:
                    d6:0a:6b:7c:85:b3:12:53:eb:26:2e:09:6f:69:8e:
                    9a:2e:2b:a8:44:fb:b6:2b:57:a1:4a:9b:67:17:96:
                    4b:2b:2d:b4:1d:01:9e:64:38:ca:47:46:41:bf:9e:
                    9f:fb:fd:1d:ae:40:0c:e7:80:00:87:7c:ef:f1:43:
                    94:21:c4:b2:d0:c2:d7:75:9b:0d:cf:de:48:7d:63:
                    f6:80:0b:ff:b0:53:cc:51:34:33:a5:e6:3f:c6:8d:
                    92:2c:4b:59:eb:e8:81:b0:87:58:31:90:24:ad:a8:
                    af:59:3b:56:31:59:88:66:bf:e3:a3:27:41:06:f2:
                    e5:8b:06:66:cd:8e:0b:e4:94:fd:82:76:d1:91:32:
                    38:e6:84:c2:dc:9b:5c:4b:d9:bb:db:e7:a9:47:ac:
                    db:2d:59:fb:3a:21:58:40:01:ac:83:af:72:86:b1:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:56:45:E4:CE:61:01:D2:1D:02:B2:44:F0:49:8E:84:C5:DC:FC
            X509v3 Authority Key Identifier:
                keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:32:a0:40:32:5b:ef:c4:1f:cc:ed:dc:92:4d:da:db:90:
         db:f2:b0:e1:42:26:cd:42:83:14:7f:da:b3:6c:8c:f9:9d:62:
         ab:f2:71:80:95:20:e4:85:61:b9:a9:4b:cf:51:88:e9:17:6b:
         08:01:9d:65:75:c8:31:9d:c0:3c:5a:fa:98:2d:fa:35:21:de:
         20:68:e8:5a:05:d3:f8:32:8a:28:d2:7f:f1:be:aa:1e:44:5f:
         d0:d4:c0:02:03:05:af:48:ea:61:a5:77:df:4d:75:ae:85:cc:
         83:f5:c0:fa:db:72:89:e1:56:43:7c:ac:85:95:86:1f:b0:fb:
         c9:c9:fa:57:22:72:16:2a:80:75:a4:93:62:ee:f0:55:9f:50:
         aa:44:ba:9c:85:66:c6:56:98:f0:03:c8:be:85:58:80:a5:f1:
         08:50:4c:34:48:c1:32:92:f0:d5:68:5b:2f:53:eb:cf:31:8a:
         c6:cb:77:6e:38:27:65:3f:78:bf:40:1a:8b:3b:41:dd:50:3e:
         2a:93:d6:25:6e:d0:8e:bd:f7:a4:ae:97:c2:9c:82:8b:73:3d:
         3a:94:e2:7a:3e:04:db:a2:17:06:ee:2f:97:19:0e:2f:8f:0c:
         3f:2c:56:9b:48:eb:b3:32:20:5f:46:c4:26:15:b3:df:25:c3:
         e8:02:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----