Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
File:                     OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json)
Hash identifier:          0z9M/fZga+QSMeAynRiZMOjx8LCp0G0foxD3pElGqL4=
Subject key identifier:   DB:14:5C:48:FA:80:96:7A:AE:B7:3D:D7:E4:0E:5F:A3:DF:5A:37:DD
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Certificate issuer:       /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial:       0194BBCED8BF5305483411AE7A9E144B0777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
Manifest number:          143C
Signing time:             Fri 31 Jan 2025 10:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:22 +0000
Files and hashes:         1: 41o_KDQT0UQR0-pEGq6ZFFoyGEY.roa (hash: mkyU9FNe+9kldpNCWIBTUaB1xImUCSbnmtoOt1trV1c=)
                          2: EfAbE-x7JWikVYwPPlQe_vVwMQg.roa (hash: 7jN/LfmMAw7O2spCMvO+jNeJ92v1x2ZZaE7vPy60zYA=)
                          3: JKilfZrkJhllQ19r3NByhgoqTDg.roa (hash: TyGhUzaYqQpVckTL9iipsY4ZDEots8Yo4CEp0B079m4=)
                          4: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: 1lC+uU7YQvqFPARYAyN9ANKSbyTtOtbaLonz030yq5E=)
                          5: SHIdIo5QDACoW0nIIu5f5RtYZ_Y.roa (hash: Wl9sZv7NXkEqjqOeUmOOqdDlFgYyfsqwHN90exWSc1U=)
                          6: UxDrDzP2TNEJomhvUm5pptefxgA.roa (hash: /MVrUvLgefyKi9OhWDKlnZN9gJaxVmd7pmpH+GNvKAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d8:bf:53:05:48:34:11:ae:7a:9e:14:4b:07:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
        Validity
            Not Before: Jan 31 10:01:22 2025 GMT
            Not After : Feb  1 10:01:22 2025 GMT
        Subject: CN=db145c48fa80967aaeb73dd7e40e5fa3df5a37dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:ac:e9:23:6c:20:e8:19:78:67:c5:82:a5:
                    cf:ea:bf:39:3d:90:d9:1d:38:74:38:b9:87:6f:9c:
                    f4:f3:53:89:c2:02:9e:eb:0e:0b:81:73:36:af:f4:
                    12:35:f7:d2:ec:64:12:85:40:02:b3:fc:4e:f9:9e:
                    c8:64:f4:12:20:92:e6:b9:f6:dd:1c:c6:fc:97:4f:
                    e7:72:b1:9b:68:d8:36:0a:eb:fd:b8:f2:82:6f:1c:
                    76:13:18:83:e5:8b:6a:c2:8a:69:86:a0:e1:00:d8:
                    0d:16:a3:8e:d7:11:57:73:08:29:49:56:02:27:9b:
                    a9:8c:d7:dd:88:23:60:86:92:dc:3e:bc:16:af:11:
                    5b:c1:01:b9:97:41:55:2e:19:aa:2b:aa:d1:e7:24:
                    92:07:95:e7:87:98:f1:1c:b1:58:eb:cb:74:e9:29:
                    46:0c:d5:8b:fe:1f:ec:ff:43:82:b9:eb:9c:d1:fe:
                    b2:c7:45:6d:e3:25:ce:de:43:66:01:d2:3d:f2:7d:
                    19:76:2e:15:d7:c1:8b:dd:5b:b9:1b:5d:3b:87:c1:
                    ad:46:bb:f9:55:dc:18:0c:56:38:62:0e:9e:d7:fd:
                    f8:c5:39:4d:76:2f:0f:3a:2c:6c:86:4a:7d:df:38:
                    da:79:17:6d:e8:ba:9b:44:e3:30:fb:ab:60:0e:36:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:5C:48:FA:80:96:7A:AE:B7:3D:D7:E4:0E:5F:A3:DF:5A:37:DD
            X509v3 Authority Key Identifier:
                keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:59:17:c2:91:c5:28:39:2f:0f:a7:01:fa:e1:c2:68:ca:
         dc:15:fe:f7:b6:1e:40:1a:42:7a:f0:97:87:06:54:7b:45:4d:
         ff:c2:fb:f9:b5:71:05:ec:e6:b9:bc:ec:87:bf:87:a7:15:a1:
         81:5b:17:3b:b5:79:92:f9:91:f0:99:9d:cb:6f:ed:a3:8e:bf:
         dd:8c:9b:52:04:16:af:0d:03:f9:b7:ed:fc:42:52:1c:7c:94:
         da:bc:84:15:ee:4e:29:95:49:b6:98:d3:51:52:09:3d:1b:a3:
         f6:cd:74:f6:5a:80:ff:6a:4c:d3:6e:58:72:a9:12:78:6f:cb:
         48:67:19:e4:9d:c1:6d:97:e8:28:6b:c5:b7:c7:70:3f:29:72:
         ae:74:23:9c:0f:09:9f:a1:11:54:f0:75:eb:d2:46:af:a8:2a:
         6e:26:ed:11:5d:04:11:57:8b:7a:cd:fb:e4:80:48:14:47:ba:
         8e:2d:3d:45:62:6e:59:5f:a4:7a:1d:22:1a:87:99:2b:93:23:
         14:0d:1f:f4:e3:14:d5:3e:6f:1c:9b:a0:b0:80:b2:9c:9d:39:
         44:1e:23:f1:8b:df:b2:62:cc:05:ae:b9:95:d1:59:eb:d2:26:
         b8:48:79:b8:f8:cb:2d:5a:d2:89:d8:24:f4:00:db:43:fb:f8:
         03:db:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----