Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File:                     3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier:          a1zJ+BypUuHmp2ggtLn37Y1vl4RalU0is+KMigsezq8=
Subject key identifier:   4C:E9:3F:44:99:70:3B:51:DB:C9:AC:D5:38:B7:A0:00:E4:5D:60:1E
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer:       /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial:       0194BC3CBE7270BD69F7366152B5F659A359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number:          0EC5
Signing time:             Fri 31 Jan 2025 12:01:24 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:24 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:24 +0000
Files and hashes:         1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: PeR9PyG1v+fQhNcC9EDR/4dMcq+TqrqR0UWA6S2gxp0=)
                          2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=)
                          3: N9dGS61MT5QK0eR9NsR0og_yov0.roa (hash: UQvC/X385WuEPzevDAGeDjuCtzVVTw6uvC4kh8V9KSg=)
                          4: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=)
                          5: afkHGgkpnYuChER0buPhVqx5kXI.roa (hash: Tx1z4EJ2mEaA6VjS7e2DEwi0lCy0cpAZk+6Uv+5pnbw=)
                          6: p3wgvrtQnusPg-02AGpJuCVwIa0.roa (hash: oFqOFoJpqofnXxel+apdf7Tu1IS9TI7qHjWxYOA7gaQ=)
                          7: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:be:72:70:bd:69:f7:36:61:52:b5:f6:59:a3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
        Validity
            Not Before: Jan 31 12:01:24 2025 GMT
            Not After : Feb  1 12:01:24 2025 GMT
        Subject: CN=4ce93f4499703b51dbc9acd538b7a000e45d601e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:b4:25:e5:66:d9:43:d0:bf:5e:ae:ce:37:
                    82:1f:39:80:f4:73:7c:62:ab:8d:07:00:44:14:59:
                    3a:f1:11:4d:ac:55:ce:a1:a4:49:a6:bb:44:88:80:
                    13:90:02:e4:56:17:08:e1:60:bb:6a:c3:03:27:55:
                    34:23:4a:2d:0e:25:4d:dd:bc:e6:66:96:ef:1f:4d:
                    0b:d5:dd:44:62:26:f5:4a:25:d8:2a:7e:63:2d:d4:
                    31:e5:2f:33:38:97:61:2c:5c:69:3f:f2:c5:65:bd:
                    32:98:61:31:11:0a:83:12:c8:68:7f:b1:79:95:01:
                    31:f9:2d:fc:fa:58:a8:45:10:18:5a:2d:20:92:9d:
                    e5:19:04:41:33:1a:ce:57:31:9f:b5:57:84:05:41:
                    9d:06:28:d4:a6:37:4f:63:aa:10:0e:01:d9:14:e4:
                    ec:74:0a:c5:cf:06:aa:04:b0:77:72:ba:fd:64:ed:
                    21:5b:25:87:38:dc:e5:8a:d4:cc:a7:26:1a:57:ae:
                    87:ce:3d:e3:99:67:a5:f5:d0:8c:84:b7:1a:f8:b6:
                    ed:a2:3d:01:86:e0:c0:fc:f8:69:10:e8:ef:48:01:
                    45:d0:a6:7b:64:04:bb:4f:52:58:ef:5f:47:74:f3:
                    9e:86:30:f8:cf:06:28:05:1d:c9:4c:4d:93:4c:87:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:3F:44:99:70:3B:51:DB:C9:AC:D5:38:B7:A0:00:E4:5D:60:1E
            X509v3 Authority Key Identifier:
                keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:ca:85:6c:13:14:c6:ca:97:18:47:33:a9:a7:bc:31:db:
         e3:a4:6d:35:05:2d:f4:a0:e2:1c:08:b9:45:52:b2:a3:a9:0a:
         54:37:2e:c1:a5:7a:2e:36:30:1d:d1:a1:bc:c6:2a:e3:a4:4f:
         b6:e4:e4:93:b0:cc:53:44:2f:45:8c:e0:ff:cf:4b:57:3f:07:
         0b:2e:4a:a1:fc:46:7d:71:5e:55:02:60:17:70:37:1a:38:e8:
         bc:80:c9:03:b3:b4:65:a9:23:1d:d0:a7:3e:bc:84:bd:f8:39:
         c6:01:fb:c8:01:84:3f:05:6b:72:da:3f:7e:9f:27:7c:f2:46:
         1d:f0:e6:fa:a3:6f:d3:2d:29:93:71:a3:e4:be:1b:b0:6f:13:
         be:8a:01:97:52:1c:36:c0:c2:c1:3a:ac:eb:e6:52:2e:98:a7:
         85:05:5e:84:13:bf:55:fb:66:80:e8:52:16:b2:cb:b9:9b:7c:
         8d:a4:60:89:f7:e3:56:b1:cf:db:92:36:75:8d:25:4c:15:10:
         f2:2c:e2:80:33:b8:49:1f:d4:d3:db:46:c4:8e:7a:c2:c2:27:
         45:4e:ea:b3:f3:9d:16:a0:6c:8c:96:bf:c0:3b:1f:18:b3:6e:
         5f:45:cf:fa:6f:91:39:5a:69:70:0a:4a:6c:bd:b4:42:c9:c9:
         fc:78:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----