Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          HYAq0AuQyiMEfl67fUD2XO3f/5JBP6VbwRJJyjsQOO8=
Subject key identifier:   45:1F:41:01:E1:5D:ED:10:CA:76:24:CE:69:5E:1B:5B:DE:AD:D2:86
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0194BC73244334F6EE3D184E85FA641B5056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          0FF3
Signing time:             Fri 31 Jan 2025 13:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:50 +0000
Files and hashes:         1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
                          2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: kKOK04rjL6tSZL7fCgqrEFOeQPBtFt7qLXjzt3mJezw=)
                          3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
                          4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
                          5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
                          6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
                          7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
                          8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:24:43:34:f6:ee:3d:18:4e:85:fa:64:1b:50:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan 31 13:00:50 2025 GMT
            Not After : Feb  1 13:00:50 2025 GMT
        Subject: CN=451f4101e15ded10ca7624ce695e1b5bdeadd286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:42:c4:5a:29:77:ce:fc:c9:06:b1:68:c9:
                    5a:33:c9:74:93:91:c4:29:9f:9f:f6:84:3b:82:68:
                    45:95:3d:9c:5e:36:a2:af:c9:bc:b7:90:f2:de:04:
                    38:95:49:46:6e:1a:c2:8d:f7:14:c8:16:9d:2b:a5:
                    01:da:14:f1:f8:f3:42:aa:18:ff:fb:bf:1d:29:53:
                    98:f6:80:b9:2b:14:29:37:69:8a:3d:37:b6:3e:97:
                    04:f2:07:4f:b5:52:9c:c1:20:b4:da:70:4a:b8:94:
                    79:78:a9:86:e9:af:e8:2e:c9:ff:96:a4:ca:5a:ae:
                    9f:1d:3e:87:e1:cc:32:c0:af:18:03:cd:43:99:55:
                    f6:f7:4f:01:6e:b7:c9:15:bc:a1:6e:46:10:34:bf:
                    d8:22:29:d9:ae:57:fe:52:24:8b:12:13:09:79:a5:
                    5e:c8:9f:4c:88:21:2b:d4:41:94:c9:db:6e:68:61:
                    77:d1:b4:e5:5a:17:27:6e:30:88:cc:ba:ff:6d:69:
                    e0:aa:ea:fe:41:26:e1:a0:e7:af:ab:91:41:0a:a4:
                    8c:17:69:f5:d9:fa:90:99:61:b3:61:30:ac:39:0f:
                    41:33:4d:6d:22:dd:08:3c:00:d8:0c:10:69:3d:d7:
                    1f:c8:de:c7:73:8d:7e:db:ea:0f:38:14:d9:c0:46:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1F:41:01:E1:5D:ED:10:CA:76:24:CE:69:5E:1B:5B:DE:AD:D2:86
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:0c:92:25:b5:ce:9b:b3:64:e1:d6:ba:7e:f7:07:ce:25:
         d4:5b:49:bb:d0:39:01:2d:4b:be:07:b3:5c:27:f3:e5:b8:7f:
         c4:0c:a8:2b:7e:8c:7e:35:b4:eb:98:9b:74:11:9b:34:65:6c:
         a5:a4:e2:bc:ef:a8:35:1d:4f:18:7a:d9:a5:d4:8d:ec:e7:68:
         3e:bb:50:31:2c:ac:e7:45:26:91:96:61:b2:ef:ea:b7:24:bb:
         5a:75:4a:72:80:c8:ad:1a:37:13:4f:33:a9:a5:ad:95:f0:17:
         e5:b0:1f:7a:1e:e6:f7:f5:a0:b5:1d:66:a4:7b:1a:6d:45:f8:
         8f:66:fe:48:f3:53:c0:42:e9:42:9a:1b:a6:c4:0f:c9:a8:a0:
         f7:08:86:65:dc:67:84:5a:f8:4c:39:c5:e0:b2:09:ca:01:4f:
         9d:1b:44:bb:d6:ef:c1:e7:ae:a2:e3:8c:d8:27:6c:6c:9e:3b:
         01:4d:84:f3:74:17:cd:21:1e:73:f4:8e:21:04:b8:b8:9b:b0:
         34:b6:7b:bd:45:a8:9a:9f:2b:57:48:f3:90:df:52:9f:69:db:
         2b:2a:e1:10:a5:b4:46:58:40:1e:ae:50:8c:b0:40:6f:d0:dc:
         5c:fe:b2:1a:ff:0b:c6:c3:8a:b1:db:fa:cc:ed:99:35:60:b7:
         be:51:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----