Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          P7BnXTlgYPSb4kLVS6e3O5v8f3R8HV//VusR40hfxqM=
Subject key identifier:   9E:C0:5C:93:05:2D:C3:40:8C:8D:31:E7:B4:75:14:8F:48:D2:61:AC
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       0194BD17E9AC01AF25F38C6E98CF26E5357C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 16:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:48 +0000
Files and hashes:         1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
                          2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
                          3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
                          4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: mBCwQrjWfaFq3Fs3yTod3IVjcaczdelhELQ8G2VAE8g=)
                          5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
                          6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
                          7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
                          8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
                          9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e9:ac:01:af:25:f3:8c:6e:98:cf:26:e5:35:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Jan 31 16:00:48 2025 GMT
            Not After : Feb  1 16:00:48 2025 GMT
        Subject: CN=9ec05c93052dc3408c8d31e7b475148f48d261ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:f4:59:7f:c9:4f:58:6e:b7:e9:f5:56:92:
                    12:9f:64:f1:bd:4e:9e:1c:07:a2:74:82:0c:1c:2e:
                    0c:18:9e:de:54:f6:cc:9c:93:ea:81:fb:ea:ab:09:
                    d3:b9:5f:f0:98:50:1a:54:7c:61:6a:dd:7f:12:8a:
                    a0:b8:88:12:99:c2:f4:e7:1f:56:93:fa:ec:b4:e6:
                    c7:c4:6c:ae:fc:32:bf:bd:d9:f7:2e:92:a4:74:b8:
                    c4:3d:42:d3:f7:db:a9:e8:69:9d:53:9a:68:e2:9c:
                    97:c4:e1:43:ab:22:4f:60:53:cf:12:0b:49:b5:e1:
                    1b:ae:2a:0e:da:68:09:d1:9d:a7:81:26:a8:87:bb:
                    be:9c:a2:03:a0:d4:6e:00:9c:fd:4a:f4:f4:de:10:
                    33:75:6a:d1:e1:08:f5:8d:8e:a3:23:32:ce:eb:bb:
                    42:95:e4:d2:dc:22:74:a0:71:ca:4b:95:49:73:a6:
                    ec:f4:c9:72:36:be:c3:b4:bb:c9:00:1f:a4:84:e4:
                    ae:8f:44:4e:c7:d3:b2:23:87:7c:40:f1:95:f9:e4:
                    83:1b:65:00:50:34:b3:19:da:a3:54:8e:48:19:2a:
                    94:32:44:4a:99:29:5f:63:ec:09:b1:f3:af:1c:a6:
                    4c:76:6d:7d:eb:34:d3:f6:a7:de:ca:31:6b:0f:67:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:5C:93:05:2D:C3:40:8C:8D:31:E7:B4:75:14:8F:48:D2:61:AC
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:8c:5b:64:ff:33:12:cd:cd:31:28:92:11:0b:d7:16:11:
         92:2c:28:f3:1f:6f:e2:c1:8e:29:67:4a:bc:c2:1c:8c:de:8d:
         f0:ca:a8:16:c6:1e:ed:db:4f:0f:5d:f7:3d:34:78:5e:e8:08:
         a2:83:81:41:14:20:b6:b2:72:3f:42:46:19:16:40:e0:c3:3b:
         9a:b7:ed:e3:b4:1e:fd:0e:36:83:1a:72:a0:a7:20:46:d1:36:
         d2:37:fa:f2:db:a6:df:6f:d8:e5:39:20:2e:e7:9b:8e:5d:d6:
         c4:98:12:1e:1b:2f:ea:d9:fc:df:00:d0:da:f4:50:be:85:ea:
         b3:79:80:cd:ab:da:96:d2:b6:ab:c8:7e:a4:70:bf:0d:37:9a:
         89:bd:e2:6e:25:41:52:3f:b1:d0:de:5a:40:73:11:f2:28:9f:
         ab:c9:8c:4f:48:73:25:67:3b:44:38:c2:0e:20:79:0f:87:fe:
         9a:d4:c5:27:6d:d9:b0:56:c7:8a:bc:a5:3d:c4:3a:24:28:f8:
         6b:1d:82:ac:6a:90:96:05:fc:3d:0b:87:74:40:8d:c2:db:9e:
         4e:00:88:77:cf:fc:99:84:22:1d:92:5f:26:3c:d9:c4:8e:91:
         8d:9e:ac:78:8e:44:c2:18:7f:40:ad:6d:34:bb:4f:87:50:0d:
         65:87:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----