Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File:                     NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier:          oBMRLbRr51Z16enTm5o+EtrBH4862YY7HrVXiA4pheA=
Subject key identifier:   26:11:3B:85:DD:BB:03:F0:14:4C:08:43:D4:48:D5:DA:25:E2:82:87
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer:       /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial:       0194BC3C2F646D50828288F33E4889875639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 12:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:48 +0000
Files and hashes:         1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
                          2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
                          3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
                          4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
                          5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
                          6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: JTS80U1Pn0zG/FiHhFP+z2OQBFE/ObmMB590EZUAlQU=)
                          7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
                          8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
                          9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:2f:64:6d:50:82:82:88:f3:3e:48:89:87:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
        Validity
            Not Before: Jan 31 12:00:48 2025 GMT
            Not After : Feb  1 12:00:48 2025 GMT
        Subject: CN=26113b85ddbb03f0144c0843d448d5da25e28287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:04:0a:87:b4:0d:fe:d4:b0:e9:6d:e8:de:
                    37:ab:7c:9b:b7:dd:62:05:fb:17:e8:cb:92:8a:e7:
                    19:e5:04:1f:47:10:01:f7:a9:34:f3:57:6d:61:42:
                    13:db:a9:97:f1:30:48:97:ad:97:85:28:30:0d:c0:
                    26:c9:c2:55:c3:e4:60:1c:1d:4d:a4:a8:a9:07:1e:
                    73:47:2d:1e:31:b4:75:57:0a:3e:0f:ea:11:ca:e3:
                    91:d7:70:ed:d9:a0:49:36:1b:34:6c:32:a7:6e:a2:
                    df:96:4a:4f:68:2e:bb:73:a1:66:7e:ea:18:4f:58:
                    79:c9:6e:96:21:d8:2e:fb:2c:c0:76:27:53:d3:d2:
                    e8:a7:0e:6d:56:3d:01:7b:f7:29:da:4b:27:be:3d:
                    76:b5:2a:2f:d9:20:fb:1f:36:b5:33:e3:02:c2:d5:
                    08:c2:d6:d6:72:a8:70:5a:f7:05:13:d0:6c:3e:81:
                    c9:49:a7:5b:aa:b3:8f:b8:1b:8f:1d:70:1b:3c:c7:
                    d1:20:ea:db:29:ca:33:7f:ad:03:91:18:ff:ca:a9:
                    d6:51:c3:98:a9:5c:5a:f9:f6:26:7e:41:21:65:02:
                    51:ac:33:b7:95:3b:76:32:0e:3a:bc:2a:84:bd:c6:
                    54:a8:6a:24:22:b8:c7:e3:64:c3:71:fa:3d:b1:ff:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:3B:85:DD:BB:03:F0:14:4C:08:43:D4:48:D5:DA:25:E2:82:87
            X509v3 Authority Key Identifier:
                keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:76:04:5e:1e:ba:00:8c:d0:29:88:2b:8e:13:9d:e5:84:d8:
         af:ec:94:b6:fd:04:8f:38:f5:d6:ed:2e:6a:35:f3:80:3c:cd:
         24:a2:64:99:46:7b:a2:36:f8:94:76:5a:10:1b:73:a7:ae:57:
         c3:98:bb:24:1a:9f:ca:96:bf:95:5b:1e:b0:2b:c2:fd:36:67:
         1d:22:74:fa:11:5d:16:9b:e6:77:73:9e:5c:88:b7:d8:47:e8:
         94:3c:10:ec:5d:0d:be:f2:b5:80:5b:1a:e8:cb:f9:3c:54:ee:
         c2:d0:42:f8:e7:14:d3:8a:c6:4b:e5:c0:86:8e:1b:16:60:e2:
         8e:6d:e3:98:82:b6:8d:13:d5:8a:1c:59:37:02:b1:44:4c:b3:
         5b:96:a6:e7:58:45:9c:2a:3d:7a:20:27:9c:4f:d4:2f:3f:0d:
         a1:5a:9c:f0:2e:1c:5c:00:19:e9:69:2b:fe:c2:49:06:ec:59:
         c7:8b:bd:da:cb:00:16:c0:73:e5:88:82:8f:e4:26:07:ca:9f:
         db:aa:2e:e4:ae:be:ed:64:59:c2:96:5d:df:49:25:f4:04:4e:
         97:45:e4:2d:8f:df:39:78:06:dc:39:46:7d:e6:9a:d3:5a:2b:
         d5:40:6e:0c:7f:e5:69:45:9f:a8:42:a3:51:59:ab:77:8a:6c:
         9b:c6:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----