Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File:                     3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier:          1WevaVCge/pxXqlTiesBSkWZrsIXbSyP1dU/hNEDp9g=
Subject key identifier:   31:BF:9D:AF:DD:AF:5F:0B:6C:66:B3:0C:2F:4B:41:6C:1E:1B:B9:9B
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer:       /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial:       0194BCE08468C7E3CDA5C91CAFECED011D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number:          1445
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: PC9xmm96+ztkYC4IsVbaneHUsN0n7GjUanabmizqpEs=)
                          2: 7Dxx4GUfZshom9FbPHAxp-Z60ho.roa (hash: LXHxUD8d853bp48Kp4bHizsdXxzmRHG+cP9w4z3LY9k=)
                          3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
                          4: dbK-R91ZSUb0vmB9yu9XwDJ_RDw.roa (hash: YNxHBvfEGT+DFTrI9P9oVpm7y0mnqXQpEkbudzfn+nA=)
                          5: m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa (hash: aOHIBtHSW3A5XSJ7tUzd+YLEbCI85PGx7m5TzFvcEu4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:84:68:c7:e3:cd:a5:c9:1c:af:ec:ed:01:1d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=31bf9dafddaf5f0b6c66b30c2f4b416c1e1bb99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:9e:02:ab:29:43:c9:d7:51:f9:08:d4:44:
                    b4:94:bb:a6:84:17:be:a4:54:53:a8:c7:30:a7:b9:
                    a2:31:73:fe:4e:dc:93:8d:af:29:70:85:7a:28:f0:
                    30:0e:70:d6:ea:ad:5b:d3:39:76:0f:d8:07:49:df:
                    f9:84:73:cf:49:06:cc:26:59:c9:98:c2:4c:fa:ed:
                    c6:aa:47:4b:42:46:15:ce:98:e1:c4:d5:40:b7:48:
                    2b:ff:8c:a7:86:2d:c9:9a:d1:e3:fd:f7:5d:05:9b:
                    35:a4:36:23:75:0a:b1:2f:bf:04:2e:1f:1d:99:78:
                    a4:1e:66:16:3c:66:2c:b8:83:f7:59:ae:f4:e6:fb:
                    f4:84:92:6b:a3:35:e2:f2:29:7e:f1:fd:67:28:30:
                    4a:d7:6d:84:d2:8c:c1:17:05:85:b0:43:7c:35:9d:
                    a7:58:30:0b:fb:51:1a:9f:c8:0c:b2:6f:0b:7b:be:
                    dc:1e:da:e9:02:38:7b:3c:c7:b9:0f:fd:f2:32:1c:
                    a5:64:5a:cc:68:44:9c:99:74:0b:cc:64:b7:a9:bf:
                    0a:20:44:b6:3c:69:72:54:3e:bf:e8:33:97:37:1e:
                    66:54:25:d7:c4:7e:be:5a:1b:1b:d0:31:5e:56:52:
                    95:ed:ae:15:a4:cf:be:89:be:90:57:08:f0:06:fb:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BF:9D:AF:DD:AF:5F:0B:6C:66:B3:0C:2F:4B:41:6C:1E:1B:B9:9B
            X509v3 Authority Key Identifier:
                keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:ef:79:9d:46:24:be:c9:44:47:6a:5d:74:34:07:ad:30:
         01:17:09:27:d6:a8:d4:25:87:56:c1:17:80:da:67:62:cf:b1:
         b3:de:da:fc:49:12:71:6a:f7:8a:f7:71:70:3e:57:cd:bd:eb:
         60:71:4f:22:15:4f:34:f7:ea:7d:23:54:64:6c:11:82:7d:d3:
         a9:38:1b:ce:52:9b:71:bf:6d:02:9e:4c:26:7d:ad:09:97:ac:
         e2:b1:35:fd:6b:60:ed:7f:1d:e2:99:9b:67:d1:e3:9c:c7:1f:
         c9:a1:98:5c:0e:5c:7b:22:96:57:5e:d2:44:20:27:d3:91:dc:
         0e:eb:c5:41:47:8b:a3:e0:53:07:f9:89:06:13:cb:ce:ac:b4:
         72:d5:f8:c6:bd:fc:af:51:a0:37:c0:11:9d:a8:b4:ee:3c:b4:
         ea:9a:ae:12:65:f6:fa:a2:5d:a9:ab:00:e3:e0:b0:61:cb:d5:
         a8:4e:6c:d2:ea:c8:c9:59:f0:15:fe:26:c5:8e:94:dc:67:fc:
         7d:e6:77:90:46:56:bb:d6:a2:27:3e:1f:8b:9b:c8:b9:7f:09:
         6e:1e:08:b7:72:2a:3b:5c:90:24:a9:38:2c:8c:6c:c4:63:8d:
         e8:15:be:cb:b4:b9:06:72:27:1d:c3:b5:1f:48:83:1a:3d:19:
         39:fc:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----