Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File:                     3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier:          YDPeJpy9UGD7IKKXtbMmB3wOnyJqjgfl7rzTCMv69q0=
Subject key identifier:   80:90:5B:49:97:89:34:94:FC:D9:08:FF:E7:0B:A1:A4:FD:A8:32:E8
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer:       /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial:       0194BD4EC7A13225AB3E8D4A0C65C528B746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number:          1111
Signing time:             Fri 31 Jan 2025 17:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:43 +0000
Files and hashes:         1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: Zx4ukX9dsfR3KXz06sh8BP+QmuFE6uVHVo9RDdgAVs4=)
                          2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
                          3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
                          4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
                          5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:c7:a1:32:25:ab:3e:8d:4a:0c:65:c5:28:b7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
        Validity
            Not Before: Jan 31 17:00:43 2025 GMT
            Not After : Feb  1 17:00:43 2025 GMT
        Subject: CN=80905b4997893494fcd908ffe70ba1a4fda832e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:bd:cc:0e:18:d4:b7:e0:83:3a:a8:b9:cd:
                    10:52:ab:3d:ff:42:75:58:d8:6a:51:58:95:3c:b2:
                    09:72:4b:dc:c3:58:57:20:be:5d:4d:07:bb:a4:74:
                    8a:3e:5f:47:e5:f4:58:8d:2a:71:4b:aa:46:3a:e0:
                    77:60:be:9f:c8:f9:24:eb:07:0e:12:48:98:a1:da:
                    90:69:9a:1f:03:c0:d2:ae:b4:90:0d:86:22:bb:d8:
                    b7:40:65:96:a7:f6:d0:f5:dd:df:2b:42:f5:dd:2c:
                    35:26:10:bc:f6:39:4c:e6:f3:ed:90:a6:0b:c9:ef:
                    d1:8d:c9:03:33:1c:79:06:6e:4e:c8:f3:a0:d7:23:
                    03:c7:d2:09:5d:b2:a6:8a:00:3a:89:f0:cd:42:8d:
                    1b:1c:52:a2:72:38:cd:5e:46:39:43:dc:88:55:3c:
                    0c:20:99:60:d0:3c:e6:f3:a2:01:2e:22:ba:b4:ee:
                    79:b3:5f:eb:1e:56:38:6b:74:3f:60:3f:c2:ad:00:
                    ba:7f:d3:9e:c0:87:0f:b7:0a:6e:0c:f0:2b:ab:35:
                    da:3b:c6:47:b5:f7:08:f1:95:83:6f:8f:c7:9f:2a:
                    7e:22:29:27:33:29:76:71:f2:39:23:11:db:10:ce:
                    cb:7c:3b:98:4f:00:3e:e0:14:b7:70:e3:10:67:63:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:5B:49:97:89:34:94:FC:D9:08:FF:E7:0B:A1:A4:FD:A8:32:E8
            X509v3 Authority Key Identifier:
                keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8e:64:6b:92:62:27:9a:c2:f1:74:38:b3:32:97:3c:48:37:
         f7:6e:29:bb:d3:cd:8c:1f:0d:52:a2:77:20:b5:5d:a9:ed:df:
         e2:5a:e8:bc:47:c2:ac:08:98:11:8f:2b:4e:32:ad:49:f7:95:
         88:e3:ce:9b:ad:84:ae:c1:a3:a0:48:85:83:c7:b1:ef:8f:41:
         df:03:eb:6f:70:59:ce:ef:60:44:83:49:32:b9:b3:54:cb:d5:
         52:b3:27:dc:bf:81:45:c9:00:33:28:98:04:33:12:63:f3:c9:
         a2:5f:08:36:c9:48:6e:31:81:c2:16:47:d5:ad:f9:0d:a9:85:
         d2:4c:4d:1e:05:a3:dd:2e:c5:7e:30:fb:37:08:8e:6f:3c:fb:
         27:20:a5:f1:d2:b3:07:62:a5:47:15:93:83:76:5a:23:df:75:
         d9:b9:74:6b:5f:38:db:26:b5:8e:07:14:e1:f3:5f:a2:ea:99:
         23:dd:eb:d6:7d:bf:85:db:d8:60:3a:c7:0c:4d:30:49:88:4f:
         23:a7:11:e4:9b:d8:96:5c:7c:99:04:c7:69:e8:ea:37:e3:7a:
         37:ab:76:c0:86:a7:6a:45:ac:38:9f:27:99:69:5c:de:db:6e:
         a1:49:d8:9b:8f:9d:04:e4:0b:2e:3a:a1:8e:c2:44:9f:0d:12:
         6a:52:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----