Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          gYZBFfY+LdxAFi8nEf7xsara9g6IrCxE6ajgTc7Gio4=
Subject key identifier:   7B:A3:F8:E4:B8:C5:1D:83:20:16:BE:C0:A2:DF:04:17:56:06:5A:CD
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       0194BD8556D918D0D60202AB847CB61B1D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 18:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:19 +0000
Files and hashes:         1: QNtVfkNdeG1v9DJyZBEjTrZNyBc.roa (hash: vaJZALNBXUbhDyRfKEtlNDFsggROpnhoQdeymesJ/Rw=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: 6FrjSjjNryUQXRt3AgLc7u/zfwWjuInhv3z6vedpKVM=)
                          3: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          4: hd67_XZte5UJxG8Z9Bjjhd5C3aY.roa (hash: m5+Tgfa03sp40l5g/5GYZoTIL8T/7QDNBIaZ6t+2ge8=)
                          5: oSx_pT92ENoX9McIljhqchZm0Y8.roa (hash: jetN2hKvAM6TwnDzQ0oFFtD8VXzg/vhGoJq+vT3kY9E=)
                          6: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (hash: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:56:d9:18:d0:d6:02:02:ab:84:7c:b6:1b:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Jan 31 18:00:19 2025 GMT
            Not After : Feb  1 18:00:19 2025 GMT
        Subject: CN=7ba3f8e4b8c51d832016bec0a2df041756065acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:07:32:e0:c5:be:e7:43:ff:5e:8f:61:e4:
                    92:2d:6a:b2:98:28:63:30:97:75:6e:10:d9:c6:83:
                    b1:33:62:df:e3:26:1d:37:0f:5f:6f:f2:fb:b4:a2:
                    a8:f1:f6:3b:d1:81:8c:53:92:ea:8b:5e:9b:11:03:
                    bc:a2:42:19:0e:f6:05:e8:28:b6:87:62:b5:1e:25:
                    9f:1d:e4:14:c8:0e:a9:2f:4c:a6:3e:b7:81:05:19:
                    05:7a:24:0a:e9:d9:e6:a5:bd:13:b8:66:2f:ad:87:
                    0f:c6:02:0d:e3:f8:f0:69:d5:85:fa:36:cb:e5:6f:
                    50:06:d8:91:7b:4a:bd:73:15:63:f8:2f:b7:40:77:
                    16:24:ea:4b:13:e3:69:6c:3c:1c:c9:f4:19:83:bc:
                    76:3a:e7:d1:83:87:c1:0f:36:0e:82:cc:6b:92:d8:
                    ff:47:f9:56:35:1e:ed:0c:84:26:78:ad:99:2d:99:
                    34:7d:0d:05:bf:78:9e:ec:53:af:a1:7d:f5:b8:dc:
                    12:65:8f:e1:3a:9d:05:a2:b0:3a:3b:bb:31:0b:cc:
                    31:d9:e9:0a:c0:9d:54:3f:cb:b1:0e:ca:5c:89:dd:
                    4d:29:27:1f:69:bd:f1:23:ff:28:a3:07:53:ec:9a:
                    d9:3f:bc:a2:b0:35:1e:75:6a:ce:b0:7f:81:2b:01:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:F8:E4:B8:C5:1D:83:20:16:BE:C0:A2:DF:04:17:56:06:5A:CD
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:3f:22:b6:42:ee:f8:08:b7:69:b1:d7:1d:21:4d:32:84:
         82:cd:d5:67:ee:ad:ae:a0:b0:e5:a2:ce:a7:3f:4a:4e:7c:bc:
         14:7c:1b:01:5f:21:18:fb:97:16:59:f5:2c:7e:bd:34:f7:b9:
         f9:ef:1a:a3:aa:fd:99:e7:e4:c3:89:4c:37:f9:8f:a6:75:6d:
         15:02:fb:a6:7e:fb:88:1c:12:db:16:f0:b8:cd:83:93:62:65:
         b0:ab:c9:dd:64:95:51:e1:1f:c3:0a:7b:58:71:ca:12:37:46:
         73:c8:97:77:71:91:86:35:3a:7e:54:84:70:32:1b:9b:3c:6c:
         65:7a:68:8e:09:52:44:b2:98:8a:89:85:2d:f2:d7:e1:d1:90:
         a2:94:76:18:44:74:19:21:16:1f:e0:ba:37:1b:22:91:f7:8b:
         c3:9d:71:b1:0f:aa:1b:5f:b7:34:ba:5b:91:92:24:4f:64:2b:
         91:27:f7:09:33:25:34:58:e3:18:a3:32:9e:46:b4:87:7c:69:
         3b:91:1d:8d:a4:3e:d8:4c:47:95:8d:11:f0:bc:4b:ee:e2:8a:
         72:91:12:a8:17:3b:e8:b9:ca:91:4b:b1:9f:b8:b4:ed:14:62:
         95:1d:60:ff:25:e4:e8:bf:47:9f:f5:11:51:5f:fd:7d:78:86:
         a2:4e:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----