Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File:                     yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier:          w1gTIBZNAsa3rcDaAghtzazR8sHPPSFmitqbwtwyCbU=
Subject key identifier:   27:73:A0:5C:97:11:01:EA:80:D2:18:A8:C1:28:8C:02:12:3D:C2:CC
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer:       /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial:       0194BD8574E4226A803C44B94B5F94948C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
                          2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
                          3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
                          4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
                          5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: OGraOWoa+6lpWjQ2ldRFUx27vWdoXx6Q9qC+Jmb9bwc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:74:e4:22:6a:80:3c:44:b9:4b:5f:94:94:8c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=2773a05c971101ea80d218a8c1288c02123dc2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:0f:54:7c:01:9e:3f:3f:a5:3f:90:ff:0c:
                    c2:fc:30:20:d8:0f:d5:99:10:99:a2:4d:9b:1d:16:
                    fd:08:77:96:2a:c3:17:98:f2:84:76:eb:e4:0f:74:
                    63:a4:f0:ad:3c:cd:93:3a:f8:02:e3:b3:34:94:b6:
                    18:64:84:4a:54:3c:84:bc:79:65:e1:20:ef:5e:52:
                    53:6e:32:9b:85:15:9f:10:89:c1:c0:f7:9c:8b:61:
                    c1:05:25:20:6f:fa:1b:02:ef:fd:69:dd:a9:07:80:
                    9c:d8:ab:a4:9a:0c:0b:07:9e:f1:52:45:1f:e4:43:
                    0a:23:0c:56:50:f5:b8:0d:e4:d7:e8:a8:f5:e9:71:
                    90:70:19:07:27:b7:f3:45:18:0a:02:6d:88:3a:06:
                    4c:55:83:dc:48:c3:04:5a:b9:c3:73:29:e7:26:71:
                    f2:50:b9:ea:29:a8:4d:7b:d6:f9:05:ee:f1:d5:99:
                    da:9b:4e:23:83:2b:b1:fd:a7:3f:5f:d4:f2:91:81:
                    cc:e3:c2:d8:10:4a:ae:b3:38:09:80:c1:46:1d:ff:
                    a0:b2:cd:97:62:a2:0c:f4:46:c3:eb:bc:87:c5:06:
                    59:b7:bc:e0:d1:07:15:18:c1:57:80:5f:34:d4:3d:
                    f7:62:e2:59:93:45:a8:54:ed:b2:c1:8a:67:a5:9a:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:73:A0:5C:97:11:01:EA:80:D2:18:A8:C1:28:8C:02:12:3D:C2:CC
            X509v3 Authority Key Identifier:
                keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:84:4b:d2:36:e2:a9:15:47:83:1d:bc:c5:e5:69:69:24:
         a6:67:33:6e:40:a7:e2:cf:f2:b3:17:29:8a:50:cb:83:6d:72:
         4a:86:53:76:1e:43:67:7e:dc:ea:5d:1a:b0:b8:85:ca:8a:32:
         07:c1:f2:57:c2:15:f6:cd:83:b9:41:3d:dc:fb:18:3f:a8:79:
         21:e9:d3:32:97:57:23:1c:c5:4c:c7:5f:86:bf:96:62:c5:18:
         12:bd:f0:35:46:ee:fd:8f:e3:69:38:dc:d0:11:89:ae:43:54:
         0e:75:ce:68:18:5a:9b:49:66:30:fd:6d:2b:a5:81:e5:cc:5b:
         24:b8:e7:52:4a:f2:07:0c:65:13:bb:a7:93:0c:78:8a:68:e7:
         cf:4a:07:bc:25:4c:31:4e:f6:f3:77:c0:77:ec:79:94:4b:6a:
         0e:cb:88:3e:0a:1e:e4:13:ed:fa:fb:75:17:92:33:ba:88:61:
         c9:be:e4:e8:4b:1c:05:5e:0f:c8:d4:85:a5:23:bf:ff:bd:74:
         d1:c6:1a:3c:da:fb:73:6a:65:41:eb:0f:3e:6d:68:84:b9:33:
         59:8e:2f:ed:47:71:00:1f:63:10:c9:69:d2:c5:41:52:cb:de:
         a2:f1:8f:b9:b3:4f:cd:c5:eb:11:bf:67:27:22:e1:6f:9a:40:
         af:b7:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----