Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
File:                     v-OXGjLAaSxONC6RF5BmJHDPMbI.mft (raw, json)
Hash identifier:          Z8l89Yax4rLoUfI2O64FnAST5VLo2/Z8SavzqvKHXmY=
Subject key identifier:   83:25:C4:BE:DC:AD:01:9D:56:D2:A9:DD:64:56:00:C8:90:96:F4:D2
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       0194BCE09282BC3BCCD760A8B89BFA3B7104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
Manifest number:          1154
Signing time:             Fri 31 Jan 2025 15:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:21 +0000
Files and hashes:         1: 0nsvioh61YbytSnl9cRfbyJDp0c.roa (hash: X+BXv/M5wDF8Xn3Xgva7hBqMYN1SYqooUH8v3XJmFZ4=)
                          2: 4HzcAwAp_NPUTKmqOpFk6fNukP8.roa (hash: MU7p381OLfrUgZeXEX4ypzzCidzVAcWbQDWLKu/+t9s=)
                          3: QJH1xkQhD8ZqrUTpIxRVC-9iWsg.roa (hash: k8wK85RayUQhoeFyh00R6U1ww1Aske+9ky6WjpJEXWs=)
                          4: v-OXGjLAaSxONC6RF5BmJHDPMbI.crl (hash: pJGdZo49FxJ4pX1RA2G1ujoB1COtQq7WelZV28+bBD4=)
                          5: yQOUiV_ouMfjFYLIfQKl87lFtw8.roa (hash: 7srmAwSkyCXgtko/kNwVJkZrJey5R4xX5MLBJsHDcMs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:92:82:bc:3b:cc:d7:60:a8:b8:9b:fa:3b:71:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Jan 31 15:00:21 2025 GMT
            Not After : Feb  1 15:00:21 2025 GMT
        Subject: CN=8325c4bedcad019d56d2a9dd645600c89096f4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:eb:3a:ee:90:fc:77:ea:e3:75:27:ad:bc:
                    8e:ff:d6:71:2b:dc:a2:f1:92:4d:6a:4e:d8:3b:f3:
                    25:55:11:5b:4d:e9:24:94:8b:f4:64:2e:eb:7b:84:
                    98:41:79:b0:72:1b:cc:7c:d3:dc:a9:9c:c1:e7:3b:
                    84:8b:33:6d:01:72:e2:96:ad:29:b7:55:89:e5:0f:
                    84:ea:bf:a8:b4:48:2e:d7:da:8a:12:d2:85:1f:90:
                    74:39:1c:33:d7:8a:70:dc:2e:86:2c:2c:19:3f:fa:
                    ed:83:f7:d8:17:5e:95:b5:47:8a:48:be:55:2b:00:
                    bf:a5:09:18:8c:33:e2:83:8e:4a:91:e3:d2:0b:12:
                    d1:97:8f:40:74:c6:67:5b:b5:33:30:55:7a:c3:cc:
                    3c:22:fa:5e:59:06:94:35:2b:75:4a:62:b0:08:94:
                    d9:24:16:3b:55:4a:79:25:d3:35:bb:96:08:39:43:
                    6f:b1:68:99:e0:0c:f6:d2:f5:e8:c2:5e:55:ba:b6:
                    48:b2:33:85:b6:06:87:c0:35:52:76:80:c9:00:59:
                    1d:05:4e:90:05:f3:14:d6:b5:45:79:88:61:27:c5:
                    9c:62:39:d4:e3:68:a8:27:18:fb:8d:35:af:9a:65:
                    30:86:55:f7:c9:70:97:8e:f7:b7:39:81:e4:11:ce:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:C4:BE:DC:AD:01:9D:56:D2:A9:DD:64:56:00:C8:90:96:F4:D2
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:01:af:44:17:04:86:6a:ac:ea:ec:33:0d:77:b8:97:05:
         fe:52:4a:e8:71:62:91:02:05:42:e3:10:f4:32:67:82:b2:2a:
         87:d6:26:15:31:de:44:26:db:f2:f8:6a:f0:e6:50:3c:85:71:
         31:0d:df:c8:12:4b:14:04:dd:2e:73:14:81:cc:07:28:8e:a5:
         de:23:b5:d6:2a:63:13:c7:15:35:3f:bc:de:eb:de:0c:9b:f0:
         42:36:0f:99:1c:df:04:00:aa:5d:74:19:2b:41:5f:76:c2:b7:
         20:65:56:3d:27:ec:35:31:68:32:bf:a7:cc:be:a1:69:00:fb:
         27:e6:95:ef:88:d2:69:2b:0d:01:00:21:a0:6b:a6:47:d6:58:
         dc:d3:51:59:f2:02:91:b5:6d:d9:66:d7:e5:38:c9:6c:4f:4c:
         c8:e4:b7:8d:a2:e0:f9:34:79:ed:ed:a2:58:3c:f6:15:be:f7:
         05:0a:48:bf:4f:64:b3:4e:0d:13:17:85:b2:17:d7:87:4d:08:
         e0:91:20:c7:9e:ef:6c:44:15:84:f1:7e:91:d9:d0:9c:0a:75:
         9b:3c:af:13:8f:b0:16:15:dc:cd:24:1a:d5:e6:53:aa:c9:8f:
         0b:97:b6:f6:6d:1d:1f:cd:0f:e8:5e:ac:fe:91:32:bf:3a:fc:
         23:af:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----