Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File:                     3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier:          hSNl3Ba5Q33uvSwU2XsGRv/jl3J/AE9odKXCudGdEVk=
Subject key identifier:   45:A3:78:8C:90:FA:97:C5:DE:B5:47:3D:F8:26:2E:1B:B2:EB:59:AC
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer:       /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial:       0194BC04BFC10071630B6969B970B5B361BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number:          074E
Signing time:             Fri 31 Jan 2025 11:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:15 +0000
Files and hashes:         1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: TEztt3kvRupIvOzQhhgaEXGVeuphSZX7pgc+cI/bUVc=)
                          2: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
                          3: 8lbp7gEnolb7fg1MZ6N2ZuFn9Zs.roa (hash: +pVKesx7Hp1mQ1pr0YTu5RxoH5HP3GdCf/sjsy6eEro=)
                          4: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
                          5: LD2O6uW_t2oXz03g6EamK5CZh8g.roa (hash: uRgxLELFMeUvttOBeDlSLLnT7X25XOyK92tWvP0DKvk=)
                          6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
                          7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:bf:c1:00:71:63:0b:69:69:b9:70:b5:b3:61:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
        Validity
            Not Before: Jan 31 11:00:15 2025 GMT
            Not After : Feb  1 11:00:15 2025 GMT
        Subject: CN=45a3788c90fa97c5deb5473df8262e1bb2eb59ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:36:8d:b4:c0:81:3d:f8:4d:1b:ea:e2:21:
                    6e:0f:c9:3c:e4:ec:ce:76:0e:a6:a3:d8:ac:b6:b9:
                    cd:fe:2d:82:6f:40:3c:d9:96:51:79:76:6a:a4:ba:
                    0f:2f:02:94:6d:39:f4:aa:f3:12:c8:7b:11:ad:8d:
                    ae:d6:c8:b0:fc:b8:69:0c:f6:97:35:15:a6:38:8a:
                    3d:43:9f:97:82:c5:28:6c:f0:38:91:d5:d4:d5:f1:
                    a5:8d:4c:bd:4b:46:3d:fe:28:bc:5a:63:84:a8:bf:
                    37:8a:71:9d:a7:1f:52:d4:0e:dc:45:fb:fb:d8:99:
                    26:be:29:0b:8c:39:24:00:f5:52:41:c8:9c:1a:55:
                    f7:a3:ad:ab:c2:b9:19:11:85:2f:1e:63:76:e1:f9:
                    86:97:aa:cb:b2:a8:07:b5:2d:aa:c1:a5:8b:42:99:
                    65:ad:3c:7e:d2:b7:29:c0:96:e5:36:b4:5c:43:83:
                    19:dc:96:a5:1b:b1:7c:40:e5:98:3d:06:f2:4d:37:
                    00:07:98:51:2d:cf:76:db:5c:f4:a2:12:d4:aa:b0:
                    c4:75:fc:64:73:1f:d6:8b:df:7c:31:03:c7:e0:39:
                    b8:91:ad:96:a5:3c:f2:27:c0:ef:37:b8:4b:88:2a:
                    1a:de:7f:0a:30:bc:d4:d3:e3:11:ad:a8:42:40:32:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A3:78:8C:90:FA:97:C5:DE:B5:47:3D:F8:26:2E:1B:B2:EB:59:AC
            X509v3 Authority Key Identifier:
                keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:20:9a:32:83:cb:7c:b2:92:54:d5:8d:cc:cb:48:95:87:84:
         67:bd:12:6b:35:35:18:b6:7a:4d:b0:5a:80:8b:a8:23:24:ce:
         2c:3d:fb:ca:cf:79:65:25:67:ac:bf:48:e9:cd:f0:b3:56:2a:
         73:5f:f7:8e:ab:a5:1f:be:b9:7c:36:a5:6e:81:33:3f:cf:4b:
         7f:81:8a:aa:89:27:d1:cf:db:c5:33:96:35:69:19:6f:52:a1:
         90:45:d0:f0:77:54:e9:c1:c2:9a:bf:d3:b7:f8:fa:c5:3e:d4:
         cb:08:27:83:d0:bb:62:57:de:97:23:a5:13:68:50:65:f0:38:
         29:c8:08:96:ec:e9:00:a0:86:a3:22:3f:e9:6a:83:be:b3:33:
         82:84:c4:f9:d6:62:88:75:38:c3:cd:d9:75:a8:de:5b:97:14:
         cf:93:f9:7e:b6:04:e4:6f:e9:2f:b1:13:3b:36:23:6a:16:92:
         52:1e:8c:52:c9:67:f0:05:13:30:01:d2:8b:80:c9:6d:2d:f6:
         82:52:7a:d0:33:89:5b:c5:a6:ab:9a:8c:43:7f:55:6f:7b:07:
         68:de:13:13:a9:65:11:ce:37:4a:9f:83:59:d3:9e:24:b3:7b:
         a2:5b:a1:7a:01:a7:e9:e5:a1:a7:e4:dd:14:74:f1:bd:43:52:
         ed:57:ab:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----