Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File:                     PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier:          8rcRfhkQF0quu9LvjlHuk2kSCFLUKCUgd9aE90TcUJM=
Subject key identifier:   2E:E9:A6:31:15:93:98:FF:6E:7A:68:8B:0A:EF:1D:95:04:F8:C2:1B
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer:       /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial:       0194BCE05DBA7E9DC2EA2AC1E135F397E36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number:          0E31
Signing time:             Fri 31 Jan 2025 15:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:08 +0000
Files and hashes:         1: DTkkXlwWhjBYM7E-LiW8oFBHJjI.roa (hash: cFY01vIGbPqfZkXvhIFJCumwHCyy8N/DU0Sq4RcHFF0=)
                          2: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: dnse7gtwQzg79o2dwMJXljDj6s2bKqcNkGfgo/Z9dB4=)
                          3: PgYgGFElQ5q1n0LGZNZBRta_Qd4.roa (hash: 69CNmBY++9WnYAnXQ2BFsg1ecbH6Dliq6fHkpb2sLS4=)
                          4: Xem9IZju9saEd4HBBcw54N7YJBo.roa (hash: epI0oO/Ypxw8PYKFNTs7wBb4RqAbB8FCJNKpVt0PS6U=)
                          5: c_bN0qeZ98kLK_mj8jLJCUhCuDk.roa (hash: 6teRR+6kz/ZhchnuaFTgHT4htaDxgUNTDG0QN1bVrBA=)
                          6: f3EQDAp01aGz4ygf13OnfmgCiyU.roa (hash: K8CWfwsXMWBETuXajB8y0tfb/O1sIwj6IWVOuqi5a0s=)
                          7: fnn2PBqaEkB-G35nmktclyOEVrM.roa (hash: z4jXqUIY33n8wsiIhXSfBMidI9YSQa2N+6IYP0IxcVM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:5d:ba:7e:9d:c2:ea:2a:c1:e1:35:f3:97:e3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
        Validity
            Not Before: Jan 31 15:00:08 2025 GMT
            Not After : Feb  1 15:00:08 2025 GMT
        Subject: CN=2ee9a631159398ff6e7a688b0aef1d9504f8c21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:eb:e9:4b:bd:d1:69:bf:e3:e8:36:29:f2:
                    6b:3e:a2:55:a2:f1:8a:11:cf:bb:4d:e7:c1:55:2a:
                    7d:8c:8b:d7:37:55:5a:f0:87:87:16:36:4e:b4:d6:
                    30:a4:cf:92:b5:17:d9:98:3c:8a:6d:39:b8:54:e8:
                    bc:f9:11:fc:95:85:17:e6:02:10:18:12:b7:8b:e1:
                    60:cd:98:97:aa:4e:ed:a6:e5:5f:60:6f:d4:70:e1:
                    68:e8:04:a9:69:47:51:a0:33:94:89:a3:10:3d:ce:
                    04:0e:02:5b:ec:31:46:8f:d4:42:b7:e9:79:7a:6d:
                    65:dc:e3:e6:44:21:8f:70:bf:1b:d9:72:3b:8f:f6:
                    3e:d8:bc:95:b2:42:d6:87:4a:17:12:a1:c2:0f:c3:
                    a1:20:39:d2:d3:24:12:13:b2:1b:8e:db:70:e8:53:
                    59:01:6f:1d:36:3a:0e:83:95:39:58:db:7d:2d:c7:
                    0c:f7:49:83:46:02:4e:63:80:07:51:38:62:7e:0e:
                    bb:97:e0:37:1b:cc:34:08:9a:d7:59:53:25:54:30:
                    a1:93:bb:6c:c6:26:7b:13:71:23:5c:ee:a8:1d:48:
                    ee:92:d6:ec:62:d0:4a:52:41:c4:c2:5b:9b:2e:21:
                    6a:3c:81:94:96:12:4d:94:ae:87:41:44:49:3f:03:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:A6:31:15:93:98:FF:6E:7A:68:8B:0A:EF:1D:95:04:F8:C2:1B
            X509v3 Authority Key Identifier:
                keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:06:0e:28:14:37:49:d9:fa:3d:b0:1a:b7:13:be:c6:31:66:
         aa:bf:52:71:64:3d:bf:04:70:25:4a:05:93:eb:de:46:62:6d:
         f0:d5:bb:d9:f6:67:0f:14:19:88:e8:0a:19:6b:c9:a4:f1:5c:
         9e:6d:ae:bb:4c:d1:0a:17:f3:41:ab:00:69:de:b3:ca:87:9f:
         1a:90:47:11:f8:69:48:f3:b1:be:18:a0:c4:55:f6:a5:7e:63:
         c1:8f:5b:20:49:d0:cd:de:c6:6a:b9:af:47:a8:b1:89:24:c2:
         00:05:31:1f:b7:1c:a6:a9:47:e4:0c:3c:1d:e2:d7:77:02:68:
         4f:c3:2c:24:e3:ca:71:4e:1a:c8:43:5b:54:61:9b:05:08:5a:
         08:c7:22:37:31:79:03:bb:67:15:e5:72:c7:e8:a8:2c:db:90:
         2a:8b:fe:58:08:f5:e4:af:5d:ff:44:7a:cf:ec:44:5c:61:3f:
         17:07:c0:1e:2a:ca:e9:fa:79:16:dc:53:86:51:f2:3f:05:3d:
         d7:40:41:e9:36:6e:2f:cd:15:d9:8f:81:80:93:42:c8:cb:0a:
         89:55:4e:39:d9:8d:d5:89:d0:3d:c6:55:f0:ce:e2:25:1f:70:
         fd:1d:9e:11:94:2e:31:f4:89:4f:03:b2:09:3c:8c:ae:63:05:
         f3:de:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----