Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File:                     O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier:          092mVgncwZ8Kp9zByuJEdio38zk2zTw1SWz+KsQLOdY=
Subject key identifier:   D1:66:B2:9F:18:7F:EE:DC:70:00:7B:CD:4B:00:CD:8A:2A:4C:03:69
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer:       /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial:       0194BCE0ED973CF8B0A9963E2F433BD3A8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 15:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:44 +0000
Files and hashes:         1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=)
                          2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: wL/7pVrRgsc8wQePyUpPV5Gtm5HvJs7XkDitw3zIuDs=)
                          3: UceenS0AW37r9tIac-IPww_60R8.roa (hash: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=)
                          4: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=)
                          5: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=)
                          6: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=)
                          7: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=)
                          8: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=)
                          9: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ed:97:3c:f8:b0:a9:96:3e:2f:43:3b:d3:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
        Validity
            Not Before: Jan 31 15:00:44 2025 GMT
            Not After : Feb  1 15:00:44 2025 GMT
        Subject: CN=d166b29f187feedc70007bcd4b00cd8a2a4c0369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:43:71:c6:48:06:4b:15:83:a8:15:e8:6d:
                    4e:7b:f1:37:53:41:64:53:ee:18:d3:15:9e:45:ce:
                    ec:80:e1:cc:ad:1f:95:c4:d6:ae:06:35:82:8f:eb:
                    99:7e:df:8c:1b:db:77:4f:03:6b:03:3d:2c:c2:df:
                    77:33:a7:a8:c5:f8:83:78:c4:62:5c:6e:52:98:9b:
                    2b:6e:31:8c:56:0a:12:c9:26:6e:00:4a:93:d5:da:
                    8d:bf:21:8f:72:b7:93:f9:36:39:a6:fb:6b:db:f2:
                    fb:39:64:69:b6:8c:24:fa:03:41:ca:5d:22:96:62:
                    39:74:b8:7b:dc:05:8c:d5:de:75:b8:10:e6:ec:d3:
                    97:90:ee:3d:79:96:c2:2d:51:49:dd:7c:f2:49:40:
                    61:c1:88:a9:de:fe:ce:df:82:01:fd:bd:1f:0e:03:
                    48:ff:df:3f:87:35:25:c8:c4:4a:6a:47:10:ed:bb:
                    a2:fb:67:08:75:d6:d6:29:9f:5d:b4:86:4e:18:21:
                    45:47:63:cd:44:ed:cb:5f:f3:cf:df:68:0f:41:cf:
                    00:7e:54:44:13:12:62:50:bb:6a:87:94:24:ba:9a:
                    29:b1:b8:4d:58:69:e6:ab:21:56:7d:31:3d:ee:f1:
                    72:75:79:4a:3e:83:b9:bf:a7:4f:65:70:76:57:98:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:66:B2:9F:18:7F:EE:DC:70:00:7B:CD:4B:00:CD:8A:2A:4C:03:69
            X509v3 Authority Key Identifier:
                keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:08:90:a2:c1:62:56:9b:72:4c:0f:d2:a8:4c:47:39:ce:fa:
         71:99:13:b6:a2:23:2a:43:e0:a6:02:8e:7d:93:3c:c4:21:37:
         ac:3b:7f:04:cc:58:dc:a3:2e:d0:26:9e:d9:3b:51:ce:c2:f0:
         b3:64:98:ca:bb:b4:80:5f:36:20:b7:d1:83:a3:bf:c8:6a:3e:
         cb:9d:a4:20:af:71:74:33:6c:4b:f9:19:77:25:57:f9:a2:f1:
         b5:a6:cc:87:5e:a8:7d:fa:c5:43:0a:bc:87:36:6c:df:fc:41:
         8a:b9:49:4d:40:89:c7:5e:dd:38:47:9f:c8:85:0c:bb:12:83:
         3b:cc:65:22:f7:fc:ad:9f:5c:61:07:8c:fd:3b:67:53:6b:6a:
         bb:85:56:27:fb:34:c0:99:98:85:14:73:61:c4:71:3d:26:7b:
         ee:fd:58:4c:c7:5b:63:3f:44:21:eb:bc:3a:e7:4a:3d:a1:2e:
         b5:7f:80:11:ff:03:be:23:d8:1a:44:cb:94:37:f5:da:75:ab:
         ee:49:56:47:bb:e7:59:bd:4d:da:37:26:43:d2:e1:29:f5:e9:
         31:b0:38:e7:8e:f3:9c:7e:91:f3:f0:70:23:4d:7e:35:55:35:
         f0:a7:68:ee:a9:2b:84:ba:ae:41:01:b3:9d:d5:7c:30:bc:9f:
         13:81:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----