Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          DPPon1WS7D5JM/D0KED4paH8HNRNt2lUpd+duq+iCQ0=
Subject key identifier:   BC:FA:39:8C:AA:EA:03:18:39:A1:76:0A:F2:74:BB:C1:99:96:DB:4B
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       0194BD4E7C4610B45823A4B95730DE34D009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          0B39
Signing time:             Fri 31 Jan 2025 17:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:24 +0000
Files and hashes:         1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
                          2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
                          3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: oHXlARRy/XBzbsr72J6LEb9pVIjFIRAA82YtcX5RE8I=)
                          4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:7c:46:10:b4:58:23:a4:b9:57:30:de:34:d0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Jan 31 17:00:24 2025 GMT
            Not After : Feb  1 17:00:24 2025 GMT
        Subject: CN=bcfa398caaea031839a1760af274bbc19996db4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:56:9e:e1:fa:eb:9c:d0:a3:12:c1:27:20:
                    e8:ba:b0:24:57:17:00:34:c1:07:7d:85:e6:53:f7:
                    ca:c7:2b:9a:25:71:ea:8e:d2:1d:99:2a:f8:1f:43:
                    27:e6:de:d3:10:3a:08:ca:45:98:68:d2:97:ee:ac:
                    9b:a2:71:60:c4:87:ff:b8:bf:4c:80:3f:60:83:3a:
                    28:29:0a:b7:f3:ed:6e:28:24:da:0e:59:f1:ee:75:
                    83:27:32:f6:1a:27:02:a1:cf:2d:33:7f:1c:6d:cf:
                    d7:1b:23:e5:ce:47:81:48:59:7f:09:5c:d6:76:5b:
                    75:0c:3c:7d:04:42:7b:a4:2d:27:cd:28:25:95:4a:
                    9b:73:d8:b0:8b:5c:d1:74:cc:7d:06:a8:65:70:77:
                    f7:04:06:47:3b:f5:7a:0b:e2:62:c7:18:25:6c:0f:
                    c5:ba:9a:0d:f8:37:bc:fe:43:2a:b0:29:8b:81:7c:
                    68:f8:18:b9:06:52:69:6d:f5:23:19:ca:62:c8:02:
                    a9:72:5b:a9:c1:b2:8c:45:b3:33:2c:e6:24:93:21:
                    64:7c:c7:97:50:9c:89:75:0e:57:ca:20:55:a6:ec:
                    50:1d:34:72:04:db:04:6f:40:09:a9:59:44:0a:f5:
                    41:b4:64:8a:b3:ba:d4:75:57:a4:36:0e:e7:63:7b:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:39:8C:AA:EA:03:18:39:A1:76:0A:F2:74:BB:C1:99:96:DB:4B
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:77:78:50:e0:1d:f9:09:0e:35:8f:43:75:dc:c8:3a:e3:d5:
         da:03:5a:15:ba:fe:09:4a:b5:17:e7:4c:50:54:32:bb:8a:aa:
         fb:02:9e:2c:2a:ba:f4:0b:dd:77:65:ff:e0:98:b9:03:97:84:
         2d:7c:14:29:ff:bc:49:54:12:06:9e:91:39:e6:04:f8:01:16:
         95:c2:ba:ae:88:d6:c1:14:55:ae:85:25:e5:75:01:7b:25:a9:
         b5:bd:8f:3e:c5:7e:99:29:33:59:e9:af:2f:1b:de:31:21:df:
         02:8c:8a:1c:2f:ea:a9:98:a4:f6:3b:d3:bc:cd:26:16:c5:d1:
         7f:24:60:34:01:9b:9d:0d:1b:07:23:10:db:92:42:19:28:eb:
         a3:40:f6:b6:a9:bb:b7:3a:e7:3a:b4:a8:91:50:11:9f:24:5f:
         c3:76:a8:8e:29:34:ff:b6:43:b7:dc:d5:6b:3f:45:39:4b:b4:
         eb:1b:63:0b:f9:58:c0:b6:77:d2:0f:0f:6a:e2:bd:52:59:08:
         6e:c4:03:04:b7:51:0c:6f:32:ee:33:71:90:c3:21:62:a0:73:
         27:80:96:cc:ab:c4:d4:43:6e:70:10:21:79:04:28:6e:b5:02:
         cd:fe:ad:dd:2d:29:01:55:e1:3c:3f:9e:63:38:b1:f7:fc:e1:
         3c:5c:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----