Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File:                     A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier:          DKvGJI283le9o+pr9AXg62/7pV/pYBR5PBayZEHYHqo=
Subject key identifier:   AA:13:74:6B:37:17:84:1F:98:B2:81:A0:78:F8:3E:6D:A8:5A:76:D0
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer:       /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial:       0194BD859F85F779016BC3AC4096E57DD844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number:          0F3B
Signing time:             Fri 31 Jan 2025 18:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:38 +0000
Files and hashes:         1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: PC2FP8yL7WmFdEf/hCJ0xtHAC2IpMeMtL1kvzO8i/Lo=)
                          2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=)
                          3: YTDoyE_yq7saaMex7z_gHQvF1NQ.roa (hash: 9jjva+AnXUr3iNerkLLHau0NDfhlkgvVdTNxPNRSTd4=)
                          4: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=)
                          5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9f:85:f7:79:01:6b:c3:ac:40:96:e5:7d:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
        Validity
            Not Before: Jan 31 18:00:38 2025 GMT
            Not After : Feb  1 18:00:38 2025 GMT
        Subject: CN=aa13746b3717841f98b281a078f83e6da85a76d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:0b:41:02:d3:28:94:0c:bb:7a:63:78:35:
                    54:8e:67:9c:89:d5:f4:1d:49:7d:f7:05:2f:f9:6f:
                    87:92:de:4f:04:51:0a:12:08:6f:16:26:ec:72:61:
                    1a:e8:29:8c:1d:12:e6:b6:1c:39:56:7a:f8:39:ca:
                    35:70:d3:52:f5:5d:14:3d:cf:e3:91:76:7e:19:01:
                    f4:c6:29:71:ec:62:ad:a5:3f:ad:60:1f:43:c1:81:
                    83:5c:35:a3:03:d5:bc:d9:bf:dc:d6:16:ed:95:cf:
                    51:f9:73:b0:d9:91:b5:f5:36:1f:fb:e7:d0:17:89:
                    93:b7:78:58:4d:55:69:ba:aa:3e:d0:97:3b:54:37:
                    7a:75:43:ca:7e:8e:95:a2:c7:74:f4:7f:5a:c2:39:
                    20:cf:69:62:bf:4d:e0:d7:9d:fb:57:fc:2e:18:3f:
                    92:2e:c0:02:10:dc:0e:e6:52:12:77:14:2e:39:32:
                    1b:60:13:c7:51:22:5a:8b:56:36:f3:f4:62:9e:63:
                    ed:ab:38:f6:eb:70:3b:74:94:fc:26:67:9b:6b:3a:
                    ef:a3:6f:f7:a6:d8:06:9f:71:81:97:39:88:cc:8f:
                    8c:5a:02:07:16:1e:67:3b:63:9c:99:18:1d:28:69:
                    26:e6:6e:49:0d:1e:bc:2f:b2:08:88:a6:80:52:58:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:13:74:6B:37:17:84:1F:98:B2:81:A0:78:F8:3E:6D:A8:5A:76:D0
            X509v3 Authority Key Identifier:
                keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ca:30:d7:49:d1:ed:1b:5e:8c:a3:75:46:b5:90:cb:d4:77:
         d5:24:d5:0a:0e:4f:49:b5:4a:5a:a5:92:3a:28:21:03:c8:0e:
         2d:fd:40:b4:ce:9e:60:fa:5d:d1:9c:83:a1:1b:90:15:d8:35:
         7c:7b:4b:fe:0f:3b:f5:8f:ef:5e:8a:05:1c:94:8f:dc:10:a3:
         ca:09:cd:6b:fe:80:d3:cf:66:1c:c2:0d:8a:5f:29:a4:39:bb:
         5a:d8:fc:82:30:45:73:b1:94:a0:58:23:3c:94:88:bc:4a:4b:
         2d:e0:6a:9f:63:37:73:af:54:34:51:fe:44:f5:6b:f7:68:00:
         f0:8c:af:9e:19:63:d9:c1:4f:0b:98:25:22:ec:61:cd:76:df:
         2b:5c:7f:5d:41:bd:8f:e9:c5:4b:d9:e6:51:e2:97:25:d4:50:
         a0:1f:bf:dd:c6:c0:d4:f7:0d:b3:db:dd:8a:9a:0d:9c:e6:19:
         a9:ca:70:fd:7e:38:1a:d9:7d:02:13:4d:ca:7a:55:2e:d2:7f:
         50:a4:01:ea:33:65:d3:3b:6a:89:04:be:f2:26:b5:40:bc:8d:
         e4:86:e2:5d:38:a0:b4:ea:f8:61:f1:88:fd:28:99:54:52:c1:
         16:9e:bc:40:59:3b:bb:43:25:c9:8d:11:58:7b:e7:42:db:85:
         22:85:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----