Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File:                     O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier:          tTdb18Gs9SrXMcJam9Zb0PxHcsr4Z0sPvsYPWBnvMik=
Subject key identifier:   20:91:7D:72:BE:01:D8:55:01:92:14:86:27:B8:F8:21:CF:9F:3D:E8
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer:       /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial:       0194BD4E4D0243AC52BB87934766661EF621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number:          0E90
Signing time:             Fri 31 Jan 2025 17:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:12 +0000
Files and hashes:         1: 1-Ls4q-ChZ0ZaOTjP1nQ6tqwVR7w.roa (hash: YXXZf8p+XXstJczN+ymTH8ANFDcZF/VCsvvC/wyu2tg=)
                          2: 3K66fkLdFIhZuPgVnT8dBkSPcIY.roa (hash: jrto9CYh3lf5yVyFB1TxobdXxUZh+GOGoL+a0rSxI8I=)
                          3: L8iDtUib1lWzwOIyERcCBBIy5bU.roa (hash: pW9LYiIhHR4KstGydbUcTmJTn8cpZ4m/nyaeIsOlD34=)
                          4: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: 4X0onWrkRKP++CqP4QtghI7wWKgzVS6ZWkDbiqzbx7k=)
                          5: X4q-w2pHpEUXeVT4WRi8KVGNqmI.roa (hash: aLkyrbvQgWng2m2jPHzX79z4EwVYT1xhoUFUBX1hDs0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:4d:02:43:ac:52:bb:87:93:47:66:66:1e:f6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
        Validity
            Not Before: Jan 31 17:00:12 2025 GMT
            Not After : Feb  1 17:00:12 2025 GMT
        Subject: CN=20917d72be01d8550192148627b8f821cf9f3de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:3d:8a:ce:ee:d1:0c:9d:21:b2:38:55:c0:
                    61:62:cf:90:06:b1:d2:f2:d8:44:72:56:b8:f4:3b:
                    9f:d7:d2:ca:3d:0e:11:ed:24:2d:c9:21:20:7f:57:
                    c2:0f:34:94:68:31:e5:90:77:f5:06:74:b1:19:77:
                    7b:01:7b:50:9a:f5:3d:ec:f3:b7:e8:0a:6d:9c:29:
                    09:a6:4e:91:d1:7f:ca:aa:ff:1d:b9:2b:84:12:ca:
                    64:d3:7d:1a:09:0b:ff:73:d1:ca:b1:b7:58:c6:90:
                    22:58:2e:df:87:6d:40:85:66:82:66:03:83:69:57:
                    64:a2:9b:a3:9d:05:fb:07:31:64:df:86:9d:9d:02:
                    19:c9:6f:d2:a3:22:96:23:b1:0b:2f:bb:f1:e2:93:
                    2b:3a:ba:17:e1:c4:05:5f:96:c0:f2:13:04:81:2f:
                    f2:4c:e6:7b:a4:dd:55:b7:35:fa:39:f2:5b:d9:4d:
                    97:db:09:fd:bf:db:71:fe:b3:5a:74:2c:27:75:56:
                    f1:5f:35:e3:17:38:da:bd:80:e4:de:a3:c8:88:1a:
                    b5:60:9b:8b:87:68:b2:72:29:7e:c1:fa:69:25:b6:
                    1c:09:68:97:fe:b1:7f:5b:40:ab:be:5c:b3:34:d2:
                    7a:68:b1:45:c5:39:99:df:08:94:58:a5:34:fe:a0:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:91:7D:72:BE:01:D8:55:01:92:14:86:27:B8:F8:21:CF:9F:3D:E8
            X509v3 Authority Key Identifier:
                keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:3c:e8:ed:2b:9d:95:04:cb:c8:5a:99:c6:2a:7d:86:7e:
         66:f3:aa:a3:cf:45:b2:b8:ba:36:64:25:87:94:37:5e:f7:07:
         6d:21:7b:8a:e9:18:99:c7:c9:d8:af:1d:1d:ce:fe:97:15:ae:
         1c:ca:88:7d:e2:ce:d9:80:e9:8a:6d:cb:8d:a4:65:b8:42:4d:
         ae:f0:1a:6d:36:0c:da:80:71:05:d7:4a:56:ef:a8:12:17:62:
         2a:ab:90:c3:59:2c:a4:16:26:bf:09:c0:12:1c:64:e8:87:1a:
         b6:20:9b:9b:3c:b8:23:fc:6e:0c:f5:0d:71:f0:56:6c:41:d2:
         22:d6:0f:19:23:d1:d9:d9:5b:47:99:30:ec:b8:a0:b9:1d:9a:
         f5:e3:17:97:fc:e4:e8:c5:e7:6d:92:81:c0:cd:e1:1d:e5:69:
         03:2d:76:99:21:6a:4a:c3:1a:5c:01:d0:9a:73:d9:70:0c:87:
         10:e0:84:eb:fd:f3:86:2e:9a:cd:e1:84:6c:50:83:16:55:79:
         42:32:11:e7:ce:2a:d7:86:75:8c:89:29:cf:35:05:08:1a:8e:
         be:49:dd:70:f9:be:ca:5c:56:60:bf:9c:a1:24:a6:0f:4f:29:
         f7:22:9c:9f:ca:2f:5b:2e:b3:df:c1:be:32:9e:59:9c:b1:96:
         ef:ee:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----