Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File:                     oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier:          jKRJ0QI8jqopgP+iLI6LZFj5Z2vYLfTRUtn0p5BORNE=
Subject key identifier:   31:65:45:E8:F2:7E:1D:8D:A9:FC:1A:DC:EA:D3:C2:A6:ED:7E:A8:21
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer:       /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial:       0194BCA9AA32CE0DC93A2E9E728FEDD06DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number:          0B39
Signing time:             Fri 31 Jan 2025 14:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:23 +0000
Files and hashes:         1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
                          2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
                          3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
                          4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: bwaumICOyOKwJfo1IZcHQJ9qaq83HqN6UDeNo78h9cs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:aa:32:ce:0d:c9:3a:2e:9e:72:8f:ed:d0:6d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
        Validity
            Not Before: Jan 31 14:00:23 2025 GMT
            Not After : Feb  1 14:00:23 2025 GMT
        Subject: CN=316545e8f27e1d8da9fc1adcead3c2a6ed7ea821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:21:58:9e:0f:f5:54:19:6c:91:d0:97:9e:
                    8d:eb:d9:55:4a:e3:b4:1d:dd:84:84:4c:3f:d2:b5:
                    b6:69:99:ff:21:fb:38:9c:7b:21:bc:ef:5a:3e:7d:
                    b6:26:b5:58:02:ba:2d:b3:6f:7f:11:6a:58:64:a6:
                    66:6c:3e:ba:9a:96:13:e6:7c:5d:0f:26:ba:14:36:
                    ee:8a:22:a7:ad:66:63:2e:22:4e:aa:b0:fb:1f:c9:
                    24:77:88:92:4c:f1:a1:df:b0:c0:a5:a9:75:1b:29:
                    b7:2e:8d:af:02:3b:d6:c3:d9:26:39:cf:7c:00:c8:
                    a4:45:b9:5b:75:d7:58:24:3b:b1:1d:6f:bd:73:1a:
                    1e:63:55:2a:15:7e:9a:8f:e0:8b:cf:e6:d1:02:35:
                    31:40:cc:7c:9a:f7:49:22:06:ee:fe:05:fb:6d:25:
                    58:32:c2:1a:ec:f2:6f:fa:84:ae:9e:6c:f6:d4:9b:
                    73:e6:72:11:25:10:00:ff:68:c7:63:87:e7:43:3f:
                    11:4a:4f:73:f5:aa:09:99:05:d5:78:ac:de:b3:b3:
                    f0:66:36:d0:e2:e9:07:f9:40:05:57:24:a3:4a:97:
                    d7:e9:70:a7:b4:a4:ab:5a:00:b9:5f:f3:28:1c:71:
                    6a:88:d3:d7:0a:a7:b0:f2:59:42:86:c8:57:cb:3e:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:45:E8:F2:7E:1D:8D:A9:FC:1A:DC:EA:D3:C2:A6:ED:7E:A8:21
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d8:39:32:51:da:e5:6e:4a:bc:0c:ea:15:44:03:a5:16:05:
         a3:d9:ed:ce:ff:fa:f1:c6:a4:c1:39:87:d7:96:9a:d9:2b:fa:
         d6:d9:cf:4c:5c:ca:1a:c2:8a:8d:46:19:3e:17:90:8e:ac:28:
         41:7c:08:2d:0e:ca:49:a0:00:94:89:2b:91:f8:1f:fc:84:e1:
         77:fe:06:61:14:61:a0:b4:54:52:1d:52:ec:8f:dd:c1:df:76:
         34:3c:8e:bf:20:75:a9:ff:2b:00:90:1a:e0:d6:02:0e:b7:14:
         8c:9c:09:89:3c:3d:d5:82:b5:cf:e0:0a:61:28:d7:1e:3f:38:
         0b:6f:83:ec:7f:66:92:25:39:7c:ff:30:38:c0:83:f6:d6:0b:
         89:b4:75:b2:62:30:2f:3e:89:bd:d4:8e:c3:40:91:ba:c9:12:
         d8:c1:64:6e:55:e0:9b:7c:ad:e2:10:37:96:8d:ff:2e:05:aa:
         a0:f5:05:99:a5:5a:68:06:b4:1b:66:b6:e3:75:84:3d:e2:d8:
         da:0e:d9:c4:20:01:12:3d:d8:c8:a6:ba:75:39:f2:4f:0a:5c:
         12:25:72:05:5a:74:c7:1d:74:6c:4c:1f:dc:d0:71:dc:94:4f:
         a9:d0:fb:69:08:e4:40:3b:90:28:77:88:af:fd:15:ae:8e:f0:
         d6:a0:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----