Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File:                     3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier:          +2XUHN5NuPL48c2JnLOFEUm9v+Qf3HZWaYa8KJT9Qe4=
Subject key identifier:   2B:F6:47:57:5F:53:AC:6B:FA:CE:0E:D8:DA:97:13:A1:E7:A3:4F:E6
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer:       /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial:       0194BD85A173F67845545EB4B13BDDD718A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 18:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:38 +0000
Files and hashes:         1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: j2SIQ5utNMCumefUP5OvoQSe3V62j+7V/SuIythiVis=)
                          2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=)
                          3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=)
                          4: KYs_VMmQL9k2rQHns_O4m4f35bc.roa (hash: 1ns98Zta2gRWyrvr5wyrj8EwmfBa9CnA+/wYUmR2SA0=)
                          5: ThB5ArM42WkjWUEQcQYsflTBSWo.roa (hash: bddz7FyKEk1/5lgcU0RqcQHG7LiGlbilafV868t6FT4=)
                          6: nM77Som-zdPXAPD9CP-IXlUw7ZE.roa (hash: TRVwv4WGb4cA0kRtRY/Fd2cZ8gACAvySfKBX3f3SdzQ=)
                          7: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=)
                          8: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a1:73:f6:78:45:54:5e:b4:b1:3b:dd:d7:18:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
        Validity
            Not Before: Jan 31 18:00:38 2025 GMT
            Not After : Feb  1 18:00:38 2025 GMT
        Subject: CN=2bf647575f53ac6bface0ed8da9713a1e7a34fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0e:70:c0:57:bf:89:96:25:4f:c0:a6:de:44:
                    1f:f9:71:96:b5:26:8f:06:8f:28:e7:ec:39:4a:c5:
                    d4:91:25:e2:88:c9:ba:16:32:e2:53:fc:5a:9e:fe:
                    dd:6a:87:af:d5:b1:ef:ee:a8:6e:3c:86:50:ea:89:
                    1c:b0:ce:40:5c:e9:1b:f2:0c:d9:59:ab:c7:29:f8:
                    1c:1d:a8:e9:eb:14:8f:8e:c8:69:4a:52:9a:90:07:
                    fa:ca:af:a4:6c:a1:39:fe:7c:ae:b4:16:19:3d:d6:
                    10:3d:44:de:18:2f:70:ac:cc:9c:e4:03:15:34:dc:
                    d1:de:5b:fb:05:f5:02:b1:9a:ab:78:05:ca:da:f9:
                    40:03:6a:d0:c0:13:30:58:cc:14:04:34:1b:5b:47:
                    84:31:e1:0d:30:8d:2b:ed:a9:e8:4b:da:a7:c3:db:
                    6f:18:d9:3d:c5:5c:b6:7e:82:dc:86:80:b5:41:25:
                    c9:f3:53:82:20:28:14:45:8c:71:b1:15:7a:ad:0c:
                    89:4e:89:07:bf:a5:84:ae:7d:bd:cc:c4:87:25:da:
                    35:eb:af:20:f7:8d:b2:23:56:16:93:51:79:35:81:
                    cb:5c:77:07:33:47:ce:7d:53:1b:eb:a7:bd:77:db:
                    83:8e:2f:a8:a5:e3:90:d6:3c:58:12:61:f9:db:2b:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F6:47:57:5F:53:AC:6B:FA:CE:0E:D8:DA:97:13:A1:E7:A3:4F:E6
            X509v3 Authority Key Identifier:
                keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:aa:a4:e0:92:4e:d7:22:08:b3:b6:d5:53:84:65:13:d1:fa:
         6a:7a:8f:eb:28:1e:5c:66:05:b8:ad:93:5c:86:4a:82:40:7b:
         4c:b5:72:75:48:fd:a1:74:1a:b1:f2:3f:ef:40:86:83:74:4b:
         ee:de:69:0b:b2:74:60:a5:67:0e:f4:be:49:09:fb:83:13:9c:
         26:2a:da:6d:e4:dd:d5:b1:fc:a5:5f:60:7d:b9:09:30:1c:34:
         ad:fa:0f:ca:e3:78:c0:b0:b9:95:de:50:08:d3:d8:99:35:37:
         6f:96:01:35:68:47:5b:b0:88:e3:ea:9f:f0:52:d2:24:cc:3a:
         7c:b0:f6:64:24:31:2f:d4:3f:c8:2c:2a:37:19:39:46:4c:f7:
         57:8d:59:a2:5b:08:cd:a8:d4:d8:73:1e:e7:ab:93:9a:96:7b:
         01:43:16:b7:97:75:e6:c1:09:b0:77:ea:49:b8:45:de:f3:85:
         29:0a:67:87:26:c1:79:d2:6e:e4:e0:4f:06:f6:f6:9d:ed:62:
         16:75:30:ac:16:fe:64:3c:8b:ef:ea:45:3a:fe:40:af:55:2f:
         0a:3c:82:d9:78:98:4e:aa:76:2c:5d:ac:01:bb:e3:6c:0d:43:
         5f:c5:6b:f8:3c:2d:7c:e7:60:58:64:95:f3:de:4e:a9:b3:27:
         77:f8:86:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----