Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File:                     OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier:          l730JUWhTQGVeETDwvdXkQ18msgb8yvhHd+pydiQNg8=
Subject key identifier:   4A:82:88:F7:8C:89:EA:35:C6:16:3D:5B:C7:33:DD:C1:2F:E5:94:1E
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer:       /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial:       0194BD8552E35FA4F01095D10888FBF00D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 18:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:18 +0000
Files and hashes:         1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=)
                          2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=)
                          3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=)
                          4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: KBMYBboZFPfNrC4ETB1ZwS6upWZ8hJIF+EEP8ZU1Pvk=)
                          5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=)
                          6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:52:e3:5f:a4:f0:10:95:d1:08:88:fb:f0:0d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
        Validity
            Not Before: Jan 31 18:00:18 2025 GMT
            Not After : Feb  1 18:00:18 2025 GMT
        Subject: CN=4a8288f78c89ea35c6163d5bc733ddc12fe5941e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:d2:45:fd:b1:a0:24:a9:e4:88:9a:62:37:
                    dd:90:99:a8:48:54:17:f0:9b:12:0c:68:81:eb:e7:
                    d1:a4:64:b1:0b:46:9d:26:27:b5:84:7a:cd:60:3a:
                    b3:90:01:9b:1a:72:f3:63:61:c6:3c:9b:7b:3a:b1:
                    2c:ed:ad:7e:e0:24:94:3a:5a:5d:23:b5:3a:eb:ea:
                    7d:8a:60:76:2a:01:9a:0e:10:d2:98:94:62:e0:98:
                    e3:0f:33:33:95:7c:54:2d:85:ae:f3:9b:95:95:73:
                    66:10:d7:57:8d:11:5e:d4:7f:7a:f2:3c:e6:27:ba:
                    c4:ed:aa:ee:f3:a4:ee:27:20:b4:8d:16:b2:1a:f8:
                    9a:16:f3:4b:86:28:dd:b2:5c:12:1d:1f:f7:41:30:
                    f0:de:4c:c8:6e:53:8b:d3:6f:11:91:40:cc:f6:95:
                    0a:b1:95:cf:fd:9c:9f:b2:2b:60:0b:5c:ae:1a:73:
                    69:39:b0:88:c6:48:6f:26:86:e7:f2:cb:4f:1a:a8:
                    8c:2d:da:2b:a6:01:a0:e1:dc:be:0e:73:14:d3:1f:
                    94:79:ac:6c:04:e4:da:e3:8c:83:04:01:e6:78:d2:
                    31:b2:55:da:44:ce:3b:df:96:39:1f:98:69:18:cb:
                    cb:0e:74:dc:56:57:c3:03:df:f5:7c:91:fc:56:73:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:82:88:F7:8C:89:EA:35:C6:16:3D:5B:C7:33:DD:C1:2F:E5:94:1E
            X509v3 Authority Key Identifier:
                keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:1b:fa:b9:9a:a9:9c:d9:b0:07:5f:27:79:89:1a:b4:fd:
         a7:f1:00:a1:7f:ae:50:6a:8d:15:f6:3e:56:5a:0a:c4:d6:85:
         0a:f0:d8:9e:d9:6b:10:89:5b:d6:d2:58:e1:f2:af:0d:a0:26:
         9a:21:56:fd:77:17:3f:54:06:a1:64:1e:de:93:bb:e4:26:7e:
         30:c4:99:46:8d:28:a5:ed:c7:6c:cb:bf:91:5b:a8:49:63:c0:
         72:85:d4:c1:09:b0:5d:ae:5e:f9:42:96:af:52:eb:65:e3:d6:
         36:36:df:2d:d0:60:a2:fa:ba:7d:95:4c:aa:8c:20:d9:1f:e4:
         80:a0:d4:43:86:ee:95:e7:a3:7a:20:91:12:27:0b:be:ce:f8:
         d1:4f:98:e0:0b:18:5e:7c:e0:6e:1c:23:b5:22:84:56:c2:3c:
         7e:0c:43:cb:a4:8c:d4:88:20:2d:a8:e7:f7:aa:da:48:d9:4b:
         74:51:7f:fe:48:9b:f0:9e:ca:7a:f6:3d:08:5d:51:fd:3c:8e:
         2e:70:6f:b3:2d:e4:9f:ed:28:01:f1:b3:90:65:7d:1a:06:3e:
         47:14:81:e0:d6:c9:da:c4:89:e9:7c:2b:de:28:f1:a1:7a:a9:
         ec:75:5e:79:d1:24:a6:a5:47:19:e7:94:78:16:5a:fc:78:c3:
         a7:38:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----