Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File:                     3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier:          +9/BhCnjno9Lv91ztioICcoDVyoJKHia97H34z590KA=
Subject key identifier:   D9:94:9B:E4:39:E0:C2:97:9C:F1:C3:6C:52:64:4F:39:72:CA:F8:C9
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer:       /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial:       0194BD8581A4A0706237CA8CDF10F4B4A2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number:          0C10
Signing time:             Fri 31 Jan 2025 18:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:30 +0000
Files and hashes:         1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: D2OpzHkn62zYlzMy/a+BR0xPH4MQZjsLA+i4VedLLLM=)
                          2: D7PGGduIwX7v-ShQSUz8OVV9C1w.roa (hash: 7ckgBrpQ8LkiNGwk/n+SRdsap+chU5QW5iJNm8qHanE=)
                          3: IrsYdpqcOnQ3SpbKBx6nFfzcVrQ.roa (hash: AIbJqohxVTkRlwXht+/E+fE7aYFk0d/YsXjveY/e/+A=)
                          4: QV_KHSRk0F1p49xmdU8Cjw9F95k.roa (hash: bXFoeKrbp3I/mSHJx/SNzgxE/ZuKpJd2GAhpkwSz+z4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:81:a4:a0:70:62:37:ca:8c:df:10:f4:b4:a2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
        Validity
            Not Before: Jan 31 18:00:30 2025 GMT
            Not After : Feb  1 18:00:30 2025 GMT
        Subject: CN=d9949be439e0c2979cf1c36c52644f3972caf8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:0b:37:66:da:b1:18:6b:e7:a2:c8:d5:79:
                    bd:93:3e:9d:4b:84:bf:41:67:29:94:18:8e:b9:6b:
                    8d:e6:51:2e:aa:3f:23:76:d8:cc:28:41:79:e5:de:
                    d4:21:17:3c:39:26:2e:10:d1:e3:e9:52:1c:d6:be:
                    b6:3e:9b:f2:e6:10:5f:77:85:48:77:f2:d9:0e:bc:
                    e9:57:ad:d2:ee:0a:03:a4:fd:98:31:3e:af:ae:a1:
                    be:a7:56:9c:25:24:14:2b:bb:95:4e:60:14:c7:92:
                    d2:af:f1:a1:32:07:39:75:44:a8:e4:8c:4a:08:fb:
                    bc:3a:13:d0:32:1f:13:73:8a:fc:db:3f:f8:5c:02:
                    4d:d1:39:e1:be:b3:a6:2e:ff:c2:8f:ee:c7:c9:e1:
                    88:96:fa:ab:59:17:9c:83:52:aa:2a:8b:2d:6b:e1:
                    12:79:c1:b1:06:27:41:e4:5e:44:0b:21:86:93:36:
                    5b:62:d5:e2:d7:1f:fa:d7:f5:5a:aa:0f:4b:ba:ad:
                    4d:d9:dc:f9:11:19:6b:be:b9:88:a4:c4:69:98:f4:
                    80:a7:6e:d9:7d:1d:25:68:b7:29:01:7a:14:95:ec:
                    e8:1c:0c:fb:71:dc:3d:2b:21:89:5e:df:ae:09:d4:
                    58:91:1b:79:52:10:32:71:b8:61:66:f1:28:2d:8a:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:9B:E4:39:E0:C2:97:9C:F1:C3:6C:52:64:4F:39:72:CA:F8:C9
            X509v3 Authority Key Identifier:
                keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:84:e0:20:a1:b3:30:2a:7d:88:73:e7:da:d3:b7:72:95:1a:
         1a:6e:92:26:63:f2:ca:62:9f:b0:f2:85:8c:88:b2:18:cc:49:
         cd:9e:2c:b2:63:6f:08:72:4c:16:06:20:61:15:53:56:43:70:
         03:c1:21:23:e9:7c:8e:d3:3f:d7:74:0c:42:61:5f:b6:85:d3:
         71:2f:67:07:97:3b:c4:35:93:28:10:80:f0:4e:07:1a:7b:73:
         83:31:11:45:b7:e1:84:c4:71:bf:45:81:43:9a:ec:43:f0:1b:
         ec:f5:70:be:43:3d:b7:b2:83:39:33:36:07:a0:3e:08:f7:3f:
         6f:4e:a9:59:f4:da:6a:11:28:90:05:9d:f7:d9:6e:a3:f3:6b:
         56:16:2b:e0:a1:f0:18:6f:d8:89:53:08:06:47:16:3a:71:52:
         e3:df:62:46:93:d1:96:b6:56:fa:b0:f2:03:a5:52:60:1b:70:
         a9:da:44:e9:4d:2f:94:20:bf:5b:45:6b:1b:e0:09:86:fc:a7:
         be:4a:3f:27:37:d3:56:79:26:fe:7b:4f:8a:8a:a0:06:25:60:
         07:be:05:23:4e:90:ec:99:6f:57:22:e9:c3:54:dd:f6:2f:7b:
         d0:a5:a1:e8:33:1f:7f:05:8a:c1:d5:95:62:20:44:71:ce:25:
         32:b2:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----