Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File:                     OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier:          BLhfbPhV0GVMGSHADzRBJXE3g+fgdNVdsc4Dwn6dtbc=
Subject key identifier:   EA:05:D9:FE:E6:21:22:EC:79:53:7E:F9:CE:B7:33:EF:57:4F:E5:AC
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer:       /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial:       0194BC3BF0195FA61886DEC142CB73CDEC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 12:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:32 +0000
Files and hashes:         1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
                          2: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
                          3: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: iEHegkB73t35BLkaCZMQyvqozqboyyg4Lxb16wb4M/0=)
                          4: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
                          5: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
                          6: t4Mz5XwpvViTfoBPC5odbwhbyII.roa (hash: S6sdSlSF5tAAZJY3yT2wIhYWG4HF1Pc/9/M/3E5AUig=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f0:19:5f:a6:18:86:de:c1:42:cb:73:cd:ec:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
        Validity
            Not Before: Jan 31 12:00:32 2025 GMT
            Not After : Feb  1 12:00:32 2025 GMT
        Subject: CN=ea05d9fee62122ec79537ef9ceb733ef574fe5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:d1:19:d3:b1:e4:2b:79:16:90:fe:10:f1:
                    c7:51:b2:1f:92:c2:e9:91:73:06:7e:70:b3:fb:cf:
                    60:f3:53:f4:5c:be:b7:19:e0:11:18:b3:25:12:ec:
                    be:67:17:de:83:40:c7:84:cd:69:60:a4:c5:b2:c0:
                    e4:fe:68:84:09:ab:f4:24:26:78:0e:d9:0e:46:c2:
                    44:b6:1a:74:12:64:f4:07:0d:ae:0f:50:96:d3:9b:
                    66:5f:e4:b8:b4:61:c3:11:13:1c:0b:73:78:7f:bf:
                    a0:b0:66:5a:45:15:bd:36:f3:c2:4b:c3:1d:8b:ae:
                    14:43:32:e6:ea:c1:df:09:00:72:ca:42:1a:7d:dc:
                    da:72:71:d2:4c:e0:0e:9f:e5:b3:24:50:1a:3d:d8:
                    80:e4:f2:c4:88:b2:2f:34:7b:d5:3e:6d:e4:0c:04:
                    17:a1:a2:ef:83:54:78:35:54:a1:ae:6b:d7:d7:82:
                    7a:b9:1e:55:8d:28:f4:1e:06:9e:ea:41:58:52:8e:
                    02:ab:0f:33:86:5c:b3:b3:35:6b:7c:94:5e:fc:4f:
                    cf:d2:f2:3c:a3:bf:34:a9:a9:4b:5a:9f:f1:bd:cd:
                    c6:75:e5:fd:c8:15:bb:b2:89:17:d1:57:35:e8:81:
                    f0:f8:42:e6:21:7b:fc:b5:60:a7:9a:9d:a9:a4:88:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:D9:FE:E6:21:22:EC:79:53:7E:F9:CE:B7:33:EF:57:4F:E5:AC
            X509v3 Authority Key Identifier:
                keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:57:47:05:83:84:c8:0a:72:dc:ca:a7:a4:df:e3:95:a2:
         63:02:a0:01:8c:ce:f8:b1:b3:0f:31:ce:38:85:d6:e3:e3:eb:
         68:c2:ab:aa:db:2f:74:db:18:c0:79:49:d2:70:14:39:ab:f7:
         13:fb:4c:7c:91:68:0a:9a:a4:00:1f:ae:a8:d7:ce:7c:b4:f5:
         a5:ad:b3:d9:cc:38:fe:ca:06:dc:8d:9e:a1:f5:df:20:7a:ef:
         ee:71:35:5a:bf:ad:f4:63:97:50:3f:b4:df:2c:dc:3f:a1:57:
         3c:75:19:5a:85:77:e6:1e:ab:fc:be:70:c5:92:e7:94:7f:00:
         99:95:ef:f1:cb:42:e2:92:fc:7b:82:4c:5b:cc:c8:8a:74:dc:
         b9:75:a4:b0:41:cb:14:86:c6:91:39:ee:84:37:5f:af:f7:b5:
         af:dd:df:e8:e4:a6:1e:a0:b4:e5:ee:30:8d:06:32:78:20:4c:
         86:fd:5c:f6:60:a3:fc:91:eb:2c:e4:30:58:ba:91:16:f9:49:
         3c:df:59:6d:57:75:33:fc:12:49:de:9d:dc:dd:08:e9:6d:20:
         6d:87:88:cc:f8:16:4e:60:e7:9d:24:de:f9:f8:ae:01:20:c9:
         c4:2b:ae:61:1e:2e:2d:c4:b2:b3:1d:b6:57:39:12:8b:9d:10:
         99:a9:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----