Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File:                     OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier:          TkUftkHmyDwMKWah9IG3g4Q8kWSPhCRtRG8HlamWHgQ=
Subject key identifier:   F6:77:7D:6E:CC:38:60:09:80:68:6F:DA:B1:27:8A:F2:40:84:7F:31
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer:       /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial:       0194BCE0E956EF5CBCCC2B09B83B6F6848B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number:          05DF
Signing time:             Fri 31 Jan 2025 15:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:43 +0000
Files and hashes:         1: 1ZMKCjtoyUotW5zL6d-I3qOaSBE.roa (hash: 5gJp0s5iC22SH9q8M0EDrUjpQSDzsUFawVisJiKFG6A=)
                          2: 2DDfXUiH85YC1X3PgfdtyKVgjPw.roa (hash: IX38bNkkduAXN8SBzl133Uzin5uXQV9chMH9hhrcGco=)
                          3: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: 8tZXreUN/0lYaTZ+kJhPq5hA1MB7c0YriXYZ6LiwboA=)
                          4: oNxvE63rcj97fc8Yx97MMgI0FKg.roa (hash: /Xg7m8gscK0V6m6vSgFFAxQ362y8xtW8lEesPTxiMpI=)
                          5: wwYS773eF8f5hV4ohepyOO-ifB0.roa (hash: dVUhq/eAJdu372f2XZI+TaIvLid8//8pFvKUxAiEBzM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e9:56:ef:5c:bc:cc:2b:09:b8:3b:6f:68:48:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
        Validity
            Not Before: Jan 31 15:00:43 2025 GMT
            Not After : Feb  1 15:00:43 2025 GMT
        Subject: CN=f6777d6ecc38600980686fdab1278af240847f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:38:71:5e:3a:6c:22:06:04:7b:db:ac:8f:
                    49:b9:37:da:32:80:67:b5:0e:6f:f3:c9:44:c0:94:
                    4c:52:e4:f2:81:95:bc:e8:ec:b5:19:3f:2d:98:bf:
                    97:79:4a:64:02:3f:3b:55:4c:ed:5a:ed:10:ed:de:
                    3b:73:2a:f6:ad:9c:4c:99:70:15:ab:66:39:ff:37:
                    04:c5:b9:63:c1:fd:2f:4a:7f:fa:15:64:77:5d:9a:
                    dd:44:26:32:47:0b:32:30:4f:6e:0e:2b:50:01:a6:
                    e3:3c:90:04:8b:cb:3d:73:15:72:56:0a:49:81:50:
                    21:3b:76:2a:de:18:fd:2b:55:b3:86:68:66:43:ec:
                    e1:91:8b:11:bd:7a:47:d3:98:04:6f:7d:5d:cb:b4:
                    62:25:4f:0e:0b:2c:1e:fc:ba:aa:f6:14:6d:47:6e:
                    d7:4c:ee:3a:3f:8d:db:f4:e2:8d:69:da:15:b3:6f:
                    9e:4c:97:dd:6a:da:c3:71:e9:87:5b:10:c6:f1:a7:
                    dc:c4:d2:e0:fd:d3:b4:66:05:2e:6f:96:c8:6a:08:
                    18:59:6c:04:99:3d:c1:5e:81:b6:0b:ee:dd:45:02:
                    89:96:4f:27:b9:6f:00:61:4b:a8:bf:55:98:e6:0d:
                    bc:12:55:75:98:1b:50:db:f4:7b:97:40:68:32:b3:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:7D:6E:CC:38:60:09:80:68:6F:DA:B1:27:8A:F2:40:84:7F:31
            X509v3 Authority Key Identifier:
                keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:34:f3:66:3f:12:8c:51:33:31:80:7c:62:91:c9:63:c9:9f:
         8d:04:b1:ae:16:74:27:ec:bf:f7:e9:ec:50:97:04:9c:fd:71:
         92:02:7a:48:fe:63:d3:86:5b:b1:7b:e0:ff:79:01:1a:f4:56:
         f7:e6:74:9b:f8:40:95:fb:e1:54:ae:60:ee:f1:60:6a:53:b9:
         0d:a3:4e:2f:1b:1a:41:99:8c:7f:7b:5b:8f:12:f0:fa:de:a8:
         09:05:8f:78:88:02:de:8e:d3:2d:b5:92:2b:e2:7c:4e:77:61:
         a8:16:94:a0:1c:00:77:f3:5c:cb:19:80:0f:b3:cf:75:37:0d:
         85:bc:85:e6:23:82:08:1d:de:68:b5:85:1f:7e:b3:3f:75:36:
         0e:37:bb:ad:ff:2b:ec:2c:0c:86:06:de:e0:e1:d3:ba:86:65:
         63:e1:11:ba:10:3d:07:4a:23:73:45:e6:63:f7:a7:78:91:7f:
         95:32:2a:1d:64:70:1f:a2:fb:e1:96:71:2b:44:e0:1d:a9:c5:
         e2:8b:29:8d:a5:8a:9f:70:a9:c1:89:cb:b4:67:aa:28:39:30:
         d8:66:95:52:aa:d1:97:04:dc:85:22:79:e5:d3:2d:1a:e7:52:
         32:0a:cb:36:66:a9:f0:0c:c5:8a:9f:85:ee:76:7d:86:1d:bc:
         5b:c8:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----