Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File:                     3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier:          4xGxAELfi+aYSLbe2CDtNpbTOEIyTBgSHcSXdeow+WY=
Subject key identifier:   26:65:50:EA:A5:EE:01:CD:6F:A2:56:38:33:B8:FD:4E:32:F3:18:02
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer:       /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial:       0194BCE0E81068593BA7154E95EDEEDD7958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 15:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:43 +0000
Files and hashes:         1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: dVBLWnGssncrU8FvUA8qUVO0u6458uGcFoj2lNi6ZFc=)
                          2: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=)
                          3: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=)
                          4: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=)
                          5: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=)
                          6: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=)
                          7: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=)
                          8: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=)
                          9: gz-wWIVS2Cz_L1AGWWUUNYNpulg.roa (hash: 85WQbKRe7RSNUw+Vxkm9wdAqfKZR8ED5rSHwiXmN2ss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e8:10:68:59:3b:a7:15:4e:95:ed:ee:dd:79:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
        Validity
            Not Before: Jan 31 15:00:43 2025 GMT
            Not After : Feb  1 15:00:43 2025 GMT
        Subject: CN=266550eaa5ee01cd6fa2563833b8fd4e32f31802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:32:24:2d:aa:2c:24:e6:0b:0c:37:ea:83:
                    c0:5a:22:17:aa:aa:50:66:c6:c0:c1:fe:fe:ac:be:
                    af:ff:07:50:86:16:90:1f:a8:8b:d2:1a:d1:7b:24:
                    ce:ff:9b:68:53:d5:48:a8:bc:35:56:30:70:8f:6c:
                    6a:c3:87:6a:17:1f:d5:d9:2c:8f:f1:ec:2d:34:e6:
                    3d:b5:34:af:88:8b:2b:fa:12:60:12:7a:4e:75:9e:
                    d1:ea:1e:ae:fe:0c:85:75:2f:6c:8a:f1:98:35:20:
                    4c:bf:8d:4b:09:5e:67:0a:0f:59:14:44:f8:8d:79:
                    2f:2d:82:14:02:b2:40:e3:66:d3:c5:4a:91:a6:cb:
                    75:2c:50:b6:00:16:e8:34:cb:8f:fb:cc:b1:cb:7a:
                    7f:0e:b7:38:20:fb:e9:47:25:db:96:f0:b9:45:6a:
                    7c:5e:04:0d:64:c5:22:1b:00:30:a9:6b:4e:e4:06:
                    85:1d:29:69:d9:a6:22:09:f1:5b:6a:fe:b9:48:41:
                    5b:bf:97:a7:f7:ab:c2:ef:9b:91:9d:4a:3c:11:5d:
                    6e:52:fb:1a:79:bb:b9:c1:1e:31:28:4a:83:d5:9b:
                    9a:fd:1c:e8:ec:5f:13:c6:d0:44:cb:26:80:76:96:
                    fb:2e:b4:8f:ef:8a:a2:2a:9c:ab:4c:09:0d:db:03:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:50:EA:A5:EE:01:CD:6F:A2:56:38:33:B8:FD:4E:32:F3:18:02
            X509v3 Authority Key Identifier:
                keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:91:cd:99:aa:d0:db:a8:c0:8a:37:68:d8:f7:5b:f4:c6:0d:
         b1:f4:90:52:6e:e9:9a:24:13:b3:1a:e9:fc:0b:1a:ea:7b:4a:
         6c:75:9e:fc:5d:a3:98:a0:07:da:d1:ac:7d:c0:0f:4b:16:1e:
         ce:e8:6f:df:79:f9:ef:92:10:16:26:86:6b:82:f2:15:7d:55:
         84:d8:bc:0d:b0:22:9b:e3:6d:9d:d7:4c:a4:93:9c:45:21:8e:
         5e:82:66:1f:d5:7c:04:73:49:7d:4a:d2:54:da:2c:6e:8c:26:
         fb:e7:9b:3e:f1:5a:27:2c:f9:25:05:93:0e:44:7f:d8:ad:08:
         d8:18:49:86:2e:cc:a9:ee:22:1e:04:ce:bf:b8:99:92:c9:6b:
         21:89:52:f6:a7:ed:4b:46:25:7f:6c:41:ff:50:3f:d4:aa:56:
         9a:0d:cb:45:af:a3:60:e3:90:0e:ca:35:36:7c:84:30:44:19:
         a8:75:d2:44:13:c0:90:8e:f1:7a:31:93:9a:ba:2a:5c:d8:64:
         d2:aa:e8:2c:9b:ff:06:b5:7d:80:c2:e2:39:22:ab:9a:cb:5b:
         35:65:46:90:15:17:61:6a:fc:ce:77:69:61:ce:aa:c5:12:6b:
         cc:25:c8:ed:b0:62:b5:47:c1:0a:bd:53:39:e9:48:4d:b3:38:
         83:49:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----