Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File:                     PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier:          VHJvsImcwXqdllp4Ye6ti6wL2qyU5baCZBZjAlRhGGk=
Subject key identifier:   C2:3C:B6:28:BE:C6:EA:68:B9:5C:69:72:0B:69:CA:E7:7D:53:BB:75
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer:       /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial:       0194BCAA2C9C5C4C67FCA9BCA63BEB6B19A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number:          85
Signing time:             Fri 31 Jan 2025 14:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:56 +0000
Files and hashes:         1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
                          2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
                          3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
                          4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
                          5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
                          6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: Ys+YFtjs7s7sYLSCjUdCUMnQUQ0vIT/l5la1pxVuC4I=)
                          7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
                          8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:2c:9c:5c:4c:67:fc:a9:bc:a6:3b:eb:6b:19:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
        Validity
            Not Before: Jan 31 14:00:56 2025 GMT
            Not After : Feb  1 14:00:56 2025 GMT
        Subject: CN=c23cb628bec6ea68b95c69720b69cae77d53bb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:3a:b8:2e:57:7f:11:90:87:ba:68:bb:1b:
                    37:b8:6e:b3:30:a9:15:87:d2:46:85:db:6e:23:95:
                    4f:2f:79:93:fc:26:a4:17:60:2c:73:6a:26:ee:b0:
                    ab:3d:bb:8d:c3:da:d2:9f:15:c1:e4:f6:a3:b1:db:
                    de:9d:5b:c1:1d:5a:75:6c:3c:30:14:61:60:f9:1d:
                    ff:3e:ae:62:44:e4:85:f4:09:f6:94:b4:74:38:5d:
                    24:98:52:53:f1:d7:b5:de:58:40:74:0d:ba:bf:54:
                    83:36:63:5b:3b:7e:85:b8:db:5a:a7:6e:46:3b:91:
                    2a:44:ed:1d:ec:c1:96:2d:e3:63:70:db:18:1d:a2:
                    fb:fc:65:8b:5d:d1:cc:b0:52:44:af:a1:04:e6:95:
                    6a:cf:da:b3:50:37:8a:f7:b8:a1:4b:84:32:44:eb:
                    c3:da:b4:94:d6:3b:6a:79:1f:20:32:61:20:01:fc:
                    38:db:e2:16:5f:a8:29:98:be:65:e8:53:da:75:22:
                    d1:74:37:48:3a:d0:66:f6:26:07:e9:be:4b:f3:8b:
                    43:61:c6:35:76:dc:97:2c:56:55:d1:e0:7a:9d:be:
                    5e:16:4b:d1:1a:bc:8d:53:cc:b9:eb:9d:b9:ed:73:
                    c3:aa:40:0f:48:c6:7f:a6:d9:f7:92:24:1e:10:03:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3C:B6:28:BE:C6:EA:68:B9:5C:69:72:0B:69:CA:E7:7D:53:BB:75
            X509v3 Authority Key Identifier:
                keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3b:fb:bd:5a:4a:78:06:82:56:cc:bc:a0:8f:4c:6f:ee:3f:
         e2:bb:e2:08:8f:4e:b2:7b:bf:03:35:2a:75:55:e5:61:d8:90:
         74:b2:df:82:f5:70:89:c6:1d:f7:62:7b:62:14:99:94:7f:0e:
         09:b6:74:dd:3e:19:01:3b:a7:db:27:2d:ef:1e:11:ff:a0:96:
         e3:bf:67:d8:cb:97:fe:67:56:a6:fd:e2:52:f4:09:08:b2:0a:
         62:09:1b:f1:73:40:46:4e:2f:43:4e:f2:27:d5:81:50:9d:3e:
         03:c6:c0:3b:63:5f:3b:20:4d:a7:7f:42:4a:96:8b:24:45:47:
         a2:09:7c:8e:2e:d4:f7:9a:a7:aa:4e:c9:82:56:60:71:bf:21:
         7b:26:cc:b2:9f:1f:e6:06:6e:98:41:1c:ac:8f:a9:c4:2a:aa:
         1f:66:f9:02:aa:73:64:27:7d:c1:f5:7a:08:73:f4:38:b6:dd:
         3d:91:44:9d:2a:95:1c:98:f2:49:7a:ec:16:19:86:d8:85:e1:
         11:01:0d:85:5f:35:7b:a3:78:01:af:00:02:83:4d:00:32:9d:
         ac:20:27:b0:49:02:1a:fc:29:8a:3e:e9:62:22:6e:c1:35:90:
         87:e9:95:af:95:55:cb:1d:cd:45:e8:2c:dd:ac:b2:d9:17:40:
         68:a5:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----