Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File:                     O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier:          UREwfdOi9cicyZjP6Btin6euJ/VXulIRKljedtI89kw=
Subject key identifier:   3E:95:C1:53:FD:59:2B:E6:12:F7:BA:44:3D:4E:4F:55:2D:84:37:9E
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer:       /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial:       0195E121EA84A621BA2E87ED326C03113E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number:          0A4E
Signing time:             Sat 29 Mar 2025 09:00:51 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:51 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:51 +0000
Files and hashes:         1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
                          2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
                          3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: gZeHrFb7O4aILWSB+WTHIhb4KrfE3TecrgNp+2iqGOo=)
                          4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:21:ea:84:a6:21:ba:2e:87:ed:32:6c:03:11:3e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
        Validity
            Not Before: Mar 29 09:00:51 2025 GMT
            Not After : Mar 30 09:00:51 2025 GMT
        Subject: CN=3e95c153fd592be612f7ba443d4e4f552d84379e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:c7:fa:ae:b5:e0:78:d1:fa:a1:14:4a:80:
                    0d:c1:54:36:1c:1f:d2:6c:8b:6a:32:fb:ee:05:ca:
                    67:9d:49:b7:ac:e9:86:f4:af:8e:4e:b7:b9:a0:de:
                    29:65:97:74:80:71:14:8e:8d:15:ef:65:90:21:49:
                    51:40:da:08:eb:e4:fb:02:d0:19:db:6e:c2:f0:e8:
                    1b:43:32:57:45:92:1d:1d:35:a7:d8:37:f0:36:28:
                    4a:eb:fe:20:51:c9:f2:33:0e:da:ec:67:72:90:18:
                    d0:aa:5d:7b:7f:f8:31:1e:3e:08:36:5a:86:dd:cb:
                    2e:b8:3a:aa:82:eb:f4:f4:06:ec:61:9e:80:df:f9:
                    76:cc:5f:b3:98:de:36:43:27:2d:d9:de:27:dc:0a:
                    23:f4:61:39:50:c2:05:58:be:ef:a9:77:b8:6f:19:
                    af:3a:25:1d:4a:71:54:0c:a1:a3:50:ee:c6:83:40:
                    75:95:48:e5:56:32:f5:5b:e8:f6:ea:3f:47:7c:cc:
                    13:15:77:6d:e8:5c:bb:29:ed:87:23:8c:e4:f6:29:
                    42:ef:20:83:6a:c0:ee:7c:ae:c0:1c:da:86:2d:68:
                    58:02:47:36:f7:c6:ef:4f:00:a1:fa:75:2e:d4:d6:
                    0b:fe:4a:18:38:44:f7:c5:9d:c0:73:e1:d2:69:c1:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:C1:53:FD:59:2B:E6:12:F7:BA:44:3D:4E:4F:55:2D:84:37:9E
            X509v3 Authority Key Identifier:
                keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:91:5d:f8:b2:b4:14:18:0d:c5:68:56:2d:bd:fa:7d:c0:67:
         09:d9:dd:62:48:db:ca:d3:c8:29:a1:38:e9:6f:e1:53:19:98:
         55:9c:17:cb:22:eb:21:c5:94:7b:04:a0:9c:7f:2f:4e:f4:17:
         ab:4c:8a:98:c4:8c:5b:a8:f1:b9:42:f5:aa:3d:cf:48:44:49:
         71:77:54:48:53:ca:58:73:06:77:94:0b:3b:aa:7e:85:54:98:
         92:94:c9:b1:90:30:3e:b2:ac:43:7a:25:95:b0:70:dc:97:ab:
         13:4a:91:f4:c0:03:8a:d7:67:0b:40:b4:86:e2:a2:37:9b:04:
         42:cc:e4:94:04:15:c7:19:d7:a4:ac:4c:0a:86:fa:b1:4b:f8:
         e8:22:cf:14:d7:03:82:2f:6d:d7:87:ae:e0:67:5b:6c:1b:9e:
         ee:bf:9d:be:51:28:55:94:3c:4b:cd:c0:21:35:3a:ff:84:dc:
         2b:99:c9:66:30:f7:ca:39:1e:0b:64:57:4d:82:4a:a4:bf:4f:
         d8:db:61:c9:83:9c:cf:fb:73:a2:09:ed:d0:cb:4c:5c:23:6b:
         a4:99:14:b6:ba:16:84:14:d7:c8:ca:ba:15:8b:c8:c9:f9:b8:
         17:42:06:a1:ef:21:d4:8f:eb:ce:60:08:af:4b:3d:13:47:1a:
         ee:d2:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----