Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          MWrfcTTdLH/3DpX3vNAa/gm7XKqrFsoFaJdHeSg9Zo8=
Subject key identifier:   1E:57:69:D3:89:67:A7:19:5B:D2:1D:F9:26:50:53:03:53:39:56:F8
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       0195E0B44B2AE66B083237A61D3375B4EFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 07:01:06 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:06 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:06 +0000
Files and hashes:         1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
                          2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
                          3: i6VRDQdIil0CjvQd057rABtr9kE.roa (hash: sn7kvKyr4NofwuxW4yXFFyr4t+Wfqf9Hgohjb3PA8yY=)
                          4: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
                          5: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
                          6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: Z9JJz24eDmReVMuL40W5OzBvLtArPmxg8ZmV6BiV8j0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:4b:2a:e6:6b:08:32:37:a6:1d:33:75:b4:ef:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Mar 29 07:01:06 2025 GMT
            Not After : Mar 30 07:01:06 2025 GMT
        Subject: CN=1e5769d38967a7195bd21df926505303533956f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:98:40:a6:12:5b:20:91:0f:b8:d9:89:34:
                    3a:96:fa:9e:73:83:df:ec:6e:e0:95:53:52:3d:b8:
                    87:6c:93:dd:74:f0:c9:07:04:47:d4:f8:bc:dc:ee:
                    5b:2b:89:7b:a8:4a:2a:59:3b:17:eb:6c:f0:3e:e6:
                    a5:62:41:68:f0:d5:bd:82:c7:fc:2d:80:17:a6:3b:
                    8c:ae:33:d7:f5:06:68:c0:79:51:26:8f:ea:6f:96:
                    e2:88:5e:6d:25:3a:c2:71:96:77:37:24:aa:5e:ee:
                    85:02:e2:12:fc:b3:29:5b:3c:6c:05:5d:c8:df:80:
                    db:ce:fb:fb:90:26:57:75:1d:31:f3:86:c2:c9:37:
                    03:66:f7:4a:a2:b5:b2:8d:5b:dd:7f:6b:c3:c8:d0:
                    26:d2:29:ad:b2:1e:d1:e2:d1:47:c4:0c:b8:ac:8b:
                    ec:80:9f:cc:63:ed:18:e5:ee:0e:b8:53:37:6a:91:
                    13:ac:d8:ab:c4:92:54:1a:9a:fb:1b:87:9c:dd:bf:
                    42:46:a5:8d:35:79:c4:28:a0:bb:13:2b:36:1f:f9:
                    a4:0f:cf:3b:63:51:66:9f:72:e6:f9:d6:8f:94:f7:
                    61:2e:9d:74:b9:5b:59:bc:b1:4a:a3:30:fd:27:28:
                    47:d8:86:ae:cd:86:ac:9b:7e:fe:e2:0d:cf:f6:b9:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:57:69:D3:89:67:A7:19:5B:D2:1D:F9:26:50:53:03:53:39:56:F8
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:1a:8d:c2:3b:a4:17:a8:bc:d0:37:a2:3d:cc:12:9b:89:
         df:2c:14:d0:78:85:d1:00:01:d3:3a:04:82:25:f9:b7:c4:42:
         1f:dc:b1:43:a9:22:79:3a:17:24:00:d3:91:45:6d:3b:74:5f:
         02:f1:b9:f4:41:d0:16:02:8a:80:32:40:f9:e9:d4:1e:75:85:
         93:b9:aa:67:8b:3b:15:c2:73:33:a3:3e:0f:a9:a9:d4:e9:2f:
         59:ed:eb:41:42:79:8a:ec:75:e1:fe:ba:99:55:ae:c8:c6:b3:
         df:16:11:3a:d5:a3:19:28:99:e5:e7:81:eb:38:d0:58:84:94:
         8b:31:da:90:f7:2f:b5:fa:5e:ed:35:27:33:07:3b:0b:96:75:
         6a:0f:17:a4:dc:89:5a:49:cf:99:09:7b:a7:e0:24:9d:90:6f:
         54:95:41:90:31:cb:be:62:c1:23:97:01:cd:c5:1a:7b:cf:bc:
         93:d5:36:6a:13:40:67:c7:1b:b4:8f:e3:2f:90:04:f7:72:5d:
         0a:65:68:c0:9e:4a:14:b0:5b:a4:f7:b4:6a:29:fc:b4:1b:ef:
         c4:b8:4d:e7:4c:7b:da:73:50:df:5f:c7:02:f8:17:63:22:d3:
         aa:7e:50:7c:74:2c:18:93:2b:4c:7c:28:17:d1:f8:7d:28:28:
         f9:31:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----