Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          K5ImtGgWihClUYlxFKPCW4HHzTaMqJnpqbTY2vJoo3c=
Subject key identifier:   A4:5D:C2:3F:98:0C:F0:E6:E5:B8:92:A4:F2:9C:08:11:F7:53:09:C1
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       0195E19056421BCDCF87A47EF09EFEA1798F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          14CE
Signing time:             Sat 29 Mar 2025 11:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:27 +0000
Files and hashes:         1: 5jwygws2szQICkFAbQDt0DfTE24.roa (hash: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=)
                          2: 8i0pFHh3jLLr_PpCWW1tgeOnNls.roa (hash: zniHfjj60ALgt1todbQ0gmqBBGRN1w6Z180L0gimowg=)
                          3: M-D765qKLa5rpx98GwEizjipWV0.roa (hash: sZVekYH0lnyQrwkjPmHgYKbukfVk03AtK4DNYJI9l9w=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: 9Jsm/Xr3JHQaHJ2lxRt5KNyQViR1lpd+Z5USzFJv3wk=)
                          5: ehgAzBDC5TDJSiS2woTLYA9Z-4E.roa (hash: K6RVhNClpsXwi3nvwOK5VpovbryAZNiXfSXsDcn1PP4=)
                          6: vOfFSwnv08l6OdPeZZK6ruAsY5E.roa (hash: HCrYAQ+7uNSAWRDrRhQ/VN8mpYkiEOW8ifFbRzWfvZA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:56:42:1b:cd:cf:87:a4:7e:f0:9e:fe:a1:79:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Mar 29 11:01:27 2025 GMT
            Not After : Mar 30 11:01:27 2025 GMT
        Subject: CN=a45dc23f980cf0e6e5b892a4f29c0811f75309c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:0d:32:92:a0:10:9a:7d:e4:27:62:58:47:
                    8d:84:25:19:71:b0:ee:fa:06:d1:a0:d2:86:d6:03:
                    1a:5d:23:93:23:67:34:0e:a3:3a:d7:80:cb:60:14:
                    16:a2:de:5a:1d:aa:1b:83:3f:95:da:37:65:4c:86:
                    be:5b:bc:73:0b:1a:a3:d2:53:3c:6e:73:d2:ae:f2:
                    45:39:00:71:d3:57:09:9c:ae:cd:1e:37:dc:a6:22:
                    c1:18:6a:86:c4:0d:f6:90:d4:cd:a7:a6:26:1a:9e:
                    4d:17:4b:72:96:5a:bb:03:e4:7d:7b:ba:89:1d:0e:
                    0f:96:02:0a:20:a5:df:8a:6e:5f:cb:b4:2b:ca:54:
                    bb:06:68:df:cb:78:a8:f5:2b:51:3a:92:fb:2c:bf:
                    7e:f8:1f:cb:19:36:c7:88:2d:c9:1f:e1:9e:81:f5:
                    f6:11:d7:f9:90:17:b2:f6:00:19:60:c3:38:e6:b0:
                    e6:dd:2e:f1:0f:0d:ac:48:86:7c:af:5b:17:51:89:
                    69:ae:39:fe:3b:41:f5:eb:48:d6:d1:ed:6b:70:12:
                    af:4c:5b:62:73:bf:50:02:ef:da:bf:a4:57:b6:3f:
                    11:5d:4f:0d:63:72:db:b2:ba:43:a8:fe:ed:2a:f4:
                    33:13:d3:65:15:3c:ab:ce:09:b3:e2:26:c7:c6:b8:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:C2:3F:98:0C:F0:E6:E5:B8:92:A4:F2:9C:08:11:F7:53:09:C1
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:49:76:b5:9f:36:7f:e7:d6:91:23:42:49:39:f1:b5:7d:
         61:1f:e0:6a:7e:72:5e:d3:ba:08:2b:ae:c1:95:4f:ce:a8:8e:
         58:a2:85:b2:e3:cb:e3:66:29:f4:5d:1b:dd:0b:b2:39:b2:33:
         0a:ce:b3:67:25:ca:c1:a8:8d:37:1f:f2:90:33:ef:67:5e:10:
         b8:a3:54:2a:a0:d6:39:de:93:7d:4a:2d:56:94:da:e6:46:50:
         08:57:27:27:cc:88:c7:4f:1d:44:ae:90:32:fc:fc:d6:80:b2:
         61:2e:a0:00:a9:e0:c2:a2:72:d7:b9:cb:63:4d:ee:b5:f9:29:
         b6:bf:8b:c0:73:b8:b3:fd:ab:c3:21:e3:04:01:99:cc:6f:07:
         12:ac:d5:19:06:44:2f:b2:98:83:27:7b:50:59:f8:ae:5a:d5:
         6b:33:bd:cc:63:85:85:70:79:0a:f9:ee:96:49:5b:bf:2d:cf:
         b0:7a:29:0f:e0:4e:6d:8f:5c:88:4c:fc:66:cc:70:3a:48:7c:
         78:3b:6e:13:f1:79:71:1c:00:a9:4a:de:44:c5:82:b9:f1:36:
         99:25:5d:19:d5:5a:83:fd:eb:80:02:8c:28:71:10:49:97:62:
         49:17:fc:e1:cc:1e:63:6c:ec:b8:7e:21:6d:84:f0:9e:a9:b1:
         71:fa:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----