Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          I2cles0bJCgVsCPpCFVubl53ycBodFVzXpsm0FHBscA=
Subject key identifier:   2A:2E:D8:6A:43:C9:FD:82:FF:4E:A1:C4:15:3F:48:BD:FD:E2:4F:F5
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       0195E122348AD8E5097BD15C421A2E826137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          0EC5
Signing time:             Sat 29 Mar 2025 09:01:10 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:10 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:10 +0000
Files and hashes:         1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
                          2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: 6JFwot8gtjqbK4hkN8+rawqniM2AbeMzR7jtMzwCCDQ=)
                          3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
                          4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
                          5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:34:8a:d8:e5:09:7b:d1:5c:42:1a:2e:82:61:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Mar 29 09:01:10 2025 GMT
            Not After : Mar 30 09:01:10 2025 GMT
        Subject: CN=2a2ed86a43c9fd82ff4ea1c4153f48bdfde24ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:92:22:6a:00:38:a5:9b:d3:88:02:ee:d9:
                    ec:6b:11:ca:d5:89:78:af:8a:3d:5f:4d:ad:09:0e:
                    f6:2a:85:c6:e4:05:dc:c7:db:bb:e2:57:b9:48:04:
                    a3:f8:5d:35:fd:ec:c5:07:f6:5b:93:2a:54:df:06:
                    18:18:53:c5:6f:28:bd:7d:c7:e4:7c:ea:85:80:8c:
                    27:3a:d1:13:ec:cc:3b:e0:5c:5e:a8:9d:30:83:86:
                    7f:d4:c9:17:1b:88:92:61:d6:ba:7f:b2:a0:79:4f:
                    be:7a:68:c8:61:57:ee:47:cf:37:5e:49:6d:0e:da:
                    6f:bf:c9:4f:15:a8:cc:d9:84:a1:2e:3e:1d:45:b4:
                    69:a4:9b:f8:8c:06:d5:9e:78:e2:fb:a6:60:ad:05:
                    91:10:96:fe:0d:78:35:4e:75:3d:57:23:19:2e:bd:
                    2d:53:93:13:fa:e3:b0:1c:dc:5c:98:9e:00:f2:7e:
                    8d:82:31:1a:1b:df:b7:fe:4d:c6:ba:e9:a0:99:35:
                    e0:77:c7:00:e4:12:88:b1:ec:95:ff:f7:06:39:0e:
                    c6:b3:2b:6c:b4:53:0b:b3:6b:a9:bd:8c:41:2e:a2:
                    f5:17:85:bd:b2:07:60:4f:58:66:c1:e8:ca:23:c3:
                    4e:22:ba:08:5e:2d:59:00:d7:dc:9a:4d:c4:1d:14:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2E:D8:6A:43:C9:FD:82:FF:4E:A1:C4:15:3F:48:BD:FD:E2:4F:F5
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:57:42:dc:84:59:38:cd:a7:63:95:e4:25:15:11:01:e4:
         9c:2c:05:20:a8:cd:a8:53:66:d3:b7:15:f4:eb:60:27:84:ec:
         65:7c:0e:ea:ad:2a:3e:c0:c6:4e:7c:64:67:d1:76:ac:4d:be:
         88:94:f9:1b:54:9f:bf:68:b8:2e:cc:03:a2:71:15:2f:a9:30:
         c4:79:04:c7:d7:bf:c2:14:6e:73:2b:ab:ba:83:36:77:91:11:
         0f:de:d3:6f:84:49:b7:4e:59:7e:73:9a:04:09:fb:1e:c4:f8:
         82:8d:1e:a3:fe:b8:1b:10:a4:52:88:e0:f9:09:bd:bb:d6:01:
         ef:41:70:cf:e3:d1:5c:62:69:2b:c1:44:ea:6a:f1:40:63:af:
         12:60:01:67:61:33:ae:5b:82:f2:c1:b2:1d:e4:93:21:da:81:
         37:f4:aa:5d:d7:d8:99:57:04:54:56:14:f7:1f:f1:59:aa:24:
         af:f1:eb:2e:44:68:0c:fe:f2:df:7e:5f:04:b4:46:93:21:07:
         bb:a2:b1:a2:ec:b2:e0:d3:d1:3c:17:45:f1:1b:6e:40:28:1c:
         18:4b:a3:43:4a:8e:66:52:cd:f6:64:24:51:46:1b:af:be:2b:
         4e:0b:4c:2d:48:b6:c8:0b:1d:4e:60:0d:b4:d4:76:ca:8a:8c:
         96:1b:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----