Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
File:                     GtoiXLfylBbnU0aV-_shdi_uk8g.mft (raw, json)
Hash identifier:          4GKslHZd1CZdzPyzKkbGPTbz1gayy7i7pKc3kmc5lnc=
Subject key identifier:   98:4B:E8:DF:6A:D0:40:1F:3C:DE:E4:1B:50:47:8E:9A:C1:DB:C7:E2
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       0195E00FD6A1B28F48DB35DF700CCD77A73D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
Manifest number:          13C3
Signing time:             Sat 29 Mar 2025 04:01:29 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:29 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:29 +0000
Files and hashes:         1: BbcQvGU97KlhIMtU8cc3f40HL4o.roa (hash: YFs+AANlafd4hYz7NEsI69q2UZVrrdrqMmHZEi1e/6E=)
                          2: GtoiXLfylBbnU0aV-_shdi_uk8g.crl (hash: PDcBYfc0lBjl2o0gSgIE8Ix/y6sdKDtLsYaZq52zES0=)
                          3: H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa (hash: BqYmH/iAX0kcbukEf4yVg0L7f2FSyF2VTeMlZRZQfsw=)
                          4: OVN1KA3X2-427Ts0pRfktqRjpAo.roa (hash: UH/528Nv0M/lj/aSssxhWkEuiRAEztROXljsntpm8LE=)
                          5: YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa (hash: YT0NaWujuK6WDixqbB1Sy+28TuDP8p9GMfj4mjicvuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:d6:a1:b2:8f:48:db:35:df:70:0c:cd:77:a7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Mar 29 04:01:29 2025 GMT
            Not After : Mar 30 04:01:29 2025 GMT
        Subject: CN=984be8df6ad0401f3cdee41b50478e9ac1dbc7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:cd:8a:ef:23:71:39:0d:9e:94:d4:dd:af:
                    c4:19:01:2c:4f:4c:01:96:b4:92:53:ff:f2:f9:5f:
                    80:79:b3:51:16:c5:cd:f8:9c:23:26:55:b7:3c:bf:
                    3c:f0:8b:ec:0d:67:4e:99:8b:de:4e:3d:1f:54:56:
                    ab:55:2c:ff:52:98:b8:49:b8:d9:ba:08:e6:b6:c8:
                    44:2f:d1:cb:b0:39:be:b3:20:a2:a6:ee:57:3d:a0:
                    66:75:ce:aa:01:f7:8a:5b:9e:c0:58:7d:d1:30:02:
                    6c:c5:2d:f3:37:f8:4e:dd:91:ba:b0:fd:cb:6b:77:
                    78:12:f8:5a:c8:9d:c0:58:dc:a3:72:0f:cf:23:1d:
                    88:c4:a5:9c:8e:2e:0f:89:94:50:be:05:53:d5:54:
                    27:e5:9d:8f:1e:6c:3c:65:68:83:3e:f4:8a:c0:80:
                    2a:98:a3:aa:96:f4:71:8a:ac:c3:3b:a2:9e:0b:34:
                    e5:79:6d:57:1b:cb:5f:ef:cc:42:0b:1b:41:66:31:
                    0e:8c:dc:fe:7d:41:fe:1a:f8:e8:a2:23:d9:d5:b3:
                    61:ff:35:c5:bc:15:b2:d3:24:07:f3:88:3b:1b:04:
                    34:58:14:4a:ac:3c:ab:ff:1b:73:78:04:ee:6c:92:
                    d8:95:93:3b:1a:62:e1:6c:d1:cf:38:64:6c:ab:e3:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:E8:DF:6A:D0:40:1F:3C:DE:E4:1B:50:47:8E:9A:C1:DB:C7:E2
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:50:38:7a:e6:bd:92:81:f0:ad:78:11:45:e4:89:15:8d:98:
         9e:fd:96:2d:41:03:c2:6f:bf:d9:91:b9:b9:fe:c5:83:09:28:
         aa:6b:c3:8d:18:70:8a:fb:24:75:be:54:bd:ca:8c:29:82:ba:
         1d:5e:c4:7b:f7:9b:7c:18:0e:38:ee:65:e3:0e:ab:86:bb:39:
         c3:93:8c:b7:6d:2a:9b:c7:57:bb:94:8e:8a:86:21:3d:c6:f3:
         48:84:0a:71:38:b7:60:33:74:38:84:1a:18:01:39:c2:13:b1:
         33:7b:ab:1a:05:d4:72:2b:da:44:00:83:c5:95:60:06:7c:1a:
         8e:61:d3:25:06:9a:e6:3a:7c:81:b1:34:1c:4b:db:68:19:8e:
         06:c8:f7:e9:56:97:fd:be:ea:72:53:36:8f:49:a8:84:17:b2:
         4b:70:62:e9:a6:e9:81:44:19:95:01:cd:0a:25:ff:0f:38:9e:
         33:31:0d:7b:36:06:39:d5:2a:26:ab:37:57:62:ed:ce:06:b2:
         71:b6:3d:87:a9:94:fb:1c:c1:ff:e6:20:a5:f7:59:15:2a:05:
         c0:e9:b6:b8:f1:fd:15:b8:bc:2e:12:1f:03:c9:c5:d1:e1:62:
         bb:c6:ca:a4:19:b0:17:77:ed:61:74:b6:bc:63:0b:be:4d:da:
         fc:07:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----