Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File:                     diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier:          Mk2Ov2anX2QnemIaCiIN58CvXl4UoXVpvfH4WYCzSGs=
Subject key identifier:   15:4F:54:01:EA:38:FE:B1:64:ED:48:4F:76:5A:33:61:C3:68:21:08
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer:       /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial:       0195E0EB5BFD9ABD03519C8F67FEFA487A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number:          0FC1
Signing time:             Sat 29 Mar 2025 08:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:15 +0000
Files and hashes:         1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
                          2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
                          3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
                          4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: 45GR676Zyr2fbmBWGXBJtk1jssO9GQwqc03TPwD2RBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:5b:fd:9a:bd:03:51:9c:8f:67:fe:fa:48:7a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
        Validity
            Not Before: Mar 29 08:01:15 2025 GMT
            Not After : Mar 30 08:01:15 2025 GMT
        Subject: CN=154f5401ea38feb164ed484f765a3361c3682108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:1a:ea:bd:c1:8a:60:37:c6:46:e6:aa:d8:
                    eb:f3:c9:af:f4:78:65:ab:47:b5:25:35:03:16:16:
                    32:2d:8e:e1:19:ca:1e:5d:16:32:66:c6:a5:06:b7:
                    40:00:c6:95:67:12:27:10:2e:e2:83:3a:7d:91:d5:
                    34:2f:44:00:61:89:ae:4b:f0:bc:1c:e1:8d:f9:d0:
                    49:b8:e1:15:8d:3e:45:6e:92:13:9b:02:fd:fd:96:
                    1d:fc:ac:80:8f:9d:72:90:0a:4d:e2:a1:f8:e4:f0:
                    5b:e9:49:02:15:fb:dd:69:d3:cf:1f:fd:af:9c:b9:
                    6f:18:8e:f2:ce:6d:04:ab:df:63:cf:6b:e0:ee:be:
                    1d:bd:bf:f6:a8:41:75:c6:91:92:fe:34:fa:50:7f:
                    39:8d:11:61:68:42:33:c3:b4:1c:3f:36:57:a1:2e:
                    66:d2:17:fe:7a:2e:22:0d:db:4c:b8:0e:7c:39:43:
                    b1:54:d0:89:05:f7:46:b9:69:bd:62:8f:f0:e9:b2:
                    ff:96:86:c8:c6:37:fc:ac:3b:f2:50:b7:5e:01:54:
                    99:7e:cd:d6:65:ab:2b:0c:d8:8d:3b:d0:34:1a:55:
                    ed:74:61:dd:cd:f7:24:bb:84:d3:bb:51:02:3a:fc:
                    90:df:5f:eb:14:46:4e:65:12:1b:fc:98:60:ad:5e:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:54:01:EA:38:FE:B1:64:ED:48:4F:76:5A:33:61:C3:68:21:08
            X509v3 Authority Key Identifier:
                keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:c2:44:12:b0:e5:91:0e:56:92:fd:fa:fa:c2:01:26:5f:
         3a:5e:1b:8b:75:75:cd:84:52:2a:d8:41:db:ea:21:bd:08:fa:
         51:53:07:c1:d2:94:95:ac:b1:91:6e:8c:9f:c8:15:7d:6d:a3:
         16:a5:90:7c:7a:25:09:e6:57:76:1e:2f:a9:3a:23:b3:04:6e:
         d8:1c:4c:c4:b8:fd:31:1f:5f:f8:ed:1a:75:af:fb:0c:bf:4b:
         ef:8b:0c:b6:86:21:2e:3e:14:73:69:91:09:dc:31:67:8f:01:
         b8:ca:42:0a:86:22:f6:8b:38:03:8a:f2:0b:19:3c:bd:3c:77:
         83:e3:20:51:9c:f7:24:15:70:e2:19:a3:f0:a7:1d:2b:06:b3:
         e9:a4:b3:64:f1:3d:f4:c7:5c:10:64:32:d3:62:ab:89:79:7d:
         b5:cd:c1:64:f6:bc:c7:a2:5c:b8:d5:22:5c:d3:4e:bb:9f:58:
         d0:6c:55:c6:86:40:00:45:c3:02:88:a6:ab:8f:b3:7d:65:d0:
         78:7b:db:6f:7b:88:45:79:ad:11:15:ab:87:9b:ce:88:e9:19:
         12:96:42:85:40:cb:ab:c3:0e:92:7e:91:cd:2b:24:b3:aa:6d:
         47:dc:55:9e:96:00:cd:4d:b1:27:8b:9b:01:30:f4:7a:fd:8f:
         96:ef:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----