Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
File:                     XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json)
Hash identifier:          7Jaqn1pWbRodHUR2CofnREgK4F63d1CEI1uWgbcsojU=
Subject key identifier:   BA:5D:E4:7D:E2:38:EF:38:76:CB:AD:EA:F4:F3:BB:5E:98:F0:B1:37
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       0195E0EB75486FB4D82F0558FDC5AC18E061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
Manifest number:          1216
Signing time:             Sat 29 Mar 2025 08:01:21 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:21 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:21 +0000
Files and hashes:         1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=)
                          2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=)
                          3: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=)
                          4: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=)
                          5: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=)
                          6: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=)
                          7: JRsS63OEIg-RDEt77cmLzheKteg.roa (hash: 6PR4Cpk+9BkN+AncsoVUiTEwpS1IqPFK3JqRVNAKG/Q=)
                          8: Jy2dzojQmDDHrT1ZglR62KXl9KE.roa (hash: 9d9Gsb0ep9phZqm2SLYU7Tj/IcHV8fHdUCwzejsx/PY=)
                          9: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=)
                          10: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: j2U3eet1Dlk8TavvemYjxtPIdkJBROLUalGy9DKLi30=)
                          11: bYPfKSp3uay7u1IBGQCfz9PB7s8.roa (hash: cQdCPGlvEZyuveyWWb2XndmUwLnId4QzQGpaXozykOM=)
                          12: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=)
                          13: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=)
                          14: kFVkpx97TB72EKQ4ruzAfgCkmLQ.roa (hash: 1FA9Vl6Gc5MRJ5uyClcUL5q5Uvzb9XvC2S9BIvyjxzc=)
                          15: u1fx_e153PBDwPgyvx0qhpf_7-c.roa (hash: rIfGEdBSwuolAjKZu/D3tV9dA5ieH7tsIwRBMyCCMhA=)
                          16: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=)
                          17: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=)
                          18: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:75:48:6f:b4:d8:2f:05:58:fd:c5:ac:18:e0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Mar 29 08:01:21 2025 GMT
            Not After : Mar 30 08:01:21 2025 GMT
        Subject: CN=ba5de47de238ef3876cbadeaf4f3bb5e98f0b137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:d8:4d:39:3b:9f:f7:ab:93:de:5d:ae:89:
                    9a:f8:81:00:7f:50:fd:c0:3c:04:8e:a3:c7:02:59:
                    35:dc:6e:9c:f4:71:95:e4:bc:8b:7e:d9:47:68:84:
                    fd:05:4f:61:40:b9:d1:3f:92:d4:f3:a3:df:fd:38:
                    fc:c3:f5:41:d0:bd:e2:66:95:51:b0:be:e2:72:ae:
                    de:25:d0:1d:1d:5b:66:af:95:26:b2:ff:c7:84:ce:
                    29:cb:2a:c9:f7:89:ea:af:54:8e:9e:df:eb:ae:df:
                    e2:6b:f3:db:a5:96:23:99:fc:39:62:ac:7d:b2:6f:
                    90:ca:be:42:7e:38:c5:ca:b6:23:64:aa:1d:9a:2e:
                    0c:38:45:be:ba:e2:e5:65:ec:d0:6b:9b:da:ae:e6:
                    c5:26:ab:b4:15:b3:97:52:d3:2d:7d:54:ee:a5:5d:
                    f9:4f:8b:91:3a:a6:4f:11:20:92:32:4b:db:b2:28:
                    95:11:d2:36:0d:ed:a4:fb:6c:91:79:78:e4:4a:e2:
                    82:52:99:93:68:7c:7b:9f:bc:d7:22:e8:46:72:b1:
                    a9:f7:73:55:cf:f7:90:17:e6:9a:02:3b:16:17:9a:
                    76:e0:76:3a:7a:97:bd:2e:5e:d5:d3:a2:c6:5f:a7:
                    6b:ec:aa:9b:c5:70:9e:d1:89:83:98:5a:04:ee:a6:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:E4:7D:E2:38:EF:38:76:CB:AD:EA:F4:F3:BB:5E:98:F0:B1:37
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:33:e0:96:74:64:f7:69:2d:07:fd:30:34:d8:dc:ed:a0:66:
         1b:8a:f4:0d:5a:64:7d:16:7e:d4:31:f4:33:3c:37:d5:d0:7e:
         f9:95:6e:dd:8c:78:6e:4b:cc:e0:42:55:f1:2e:a8:9a:32:4a:
         d8:01:b8:cb:76:47:c9:20:d2:3e:a0:da:c1:b4:e5:55:f5:8a:
         61:fa:e4:a4:7c:7b:01:38:35:1e:c4:5f:2a:be:fc:29:f6:67:
         91:1e:f0:3d:7a:77:f8:d7:8f:05:c1:e6:1f:a7:9f:0e:7e:f0:
         67:5d:79:89:a8:3e:e0:67:0a:b4:01:37:6e:b0:34:be:2e:bc:
         34:6c:10:0e:ef:03:ba:03:2a:38:c7:8f:00:31:2f:26:59:43:
         e4:a5:da:eb:f6:e0:03:81:bf:26:db:4d:8b:dc:46:a8:71:98:
         04:4b:ca:82:d0:d0:0e:bf:8c:bc:db:1e:2c:60:71:cc:4c:c4:
         37:5f:df:ff:1c:c9:e8:69:9e:bb:3d:d1:ac:b9:e1:1c:36:8a:
         80:94:31:d4:e8:22:6f:01:45:8a:84:86:bd:71:d8:9a:fe:43:
         98:1a:4d:e8:69:cd:68:54:97:f7:4d:21:c1:4e:a3:07:42:63:
         58:23:58:14:d9:b4:11:e4:8c:45:f9:bf:d8:5d:4c:71:a4:61:
         cb:85:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----