Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
File:                     2cm69G1slNJ84SjaO2W1o7Bts4s.mft (raw, json)
Hash identifier:          6fo6LwKkASQogxg7bOcgHfDkPv7v+MK7N3MSeH1fvW4=
Subject key identifier:   F4:A2:E1:6D:1C:E4:97:E3:6E:28:8A:66:77:B6:14:71:74:89:76:AD
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Certificate issuer:       /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial:       01979B96F053D731BB2D83A83CBE70088693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
Manifest number:          10A2
Signing time:             Mon 23 Jun 2025 07:00:49 +0000
Manifest this update:     Mon 23 Jun 2025 07:00:49 +0000
Manifest next update:     Tue 24 Jun 2025 07:00:49 +0000
Files and hashes:         1: 1ayWqykxA3-0oHXdVMDTjw-enG8.roa (hash: 80z6vUfHJXcetEFvuCm8sGrawk5cVXzDkmIiJ5nDjeQ=)
                          2: 2cm69G1slNJ84SjaO2W1o7Bts4s.crl (hash: 0xobtDLxw35DCAw0LA4Kspfkc1zmcHdDsuTEm+LdyMs=)
                          3: 6O3mGfQdkxk3pNZnhn2v_SudIJk.roa (hash: wnpJuyItibM09bhYmpcnxUtBt0pZ5yqi3ijea2io2f4=)
                          4: BlMPV4TbFy0S3lLdYLP0zmdpvf4.roa (hash: FX2tFGx6ls8P2UDOzXsC/mVC7xk+xWljqYmpj+Cau/U=)
                          5: c4p_BLGDdzUFuqYC6ja2kzX9b0I.roa (hash: dXosFZE0EOcrP/UCssuaodno9goL3jWbyQg+dVTcJCQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:96:f0:53:d7:31:bb:2d:83:a8:3c:be:70:08:86:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
        Validity
            Not Before: Jun 23 07:00:49 2025 GMT
            Not After : Jun 24 07:00:49 2025 GMT
        Subject: CN=f4a2e16d1ce497e36e288a6677b61471748976ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:df:9d:f5:fe:d5:65:6b:3d:66:24:bf:ac:
                    52:85:8e:de:30:1c:8f:3f:21:68:20:28:34:36:97:
                    2b:df:75:87:33:7b:20:6d:02:b3:e3:4e:12:42:dc:
                    e1:45:73:d2:74:21:c3:fd:dc:91:dd:7a:0d:e9:ff:
                    d0:97:20:cc:03:3d:92:dc:44:78:d5:68:32:8d:8d:
                    12:34:b1:c1:9e:73:d4:23:e9:eb:41:d8:32:43:a6:
                    c9:64:29:f4:f5:37:a6:91:9a:33:8b:9e:09:66:89:
                    22:94:ee:79:83:1a:18:3a:eb:85:51:4b:48:b0:58:
                    e5:b2:85:5b:be:a6:f5:12:bf:54:9f:83:d9:aa:7d:
                    99:3a:61:f2:5e:f4:1a:ee:a9:f0:9e:5d:20:89:01:
                    17:d0:01:d5:38:84:36:b9:36:a8:1d:42:d0:07:43:
                    a4:e9:c2:18:2d:c3:1f:82:93:9d:8b:0c:9e:bc:d9:
                    cd:33:ff:ef:69:2f:4c:00:90:19:b3:90:5e:09:25:
                    97:3b:6d:60:5c:96:cd:f4:3c:97:2f:1e:8f:d2:b0:
                    33:cd:71:6b:09:eb:54:87:7a:69:7f:3e:5c:6c:73:
                    d9:b5:53:99:f4:02:b7:63:be:d4:78:f8:5b:4a:bf:
                    cb:d6:5a:f8:7f:2c:55:5b:f9:3d:e6:19:80:6a:a6:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:E1:6D:1C:E4:97:E3:6E:28:8A:66:77:B6:14:71:74:89:76:AD
            X509v3 Authority Key Identifier:
                keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:54:f9:c8:c8:d7:57:6f:89:6f:b1:c9:09:5b:82:58:24:05:
         bf:8f:ee:43:92:23:8e:8c:1d:04:2e:46:33:5f:5f:7b:11:d9:
         23:6f:7e:51:01:9f:fc:5c:b6:2a:9a:69:e7:48:cc:5c:97:9c:
         03:13:b0:fb:04:82:02:df:77:12:86:88:60:96:28:bf:4b:4b:
         b2:5f:2e:b9:d3:83:d0:35:ca:61:ab:a4:d1:6e:28:30:0c:cf:
         cf:27:72:95:c2:ff:70:e3:64:e0:ab:b8:e7:ed:60:fa:2d:4b:
         f4:ef:99:50:c6:6e:0c:fe:09:5a:86:2f:7b:21:4a:ce:2b:ce:
         f8:07:19:96:eb:bb:41:35:83:53:ea:48:fe:08:67:93:b8:54:
         e1:ce:70:82:92:75:19:90:f7:d8:68:b0:eb:0c:5a:45:da:24:
         cd:53:24:e1:ff:1f:7b:65:59:33:4d:bc:4c:b7:13:b8:f7:09:
         85:92:6f:fb:ae:39:94:69:77:af:c4:84:5d:45:80:11:d0:c2:
         c9:b4:9c:54:a8:42:ae:b1:0f:e2:94:80:2c:b3:68:5d:e8:79:
         b3:f2:04:17:a5:51:25:26:a7:82:b1:5c:0a:fc:68:88:97:c8:
         47:33:84:bb:ab:4e:81:ff:13:15:99:21:5b:24:d0:cd:19:69:
         0b:01:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----