Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          yXvgtpzUEIee+u2n3JUzKr2U2RLakchWDg0bmPGdSG0=
Subject key identifier:   B1:62:09:D3:EC:AE:15:93:D1:89:50:5A:49:20:B0:85:44:E6:40:19
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       0195E00F8450826FBB7AC3DB58722A6A7339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 04:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:07 +0000
Files and hashes:         1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=)
                          2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=)
                          3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=)
                          4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=)
                          5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=)
                          6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: 1dHy43RkW3Bcr1K55hbuJ0IzSr25mmi0wg035n+ZFdw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:84:50:82:6f:bb:7a:c3:db:58:72:2a:6a:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Mar 29 04:01:07 2025 GMT
            Not After : Mar 30 04:01:07 2025 GMT
        Subject: CN=b16209d3ecae1593d189505a4920b08544e64019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:8d:90:86:c7:19:d2:dc:a7:90:42:ff:8a:
                    de:88:8c:c6:ff:9f:d4:cd:fb:55:2b:4a:26:c6:fb:
                    2f:3a:f7:78:d4:df:94:69:30:ac:69:a0:31:50:16:
                    74:5c:38:9d:b1:04:52:f6:23:cc:4d:4d:65:60:83:
                    94:a0:05:fd:7f:9b:fd:d8:6d:4e:37:30:b9:9f:b3:
                    43:14:bf:91:82:90:06:73:0b:c6:0d:af:b3:61:0f:
                    68:58:6b:6c:48:44:05:9d:83:06:75:ac:34:bf:44:
                    36:6b:a4:de:ce:e1:c1:6f:ef:b0:20:ee:1d:13:5b:
                    b6:40:25:c2:a4:96:ff:b4:dc:2b:f2:b4:02:bf:99:
                    42:9d:15:4f:61:7a:8f:c6:41:5d:58:05:f4:bb:84:
                    bd:6b:b6:ed:1a:ed:af:fc:ee:ed:d1:77:2f:72:38:
                    1c:c0:50:9c:ee:a1:3c:8a:c0:5c:95:2f:ec:6a:4a:
                    43:52:96:94:ac:be:86:14:7a:be:21:49:e1:d5:aa:
                    0b:ab:54:05:93:a6:51:4e:05:6c:6e:07:0b:f0:3f:
                    1f:35:3d:e0:79:a0:82:8e:84:6d:5d:2e:fc:a3:24:
                    0e:75:94:17:eb:a2:59:a7:d0:f8:61:0a:16:84:c5:
                    a8:24:88:85:22:51:2d:5c:41:b7:57:1e:af:23:e8:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:62:09:D3:EC:AE:15:93:D1:89:50:5A:49:20:B0:85:44:E6:40:19
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:45:c6:d8:7f:da:a9:02:c0:d1:95:36:25:79:75:17:fa:e9:
         bd:b4:af:cf:e5:37:a4:88:74:cb:45:b4:c5:c4:7e:e7:73:9a:
         9f:18:37:93:0e:d6:95:35:12:11:8f:64:44:ba:59:8e:52:2f:
         7e:dd:36:b6:f5:37:86:1f:73:37:a9:2d:2f:4c:cb:fa:2a:ea:
         07:e1:35:fd:2d:9b:be:00:21:47:c9:ea:24:bb:7d:15:2d:96:
         a1:b0:6b:4b:b3:69:27:07:50:8c:ac:42:a1:9d:3a:ef:fd:3f:
         06:c0:60:94:77:6a:e6:fd:10:f0:e5:58:b8:7c:d5:2e:32:d0:
         e1:77:f0:84:95:24:ef:60:b3:18:ef:40:01:d3:a6:90:dc:fd:
         52:2f:6f:69:eb:34:9c:d4:9c:3e:5c:8b:80:16:11:ef:62:31:
         11:e9:43:64:9d:77:da:8a:4a:82:d4:bd:ea:43:a2:a4:b7:a9:
         30:eb:dd:50:9c:0d:34:31:f4:b7:8a:a8:01:f0:38:86:44:3e:
         de:06:ee:a4:bc:82:0f:65:5c:50:18:3b:76:b9:9a:91:3c:9c:
         01:3b:50:3b:91:91:e7:bf:97:e9:c9:70:c6:f3:03:ad:87:87:
         c1:33:f3:6c:eb:02:e2:c2:a5:78:c3:c6:0f:e6:32:1b:aa:19:
         53:ea:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----