Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
File:                     MzNh-6hAkXT7PEgrjKJvI169IsI.mft (raw, json)
Hash identifier:          MLOcc22Ju+OTo2XIFFfTyTya5tDTFq/3dvAR1uJQ9mg=
Subject key identifier:   FE:D1:6C:68:41:E0:49:04:85:18:B9:F7:CF:74:AE:1F:D9:D8:D3:71
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Certificate issuer:       /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial:       01979AF24C929F3BCA96527D1C43611B7A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
Manifest number:          125E
Signing time:             Mon 23 Jun 2025 04:00:59 +0000
Manifest this update:     Mon 23 Jun 2025 04:00:59 +0000
Manifest next update:     Tue 24 Jun 2025 04:00:59 +0000
Files and hashes:         1: 7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa (hash: RlyXBzHmtsm995ENs8O6yiu+NFUTpzrFveSmekzl2mQ=)
                          2: MzNh-6hAkXT7PEgrjKJvI169IsI.crl (hash: m0Pkc/EJkw7PsH4TfCgj5+pP/xM592zTNOcAx9o9YC8=)
                          3: eL7L2yvUaHUcrqYa9YfSEkCrZQ0.roa (hash: hRmFfXusSA4yPVBPDkdUWWukYfa7ZjWi3ll24wVEEEs=)
                          4: rZcv-swn7039blCdnkHsmvuTEE0.roa (hash: YkjIIueA3tSkus+TXP81fG/yVykEarWy1n4j2aCv7FI=)
                          5: redZ5Lo-6i46yM5qdUMWwkSisZE.roa (hash: HxevwAQ5SK1xf86uDMqoDN6xfryXXeJR1/gwiD3DlWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9a:f2:4c:92:9f:3b:ca:96:52:7d:1c:43:61:1b:7a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
        Validity
            Not Before: Jun 23 04:00:59 2025 GMT
            Not After : Jun 24 04:00:59 2025 GMT
        Subject: CN=fed16c6841e049048518b9f7cf74ae1fd9d8d371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:e4:e5:91:5e:fe:08:c9:04:37:17:e5:42:
                    91:cc:73:6d:be:7a:14:b8:17:69:70:33:f9:9a:e3:
                    fe:68:93:75:db:8e:ad:95:5b:e3:9f:50:05:e0:7e:
                    8d:64:53:62:01:64:e0:af:cc:f6:21:c0:3c:b5:67:
                    71:b4:a2:0a:0d:81:54:0b:9b:a0:62:b8:40:6b:ad:
                    f9:00:81:31:bd:4f:82:db:95:7c:31:35:84:65:6f:
                    b3:7b:ab:e3:b4:f6:e5:5c:6b:a6:38:53:f2:e1:49:
                    72:da:df:3b:fe:7b:22:cd:5d:e4:23:29:42:55:01:
                    43:51:4f:f5:89:32:91:0a:56:b3:64:4f:76:9a:e4:
                    00:c0:5f:9f:7d:b6:cd:1a:a6:6c:e7:fe:04:cf:ae:
                    1b:be:3e:5b:5c:91:12:be:78:c1:48:a5:5b:cf:ea:
                    5b:bd:0c:8c:14:d5:fc:93:eb:91:76:ca:c5:db:d8:
                    88:fc:61:04:8f:26:d2:44:4f:89:d7:2e:27:96:86:
                    9c:9e:e7:99:cf:3d:f9:03:0f:bb:3a:b6:a2:58:8b:
                    01:19:ec:28:8b:95:63:3b:23:25:35:d2:7e:01:bc:
                    e5:7a:98:44:51:aa:70:d9:ff:7d:9d:cb:d9:f6:7f:
                    8c:3c:ec:18:cb:2f:38:39:75:2f:c3:3a:82:3c:ae:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:6C:68:41:E0:49:04:85:18:B9:F7:CF:74:AE:1F:D9:D8:D3:71
            X509v3 Authority Key Identifier:
                keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:23:f0:09:79:e5:0d:1e:4c:df:3d:6d:5d:7c:c2:f5:72:23:
         23:09:87:43:55:e9:b7:31:62:49:6f:8b:07:f6:60:3c:35:41:
         24:bb:4e:27:91:7e:99:c1:24:ac:36:6d:b8:07:a3:b1:6b:56:
         d3:d3:b6:fd:0b:50:fa:eb:25:0f:4b:5d:5d:4b:5f:1a:b3:aa:
         c1:97:35:39:18:39:df:6b:f2:8e:a2:e7:30:b5:36:49:16:84:
         96:4e:03:34:58:20:d5:da:eb:1e:d1:f9:de:c7:af:d1:80:a2:
         b6:0e:a0:0b:ce:9f:4b:49:7c:a3:5c:4f:7a:26:ae:1c:fe:f2:
         5e:4e:1d:25:9b:a5:63:14:d4:8b:a2:79:76:43:93:bf:6c:33:
         64:c4:e4:47:22:ca:ac:b7:58:f0:77:e0:ee:bf:62:f6:5c:15:
         d7:03:03:6f:2e:c1:2b:33:4c:b1:57:88:4e:e8:3a:ff:5e:35:
         7a:86:89:4a:17:0e:57:95:bf:96:03:de:57:c0:e4:e6:33:65:
         5c:f6:cd:a3:d7:23:05:d4:1b:5b:6a:6a:7c:ec:a5:0d:2e:fb:
         b4:af:b9:25:a7:5d:05:2d:13:3e:07:60:c3:ea:23:de:2b:0a:
         8b:49:ad:4c:6c:6a:2d:6c:22:7e:42:5e:94:87:1a:b2:26:5f:
         77:e0:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----