Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File:                     HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier:          j0tQZ0TOd4sXBOxllAKKfkZCdW02gsvfoE+lzU7wkDQ=
Subject key identifier:   66:73:96:02:23:F9:BF:85:0F:7E:3A:97:EC:CF:19:52:16:65:52:05
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer:       /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial:       0195E00F772304CC02E22AF41FE2CA7003C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 04:01:04 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:04 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:04 +0000
Files and hashes:         1: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: P1RFFyKo4gBexnIIFl3S5+7Bct29ENlfSg/8sbZOrpI=)
                          2: LrQvGSWjZ1_u3gVVuPLp2WxRk1k.roa (hash: ZcyQD8WEBHUW25dO4BlMcUXBz86xnVBSf9fbKGrRMB8=)
                          3: _reFuWE8F3Q1MCsGcykhYwVBWKM.roa (hash: O++vwJ85mD5AXwmEuMpGVw7mWSimyoQ3mta9DBkVsW4=)
                          4: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (hash: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=)
                          5: t3uSAegbFXAgvcMRKArmSOOjc88.roa (hash: 4JXslF6DFYbC7wM1C83bbrfYplmPiSougkSoNLfd1xU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:77:23:04:cc:02:e2:2a:f4:1f:e2:ca:70:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
        Validity
            Not Before: Mar 29 04:01:04 2025 GMT
            Not After : Mar 30 04:01:04 2025 GMT
        Subject: CN=6673960223f9bf850f7e3a97eccf195216655205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:c5:b0:4b:c4:02:e4:2a:be:c5:08:23:2f:
                    08:69:8b:11:2f:a2:26:9f:15:40:79:a1:a1:26:c0:
                    49:a7:41:3d:7c:eb:f0:39:1a:5f:60:83:39:2e:5e:
                    de:20:e3:cd:f6:28:a0:a3:50:98:8b:5f:21:84:bb:
                    23:99:4a:7e:2c:4c:d9:8e:43:41:d4:42:be:a0:e0:
                    a4:1a:9d:8c:81:f8:14:45:a6:f7:e8:64:f3:35:e1:
                    ce:4a:a7:3c:66:7d:c6:14:fc:b2:9a:43:03:90:a9:
                    72:1e:4c:e4:65:ee:15:33:76:7e:16:52:7b:69:5d:
                    20:0d:64:3f:04:9e:11:d0:b8:22:01:f8:1c:a4:cc:
                    ff:52:c3:05:d8:7f:2c:04:fa:49:3e:67:ef:77:7c:
                    cd:ab:76:8f:f7:8e:96:fd:fa:58:a2:09:6c:37:8e:
                    63:ec:85:89:09:98:58:a7:3f:24:d8:9e:68:5b:fe:
                    94:24:9f:e5:ee:29:14:73:55:a7:51:67:1a:c0:be:
                    45:c9:3e:73:31:6e:48:36:a0:7a:06:0e:36:09:9e:
                    fd:12:dc:da:1b:50:64:40:07:c6:57:7b:e4:cc:71:
                    1d:aa:d1:71:a8:d5:23:43:19:b3:94:a6:9e:96:e6:
                    c0:fd:95:3c:f9:5b:3b:2c:24:06:71:a7:2e:5d:09:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:96:02:23:F9:BF:85:0F:7E:3A:97:EC:CF:19:52:16:65:52:05
            X509v3 Authority Key Identifier:
                keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:53:61:92:b5:eb:c8:e5:f8:5b:f1:45:f6:fd:3e:71:cf:d7:
         a2:c8:a1:85:f5:53:b3:28:30:05:50:34:e3:12:da:97:f1:67:
         35:af:7a:10:2f:dc:9d:9d:cd:5f:56:d1:ed:d0:e8:7a:0f:4b:
         5a:2b:93:12:be:48:7f:81:7e:5e:48:a7:44:c7:98:7a:3d:b6:
         e6:76:66:aa:7a:eb:b6:6d:ba:53:4f:3f:95:46:0a:c0:d2:fa:
         42:45:fa:ef:12:c2:f8:25:eb:eb:e9:9c:53:4a:96:98:b3:97:
         d9:22:d2:16:f3:52:e3:12:87:c2:79:2d:0a:14:80:ef:bc:13:
         3b:25:5f:6b:13:d6:41:d4:e6:2b:1f:f6:8a:fe:90:99:76:0a:
         95:b7:70:a3:1c:b8:f8:ec:a4:38:f0:d2:3c:c2:33:fa:69:2b:
         d0:33:6d:43:3a:5b:17:8d:11:0f:0d:1c:8a:29:98:03:d2:12:
         0d:cb:cd:12:1b:59:35:ed:39:f2:f2:ba:90:02:32:3a:f5:e3:
         a1:2a:bb:cc:8a:48:40:6e:da:23:b8:a1:98:e4:6c:ff:22:19:
         95:43:3f:07:33:12:8f:17:a5:97:e4:75:84:c5:f6:33:8a:12:
         44:bd:df:c8:42:b0:4d:ff:eb:1c:93:f8:5d:50:3e:0b:fe:19:
         98:1e:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----