Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File:                     Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier:          5FbBboc1VMpxGdspQgvP8JNHqfR2krG6hYkFpB9Hbnw=
Subject key identifier:   D2:86:C1:C4:8D:70:2A:D5:C7:CE:99:2F:2C:F9:8B:F2:3F:91:24:1C
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer:       /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial:       0195E1908097667DE4C3899111F5888C33CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 11:01:38 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:38 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:38 +0000
Files and hashes:         1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=)
                          2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=)
                          3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: 0N8XSfF8UeJTGWpXN9gcgwSsqgbXg+bGgdMT+CA7e2s=)
                          4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:80:97:66:7d:e4:c3:89:91:11:f5:88:8c:33:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
        Validity
            Not Before: Mar 29 11:01:38 2025 GMT
            Not After : Mar 30 11:01:38 2025 GMT
        Subject: CN=d286c1c48d702ad5c7ce992f2cf98bf23f91241c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:e9:41:a8:ed:d5:7f:26:95:9e:1a:45:c5:
                    2d:6e:ef:b4:49:33:04:2c:a6:7d:1e:95:3d:be:68:
                    17:8b:07:58:c5:84:05:7f:6b:53:d4:25:96:f6:30:
                    4b:e0:60:6a:60:ae:59:f4:b7:ab:82:a5:c6:6d:d7:
                    66:4a:97:c0:91:0a:5f:3f:64:d5:9c:41:de:3c:c6:
                    a0:cf:e4:98:56:5a:fe:74:6a:44:f2:a5:fe:0e:db:
                    82:e3:1a:ef:4e:84:13:e7:02:c3:02:33:c9:97:24:
                    d6:fd:10:41:83:36:eb:0c:4d:20:b8:bf:25:6c:ec:
                    62:82:89:9d:2c:40:b6:dd:26:71:6e:f3:1d:6d:79:
                    0c:3b:44:01:36:a9:99:f2:99:38:14:2b:35:a7:df:
                    cb:55:de:56:3a:ff:25:21:93:b0:e3:ce:03:4d:81:
                    41:33:62:78:f5:76:cb:aa:66:30:9f:6c:cf:0c:88:
                    58:98:60:29:52:44:9f:06:27:d6:54:27:51:26:e6:
                    1f:61:f2:35:d2:5e:18:3e:e2:e8:d9:97:1e:eb:2d:
                    8a:ac:d9:a9:5b:85:88:c1:00:13:6e:1f:c9:30:be:
                    b0:4b:99:ac:fa:7b:69:28:5b:9a:72:d8:21:48:80:
                    6e:62:23:4a:6e:74:e3:44:81:db:a2:a3:94:87:c5:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:C1:C4:8D:70:2A:D5:C7:CE:99:2F:2C:F9:8B:F2:3F:91:24:1C
            X509v3 Authority Key Identifier:
                keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:05:09:fd:4a:3d:c5:2a:c2:8f:55:0b:bc:35:37:e5:bf:
         5f:bc:f2:1b:04:ed:7d:53:f2:69:79:dc:45:66:97:63:c7:22:
         7d:dd:91:d2:f1:8b:22:de:c2:1d:03:a6:2d:ce:92:0b:1c:91:
         dc:7c:22:6d:e7:ea:65:92:b4:d1:56:c4:af:43:9d:25:80:fa:
         ee:84:ec:3d:f4:de:a2:9f:66:86:c2:9e:8a:04:06:9a:66:b8:
         db:62:17:c3:be:07:d1:c6:7f:f8:e1:d6:3b:8b:d4:6e:d8:ce:
         c6:c6:86:ab:ca:44:a2:4b:e0:01:f7:66:d3:14:76:3e:a5:d6:
         67:1f:56:b4:21:70:44:a9:bb:01:74:dc:4f:9a:3a:05:b4:cc:
         e2:bf:ba:86:cb:44:25:38:c8:3e:4e:05:ef:f5:0d:fb:83:19:
         08:57:0b:42:60:49:cd:06:0b:f4:cb:fd:6d:e3:ee:3e:60:9d:
         28:cb:08:8c:ca:c6:5f:0e:2c:df:6c:5f:06:03:1f:7d:f2:c7:
         1b:f2:16:4b:49:de:fe:ab:d7:0c:c9:f4:08:b5:3c:43:df:4a:
         f0:1b:d4:1a:9f:1e:e0:77:cd:f6:93:46:5e:cf:58:f2:38:5a:
         4a:bf:53:49:77:ab:43:b8:65:9a:95:e7:16:0d:e3:ea:66:a4:
         49:f9:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----