Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          Voi8NoNa03qBx8mP/NFWQXmBc0VVvLwvztn41tHsyhM=
Subject key identifier:   B6:8A:E5:D1:F8:5F:36:96:6D:88:C5:B3:FD:94:DD:24:27:1D:8A:03
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       0195E0B4BBC3539EF9C262D115174A0CD48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1449
Signing time:             Sat 29 Mar 2025 07:01:35 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:35 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:35 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: AGnbdUxlqNIXE8zLnJxiuGwLP5e0wi3NkU9lbSxYRWI=)
                          3: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          4: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
                          5: xBnPmDluu8xPBNc3MvJ1JJ1Y5f8.roa (hash: Q9qE4BIap4CmlXdBGmmHzRr3Ld+715v9q//ZgmRDsjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:bb:c3:53:9e:f9:c2:62:d1:15:17:4a:0c:d4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Mar 29 07:01:35 2025 GMT
            Not After : Mar 30 07:01:35 2025 GMT
        Subject: CN=b68ae5d1f85f36966d88c5b3fd94dd24271d8a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:88:da:e0:d3:df:12:45:2c:85:4a:51:37:
                    fa:43:9f:55:4f:7a:f7:5a:b7:6d:69:9b:b9:b3:40:
                    8b:7b:da:df:47:78:10:77:3e:72:e0:fc:40:69:ff:
                    24:ac:f6:9a:6b:15:71:ee:ae:ed:1f:aa:cb:5c:35:
                    d7:20:da:03:5c:86:5e:fa:51:93:15:bb:76:13:6d:
                    44:50:de:a3:58:94:df:14:d1:91:cd:34:2b:38:91:
                    b4:61:0b:ee:1b:3c:b6:d0:7e:35:ff:93:3e:90:2c:
                    d8:58:e6:94:97:cd:33:87:de:16:a9:e1:af:39:69:
                    5c:7e:2c:a6:20:a2:ed:a6:b2:61:76:b6:9e:26:dc:
                    26:fe:2c:f5:1f:c1:e0:8d:02:17:4e:7e:ff:be:2a:
                    fd:38:c1:b2:46:3c:ad:72:48:ed:a6:a1:7c:5a:6e:
                    ab:63:eb:8a:b7:10:32:40:2f:34:a4:46:ca:af:77:
                    6f:bd:70:74:46:74:4c:a3:4d:fe:db:e9:a9:bb:26:
                    ad:17:78:0e:35:14:4e:47:7d:86:64:e7:72:f7:07:
                    49:35:51:7a:ea:b8:5e:ba:0d:a0:5f:9d:46:48:97:
                    de:d6:34:fb:87:4a:8e:ba:0f:cc:4a:69:cd:18:7b:
                    90:39:14:e0:35:df:1a:31:4a:5a:fb:68:2d:12:80:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:E5:D1:F8:5F:36:96:6D:88:C5:B3:FD:94:DD:24:27:1D:8A:03
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:71:c6:25:34:3a:04:f9:26:ff:9a:95:36:81:e2:53:c6:df:
         63:c4:37:4c:3f:ee:8b:64:75:d8:88:6f:dd:be:9a:e0:59:13:
         7a:eb:c6:da:25:88:e2:43:c6:8a:b3:1e:3d:30:6f:7d:cb:3a:
         9e:8f:46:ad:8e:48:c3:df:bc:a3:ef:89:72:88:68:a6:6d:8c:
         69:30:3b:e8:c5:cd:36:7f:ca:4b:c9:0f:68:e2:62:d1:34:75:
         d7:af:6f:00:86:af:90:a4:cb:5d:a7:68:49:10:8d:b2:90:ed:
         e7:b4:74:f8:19:c6:74:80:7e:6a:c7:68:3e:8e:cd:c1:52:25:
         61:cc:f3:b5:67:5a:52:d5:77:aa:76:48:8c:c1:01:15:aa:56:
         39:16:9f:ee:7b:59:0b:04:d1:d7:55:36:e3:3c:73:f5:e2:25:
         e9:f6:07:5e:ae:18:80:50:46:39:08:a2:a0:02:ce:65:7f:5f:
         ab:82:be:87:8c:e7:a0:e7:22:d3:c8:a2:38:5a:42:b8:57:e7:
         ce:1c:39:19:fd:7b:08:36:21:67:df:55:bd:99:3e:d1:e3:18:
         e6:3e:db:b2:5a:12:bd:43:36:05:cf:df:4f:e4:5d:0d:6a:38:
         2b:57:29:c1:2d:df:cc:86:ca:e2:92:c6:e8:a6:ef:56:c7:d9:
         e4:02:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----