Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          MyNqhzLg96xecA+nmO3UJ5YVz1bkph1hjqsTdKoKuKA=
Subject key identifier:   EB:21:A3:56:A5:BD:62:FF:04:83:11:0F:F1:1A:8C:16:6E:AE:37:53
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       0195E07D7DA49030A3CA1F061C8A7B5C9EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          076E
Signing time:             Sat 29 Mar 2025 06:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:15 +0000
Files and hashes:         1: 4PohR7OwGuwHEVM5gPaRHxeE1eA.roa (hash: hkN/U9LH+iYS90fV6H0A+LxNtvOY89TqBF9CtdT1eIw=)
                          2: B6e0XtDqKk15RrMq7MMMXhVQ0Jg.roa (hash: qIFUlWmXJaNb3h5STgyP8Vod2Vs8j9C3jS+KUXR0VPA=)
                          3: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=)
                          4: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=)
                          5: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: xV71rbUFTqbb9h3oXQRRSXejZvD7M4WvKiXclSc83+8=)
                          6: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:7d:a4:90:30:a3:ca:1f:06:1c:8a:7b:5c:9e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Mar 29 06:01:15 2025 GMT
            Not After : Mar 30 06:01:15 2025 GMT
        Subject: CN=eb21a356a5bd62ff0483110ff11a8c166eae3753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:89:3a:59:72:e8:3a:a9:78:c1:70:60:6c:
                    2b:48:a5:0f:d8:5f:1e:a7:88:ec:4d:93:96:f6:5e:
                    99:0a:02:ca:c5:05:e7:9f:29:b0:da:c8:7f:25:58:
                    db:6c:60:13:e8:3f:64:25:47:dc:4f:03:04:3f:20:
                    ed:5d:04:6f:cc:9a:c6:27:05:aa:f3:5f:09:02:30:
                    1a:64:7d:09:41:a1:97:e7:3b:88:61:32:f1:0e:4d:
                    ac:48:01:79:19:86:f4:c5:63:75:f5:50:86:7d:a2:
                    2a:de:ed:f2:42:12:8a:15:d8:01:e8:56:8a:27:ed:
                    f2:1b:39:e4:8a:a5:20:3a:98:52:f6:86:b9:2a:2c:
                    5d:eb:2c:ed:1d:29:8e:a2:ba:2a:ea:41:8a:2d:27:
                    a7:01:06:48:74:7e:67:fb:0b:5f:b4:e5:08:a0:91:
                    b3:03:67:b4:96:e2:0e:38:4e:a8:7e:3a:88:32:0e:
                    f4:1c:f3:11:e5:f7:20:0b:d1:c9:38:f8:59:06:7f:
                    82:d9:b7:0f:52:4f:b2:2a:15:8c:77:ee:8d:59:ab:
                    53:89:4e:35:9d:5f:30:7f:c9:3e:8c:e7:45:29:b3:
                    bd:68:de:46:e8:48:67:64:38:bb:fe:cf:5b:e4:14:
                    a9:b2:2b:ca:1e:4c:45:90:c9:f6:c2:37:bc:66:28:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:21:A3:56:A5:BD:62:FF:04:83:11:0F:F1:1A:8C:16:6E:AE:37:53
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:09:85:d6:f2:c2:96:e1:3f:9e:b9:9b:95:b1:27:db:d3:
         62:f5:85:1c:ba:b8:60:b5:05:c0:9c:d9:65:0e:56:86:f2:cc:
         3a:93:e8:c7:b6:fb:5f:9e:be:12:5f:d0:d7:8d:21:4c:b3:b5:
         ed:83:55:11:e1:ef:c7:8f:2d:a0:78:c7:f8:9a:5d:ca:b9:44:
         9e:1b:7c:85:2e:dc:59:79:35:6f:b5:20:81:79:2b:79:62:71:
         1e:05:63:48:3b:d2:68:ce:75:33:a6:28:22:a7:12:99:ba:0e:
         f4:4d:8e:8e:21:6c:07:9e:d9:7a:1f:33:bd:0e:57:6f:60:4d:
         29:e3:49:19:ce:f8:95:e4:04:3a:21:67:31:7d:24:fa:9e:d0:
         4c:f2:d1:e1:94:08:08:c5:72:5d:4e:12:83:00:c6:34:29:be:
         83:d0:5c:21:69:9f:07:43:93:e7:8d:6b:a3:9e:f2:3b:86:d6:
         35:26:3b:22:fc:61:61:d7:52:5e:87:a1:a0:77:69:6b:d2:27:
         20:dd:2c:62:26:c3:cc:b3:ee:e2:6b:9e:eb:f1:34:d1:18:c3:
         48:06:d0:48:b0:8e:b0:8f:23:ea:ed:ad:17:2d:64:a0:b8:77:
         c4:c0:ec:09:eb:23:40:aa:4c:0b:99:66:70:5c:a7:93:01:f9:
         83:a1:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----