Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File:                     Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier:          EO7C83eVP1gkWslHhBMQLUuB33g6kzJG3m7E8T6HNrw=
Subject key identifier:   3A:64:90:2D:0C:02:05:CD:94:E8:DD:ED:D1:8D:84:04:AC:15:2B:33
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       0195E159A83505B762B5C65E246D7F521D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number:          08E7
Signing time:             Sat 29 Mar 2025 10:01:44 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:44 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:44 +0000
Files and hashes:         1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
                          2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
                          3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
                          4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: QsEvTPlcgWZCq1Pg+ktW10Pei4l/f8frFeocPN0Angc=)
                          5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
                          6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
                          7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
                          8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:a8:35:05:b7:62:b5:c6:5e:24:6d:7f:52:1d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Mar 29 10:01:44 2025 GMT
            Not After : Mar 30 10:01:44 2025 GMT
        Subject: CN=3a64902d0c0205cd94e8ddedd18d8404ac152b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:54:23:c3:19:21:3e:f5:76:bb:c4:9d:5f:
                    64:6d:1c:e1:a4:30:25:33:38:75:e2:a5:c7:4c:9d:
                    a4:0f:28:7d:d0:cf:78:c8:a9:43:5a:02:26:23:60:
                    cd:09:8a:0b:74:3f:30:71:ba:49:cd:d7:d2:08:ff:
                    45:72:75:8f:0b:1a:fc:bc:30:c0:78:ae:f1:01:dc:
                    d2:a9:5b:5c:d4:03:ae:20:95:0c:c0:79:ed:32:a7:
                    3c:6d:0c:61:8e:a5:4c:27:25:1c:c0:bc:ad:e8:92:
                    89:ef:d2:1f:49:0d:26:6f:c9:c0:66:f2:b0:e0:75:
                    d4:ca:9c:21:9f:44:5e:14:8e:68:22:3b:16:7f:1e:
                    97:26:d0:77:3b:be:6b:77:04:6b:3f:ea:ca:5c:49:
                    36:90:73:15:8f:a2:e0:27:49:13:bf:77:34:57:90:
                    e7:c1:50:9b:45:42:f1:ce:9a:27:6f:98:fb:77:88:
                    b3:29:79:1d:a5:05:0b:6e:40:4a:dd:de:bb:cd:e5:
                    1f:5e:58:69:b5:3e:49:69:42:68:6a:a2:e0:72:a2:
                    2d:19:39:48:90:30:7f:38:27:de:eb:99:ba:b4:73:
                    e0:3e:c4:1b:e1:1a:2d:f7:4e:e5:fb:92:9d:02:0f:
                    d3:30:52:b4:4d:fb:9e:0e:16:62:5f:34:3b:c1:f0:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:64:90:2D:0C:02:05:CD:94:E8:DD:ED:D1:8D:84:04:AC:15:2B:33
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:09:3c:34:f8:1e:1a:51:9a:fb:03:d7:88:46:11:0f:06:
         f8:c5:14:69:4c:9d:3d:ac:33:c6:90:66:7e:a4:bc:87:8d:44:
         ae:d0:20:57:33:1c:4a:28:e0:a9:a5:2d:3b:73:d7:35:a5:28:
         f8:79:25:44:32:07:1c:88:88:d5:25:60:8b:9b:59:78:2c:1e:
         51:0e:ff:9c:21:af:82:ed:44:2c:a0:db:fc:b1:b2:df:96:22:
         b1:ee:b9:40:0a:55:48:ad:98:7f:43:98:90:e3:96:a7:d8:4c:
         20:07:68:e1:ad:00:fd:ce:bb:b0:98:ee:0a:c0:95:3e:4e:de:
         ef:a8:be:72:73:d7:bd:65:b2:18:0d:69:3d:8e:23:b9:64:35:
         ab:ab:cf:ee:41:b6:70:33:8f:b7:e5:c7:6c:57:23:51:40:23:
         a0:d0:78:aa:25:b0:75:d1:04:02:c0:3a:9f:bf:39:a9:18:77:
         3b:9f:a3:b0:7f:6d:d0:3d:b8:c8:ff:35:5d:dd:f1:08:3d:b5:
         a4:be:2b:7f:c3:28:9c:2e:81:c6:77:31:45:c8:51:24:95:9a:
         f7:a8:eb:04:45:78:04:b0:f6:75:cf:2b:58:40:e3:d5:39:9d:
         9a:f8:99:3a:7d:74:51:d3:63:b7:7a:40:98:50:0f:3a:d6:74:
         79:91:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----