Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File:                     Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier:          77dH3gK5O+/EMA4SJuC3q3/prFkwqN0H8j2bashErAc=
Subject key identifier:   A3:04:C3:2A:84:5F:B3:F1:D4:42:A3:2B:A5:3B:E9:AD:49:CA:0A:DE
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer:       /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial:       0195E00FCC99DCE92A05543912BA28FA7BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number:          0344
Signing time:             Sat 29 Mar 2025 04:01:26 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:26 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:26 +0000
Files and hashes:         1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
                          2: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
                          3: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: hLVbRr+7NB4l1cyIoiWW4JiM59Vh1qkubvxyODkgvqQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:cc:99:dc:e9:2a:05:54:39:12:ba:28:fa:7b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
        Validity
            Not Before: Mar 29 04:01:26 2025 GMT
            Not After : Mar 30 04:01:26 2025 GMT
        Subject: CN=a304c32a845fb3f1d442a32ba53be9ad49ca0ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e7:a7:3c:e5:28:41:1d:39:a1:a0:2c:97:82:
                    de:9c:19:02:1a:05:ad:5e:49:e9:4b:12:26:3b:d9:
                    d1:0b:48:44:14:9e:c7:a1:0d:99:b6:f6:ab:5a:d5:
                    4a:24:db:99:56:4f:3f:de:e2:63:07:56:f4:fd:8b:
                    dd:2d:71:b0:9e:b5:39:b6:22:34:bb:c5:b4:89:94:
                    83:8e:88:7a:52:0e:70:4b:6d:24:23:ff:d4:8d:46:
                    52:a5:05:00:51:85:d9:e6:ad:29:b6:96:a5:15:51:
                    8b:50:92:1c:51:99:fa:e6:89:f6:68:fd:36:11:b9:
                    47:bf:77:4f:16:3a:77:d4:51:60:99:de:36:d6:92:
                    7a:66:b8:66:22:9e:cf:7c:6a:e6:f6:69:f5:c8:87:
                    96:cb:8b:79:30:fc:e8:6c:49:ae:6c:4d:1a:4e:91:
                    59:1c:3d:cc:9d:48:93:df:e7:a1:f2:a2:e0:ca:ba:
                    81:83:78:5f:95:9e:76:fd:66:29:e2:01:96:8e:8a:
                    b9:48:70:41:f4:a9:24:a4:e4:6e:9e:82:92:38:da:
                    20:76:d9:0d:d9:ed:86:ff:a1:a4:cf:6e:c6:74:c2:
                    1d:d7:d0:c4:42:f7:3c:f3:07:92:f8:f9:19:e7:50:
                    ff:9c:cd:7a:06:c8:f1:73:ee:f4:9b:0d:e0:b5:56:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:04:C3:2A:84:5F:B3:F1:D4:42:A3:2B:A5:3B:E9:AD:49:CA:0A:DE
            X509v3 Authority Key Identifier:
                keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:2c:59:d0:1d:a8:ab:68:44:bf:62:6d:8e:b1:46:93:00:9e:
         62:b7:47:60:5d:a8:98:2e:d0:a4:d7:2d:95:4d:58:f1:83:77:
         31:66:b6:e9:19:0f:bd:06:fe:79:0b:5f:e3:04:93:e8:c1:ad:
         ef:f3:ba:c1:ca:71:b6:69:c5:a5:9e:17:24:9b:37:1b:f6:1e:
         9b:2f:7d:fd:dc:d2:a4:75:97:4c:1f:e1:00:ce:92:c8:e0:9d:
         70:71:8d:91:b3:75:d1:5c:77:7a:1b:c4:95:6e:9f:c5:e9:f1:
         e6:aa:7d:85:8c:71:de:ae:48:63:42:2c:ae:67:f9:5e:f6:a6:
         1f:48:19:75:96:ee:62:15:64:34:45:bf:7e:34:8f:12:48:38:
         86:f7:fb:88:b5:d4:2b:21:b0:4f:7e:3f:31:f1:73:3e:23:e5:
         cf:34:dc:2c:3b:50:12:29:63:cd:97:98:24:b7:12:3e:47:ce:
         61:90:54:cd:8a:95:8e:60:d8:26:65:30:54:6c:e5:f5:6f:01:
         29:25:10:c3:1c:f9:26:08:d4:b3:b0:f1:28:a4:ea:c8:ed:a7:
         2d:5d:0a:93:ca:c3:9e:63:41:9c:5d:70:f9:fa:64:3f:92:ea:
         88:23:a4:89:b7:ad:16:48:66:8e:29:26:78:34:db:32:8a:e3:
         f5:fc:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----