Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File:                     LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier:          Q/b0zgcDUVCvl07ADqG5gBqajtaQ0TrdMfb/g/UIwsQ=
Subject key identifier:   BC:F5:9C:43:22:EA:51:FA:B3:58:B7:F9:D0:03:6D:33:B6:E5:1E:FC
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer:       /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial:       0195DFD8F2C14EA200AE55903760D9A46260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number:          0562
Signing time:             Sat 29 Mar 2025 03:01:31 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:31 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:31 +0000
Files and hashes:         1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
                          2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
                          3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
                          4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: 8y3+ozRcyWH3TANXmyLpuohCjTETmlJF/Bslg1RgNOM=)
                          5: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:f2:c1:4e:a2:00:ae:55:90:37:60:d9:a4:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
        Validity
            Not Before: Mar 29 03:01:31 2025 GMT
            Not After : Mar 30 03:01:31 2025 GMT
        Subject: CN=bcf59c4322ea51fab358b7f9d0036d33b6e51efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:e8:28:0d:8d:cd:04:75:e5:97:8f:21:c4:
                    6c:b8:97:4f:e5:ff:58:93:d1:9d:98:f9:b1:23:33:
                    07:a5:54:b7:93:5e:24:6d:b4:39:13:8b:8f:2e:a7:
                    c5:ef:66:00:f1:e5:29:c5:f0:26:b1:1f:66:10:c0:
                    b8:28:bd:57:80:cc:86:ab:3d:2d:1c:66:6e:5e:4a:
                    06:b3:2c:5f:03:4d:c7:46:86:a9:3f:43:0e:0b:5a:
                    38:39:a5:af:64:91:fb:a0:5b:f1:e0:bf:e5:11:cc:
                    6d:04:29:0f:0b:bd:9f:3d:99:70:b9:30:49:57:8c:
                    6d:3d:ce:29:de:b7:a6:35:b9:a1:f7:15:98:1f:5d:
                    a3:55:2a:15:2a:e0:a6:07:4d:6c:52:b2:b2:a9:a2:
                    92:4c:ca:79:79:63:28:9a:fb:ce:29:a0:3c:00:2c:
                    11:16:af:40:42:cc:2c:cc:d6:33:01:ae:a0:30:cb:
                    65:69:ee:50:fd:8b:7f:97:be:17:d3:f4:b9:50:67:
                    32:37:c7:40:9f:93:63:27:47:e7:57:59:e6:6f:61:
                    62:6a:6e:85:31:95:ac:22:39:23:e7:69:e6:ce:b3:
                    4e:c6:fd:cb:7e:b1:dd:86:8f:48:bf:54:ea:98:fa:
                    90:9c:2c:34:e2:0a:0b:cf:df:30:38:7d:b4:fa:ec:
                    02:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:9C:43:22:EA:51:FA:B3:58:B7:F9:D0:03:6D:33:B6:E5:1E:FC
            X509v3 Authority Key Identifier:
                keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:7c:8d:b6:d9:71:60:b1:9f:5a:2a:8f:69:0c:5c:9f:be:86:
         05:f1:d1:78:c0:9d:7b:49:ce:68:d4:97:29:41:07:96:57:c4:
         9f:69:86:c5:17:fd:71:23:41:31:49:1f:cb:2c:b6:10:2c:82:
         24:2c:9b:8f:c0:9e:88:98:9a:c7:dd:5f:81:76:66:e4:5b:7a:
         3f:1c:9c:c7:e0:5a:cd:8c:d4:3e:28:43:9f:f9:56:32:8c:2e:
         0b:e4:36:5c:25:12:6a:c3:e5:87:a3:f1:73:7a:2d:12:91:f1:
         99:4d:f3:45:d5:4e:bf:71:39:da:3a:9b:e2:dc:71:5e:39:43:
         c7:97:b4:28:9d:a7:08:a2:67:52:6a:a7:ed:7c:6a:34:ab:12:
         05:ce:2b:ca:8e:b2:6c:cf:35:ee:7b:7a:49:2b:66:65:44:84:
         87:06:a2:25:ae:f0:07:28:d3:7f:03:e0:59:bf:ac:53:d3:12:
         ba:4b:8c:7c:ca:36:57:58:a5:56:fb:1c:cf:2d:42:cb:c7:da:
         82:94:2e:e5:e7:02:34:f9:29:a8:99:ce:75:6d:79:bc:e9:5a:
         6a:75:28:79:66:af:bc:68:10:b8:f8:dc:01:99:f3:6b:73:a5:
         45:74:40:db:a8:b7:e9:34:86:7e:6b:47:58:1f:ab:d4:12:98:
         8d:b6:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----