Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
File:                     iLITvxYnVI79-xsuJkW6rx2YOqA.mft (raw, json)
Hash identifier:          25W3ztSjqngTIyuF8+RvTKuFk4t4+7pRy5aT3hattpI=
Subject key identifier:   01:93:32:C6:F3:28:DF:8E:68:69:21:43:66:40:AA:DA:50:1D:4E:E8
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Certificate issuer:       /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial:       01957E6D700D75FA5DAA0E0CDF34A9C480E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
Manifest number:          0EAC
Signing time:             Mon 10 Mar 2025 05:00:55 +0000
Manifest this update:     Mon 10 Mar 2025 05:00:55 +0000
Manifest next update:     Tue 11 Mar 2025 05:00:55 +0000
Files and hashes:         1: 1sLqq7zmfuSrtDrRa_lotySUMLE.roa (hash: EUSykeio3UByPxKvUwzrOqb4sSP9VgYc493bpj9cmHE=)
                          2: 68Pu2AXLofchUtNF6ILNmHe7aBA.roa (hash: m7+3wmVwNxhGm0oBgBqHOjSzz8B848/6o4g8DtXdHHE=)
                          3: 8MT0UIFQ6nU4uCjhLGDXmH7jOwI.roa (hash: y1UnhD4e5XuBcO21Blgmd9ITMRK078RzME966GC0y5c=)
                          4: 8_EM-NgogDWyXCZ7GHqoBVXM7dU.roa (hash: gQd8gawt/KvpcQzHqj4TWyOy7DQ5VK8Yji82w0a5OTs=)
                          5: Dm-tx1KBK2hPz-JpOmoTYmDiQ_w.roa (hash: oAPfeztmjvfCNwoYwDPS59r8YNnL93mIV0O5bBj2Pg4=)
                          6: EJvT73f0zfX6V-sDG90IKMGlbWI.roa (hash: S1RfA7O/foGJ4mED+b47KgDXCDBLq2KCHZso3SbwQVs=)
                          7: FBVKHX6AhPmIHwsxiIn3PjKprdY.roa (hash: Bmsov5n8BlbBA+lBpQbbXasr+P0qhbMGVQr6CkzBkoY=)
                          8: KZVhkIICg3g1SuNsSRz-iJAMcVs.roa (hash: vqOmUogwB/0zcaBmLelkGuetlxCfU2rAmHJLqPW9qU4=)
                          9: KdSwh2FfuPzcZ06W9i3PJCdcHak.roa (hash: ltlTRz8IBOKO8PjpLqE2f7RluQUBUJ2kuF+4H0lOQhA=)
                          10: LIh1ADCZ0LWI_DvgUbJYGlU_Y5Q.roa (hash: gqRh+lIYIary54o5cix25hdCxqo3Lm2blXNrFqQ3NOw=)
                          11: TvveOuJ78JN7_Bxixoyy3yJ2XvE.roa (hash: ic2ks2h1rk9qT+cLkckdSWxzORnyQ2dmMXB7UujG98k=)
                          12: Wodeb2G-O5hfE1AaXUEi32kwtug.roa (hash: z94g78TEECa8iSMDLgSVgEG9oWcHvy77HVxXhtUZH3M=)
                          13: Yy3P_eLepPH97sx7uG_-ThMgEEo.roa (hash: 8nK1KDctbyjadkySvmdLv0JCMPOzSxuChYH79evajq8=)
                          14: _vwpsD168LEY10nOJscaCt-SnZQ.roa (hash: 7NgtBWVv0I0a+Kdc2+Zug4/EaSIg4zdeCZaxikfq4DA=)
                          15: dGedy0wsnBQ1oUWW869hemnPDw0.roa (hash: ku488GV502rwqvE42mRLyRCKhFwizbm4y59vrzUOLXA=)
                          16: f3bddzjzl2OW_STgzFCbigwsw8k.roa (hash: T+BY8qIofug0gv/898Y7gZSrRS2FO7bbqLBdCP+UYYA=)
                          17: iLITvxYnVI79-xsuJkW6rx2YOqA.crl (hash: r1GILR7zl0t4jG1cGTSTf+N5T2RfQu1Imm6r415ZTU0=)
                          18: jsh_CKGwPXA47806nTfBjRejzno.roa (hash: zDPSIGDOR6ZzE2rb8lFIy+Vc6kXvuIUgjEkjvOGbMQA=)
                          19: kycUHqIJSzwMzWjLm8-WVZuJ2Qw.roa (hash: Bj1VYT/0qMuyjXzxb76czCHfvVoPo2W9ZKDIzYtKikE=)
                          20: pIyB-_gyKX0yvojv_cOEmJKX5J0.roa (hash: 6GJsY/2bnSWYmzzHAcqWL7RY9KRAzWBexFN6xzvXMgc=)
                          21: sH5ffav-MEHFx-dEpmj-qDCH5g0.roa (hash: cMuhVF8gYL97/dPky5i0xq3CGW8CsCgvFE7GsycUFgo=)
                          22: u4vEOX2nKg80wekEGKq3jxNqd7k.roa (hash: dNV06JWhYd6W5kceRRCX4FAPcyVY51Y3uLB0l71eME0=)
                          23: wDuJvOlZaOo8Epkil686w3gJsto.roa (hash: 73Hf4s3WrV0+uOuIELUGtDk9/Kp+8P4NYxn8dFXAlzY=)
                          24: xqRhaDuWbvwuCgdy62MSW3T7-_A.roa (hash: E6MIsrMkJ4GdOWqUu5/m7Ul8X0CNVw6dv7DOMQQRlWE=)
                          25: yslXZh7Cuzs6wadu870G9PNND8c.roa (hash: 8SYbXXCsMqY9gXe1d2tV7R6DC4ZuExzsWyNdSPv/Pg4=)
                          26: zTpcEm0c5qyWV8kaMxaycOIHNiA.roa (hash: Z8Kn1TX8eKLa2Gi/++TgVwd87J6hbYR+jmiRrR5aZz4=)
                          27: zf7G8dw177J1cqxfCOTnq7s5mzk.roa (hash: Ktcb96xFdLO9HtBDwmDCXkYKr2TSGUfY6gJWnDIeWaY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7e:6d:70:0d:75:fa:5d:aa:0e:0c:df:34:a9:c4:80:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
        Validity
            Not Before: Mar 10 05:00:55 2025 GMT
            Not After : Mar 11 05:00:55 2025 GMT
        Subject: CN=019332c6f328df8e686921436640aada501d4ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:84:2b:52:8f:f5:80:6d:d7:d9:f8:c0:d8:
                    a5:d2:f3:0a:45:6a:45:e0:7a:63:89:61:b3:a6:c6:
                    21:f3:df:33:40:07:91:36:07:4a:bc:50:37:6d:1d:
                    7c:7d:4c:e7:d6:c7:62:6e:2f:27:49:9b:40:b5:19:
                    c1:2d:28:06:da:8e:3f:4a:8f:04:ec:57:81:5e:40:
                    04:db:a4:c7:1e:14:b8:14:03:2d:74:f5:fe:9e:ce:
                    c5:68:70:68:1c:13:e4:d7:91:32:bd:3b:9f:d5:f8:
                    50:16:a9:e7:c8:d2:8a:cc:de:aa:13:77:e2:52:0f:
                    82:1a:1c:11:77:cb:1f:5a:fb:28:1b:ec:ed:ee:fe:
                    a1:b2:ae:76:3e:98:74:a9:3e:39:67:fe:e8:b9:ed:
                    1a:82:6a:ea:b1:35:8a:91:97:64:18:9e:17:f3:e4:
                    1d:38:af:44:d4:f8:e4:85:bf:38:bf:ed:0e:89:5b:
                    ac:48:93:7c:c8:67:eb:40:dc:93:65:d5:cf:c0:9a:
                    b8:b1:f3:98:15:56:22:53:45:a1:69:a6:f8:ef:f7:
                    96:9d:d6:0b:20:af:c3:c9:ed:15:59:77:51:b4:d1:
                    b7:f6:25:64:09:ba:66:cb:3f:11:9b:46:22:04:6d:
                    eb:2a:7d:2f:7c:0e:38:fe:34:a3:c1:26:6f:f2:1f:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:32:C6:F3:28:DF:8E:68:69:21:43:66:40:AA:DA:50:1D:4E:E8
            X509v3 Authority Key Identifier:
                keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6f:d2:4b:00:a8:7c:dc:7b:32:19:d6:8f:92:f8:da:60:f1:
         d4:06:98:e3:b3:82:db:59:0c:5f:3a:b0:1e:27:05:71:d6:f8:
         a2:ad:86:98:46:03:7c:f2:fa:8e:e4:e8:c0:15:7d:f4:f8:49:
         69:b8:85:f6:4a:28:2c:a0:b1:5e:21:ca:41:e0:f3:2a:77:3e:
         50:5b:7d:09:9e:b8:1b:d6:b8:5e:c2:25:a2:b7:65:87:a8:5d:
         0e:19:27:34:43:88:2f:ea:bb:b7:28:24:b5:c3:e4:02:3d:80:
         ce:23:2a:74:87:04:a4:a3:a4:cf:67:24:87:30:9a:30:fa:0c:
         82:35:21:ba:d9:a2:8f:93:99:bb:5e:d6:d2:99:bd:59:6b:d5:
         9d:dc:ec:1e:28:53:f5:a5:e8:c9:f1:ef:65:d4:db:e8:fc:7b:
         99:08:27:32:41:de:fe:fd:da:2e:c6:d4:71:87:25:76:11:9f:
         c9:35:12:3f:fe:27:5d:bf:0c:32:02:12:83:6f:00:ea:f0:c0:
         ff:23:4c:ec:7e:1e:8a:8e:b0:9d:c0:3b:78:02:69:49:94:1d:
         90:55:70:e7:a3:83:0e:bc:03:84:68:c0:15:13:c0:f4:8b:e1:
         5d:e0:b3:3d:d7:a7:06:e5:e8:2f:5d:1b:55:bd:17:fe:20:aa:
         b4:e5:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----