Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          WXDxJKSJ89IwWRALf+x122MEAcmFKB0zC/hGUs+k0Fc=
Subject key identifier:   AA:AF:83:B2:24:26:60:43:B7:FF:7E:55:BC:53:C1:81:EA:20:93:5E
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       0195E19079A12D7F730390E9EEDE350923EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          0DCA
Signing time:             Sat 29 Mar 2025 11:01:36 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:36 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:36 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: +Rs56RHF+0LKG5zmnDSysi86ykvjxEY24alj0IvEfSo=)
                          2: 1-bzPiIr4uKzM54SlrYIo7KhZ5GU.roa (hash: DDlYF6X7Zxo/Lw4zoc2BnAeUjIBMFJl/7uSpuLTlu7I=)
                          3: 3i-FLLqZNZBmwu1ImdXKMAXcINc.roa (hash: f5mig2xePHhIeW771WU5qz2mX8EgYaIQXzf9RtaIn7k=)
                          4: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
                          5: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
                          6: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
                          7: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
                          8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:79:a1:2d:7f:73:03:90:e9:ee:de:35:09:23:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Mar 29 11:01:36 2025 GMT
            Not After : Mar 30 11:01:36 2025 GMT
        Subject: CN=aaaf83b224266043b7ff7e55bc53c181ea20935e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:8d:b9:33:c2:c8:10:2b:c8:74:71:5a:2f:
                    92:4e:68:2f:a3:6a:a8:c2:6c:7d:86:bf:df:37:55:
                    f0:ba:0d:65:72:42:d3:c9:bf:6f:df:ca:5a:60:09:
                    cb:8e:9c:93:bb:3a:99:36:d7:73:cf:c6:8f:64:f4:
                    9e:4c:b1:26:3a:17:9a:20:59:ec:07:35:56:ee:ef:
                    29:55:19:8b:0e:d1:51:02:5b:ca:ab:68:10:4e:51:
                    68:0e:51:23:a3:9b:7e:9c:9f:08:d2:47:eb:15:77:
                    7b:2a:cb:95:af:eb:6b:e6:b4:3d:f0:ea:6b:fd:f3:
                    9a:e2:4d:5c:ba:66:f2:36:43:5a:ad:eb:5d:8b:55:
                    bf:8e:32:fd:a8:d8:d4:19:b8:e3:1e:c4:53:97:24:
                    56:6c:10:62:2f:d0:50:8c:a5:f5:d6:e8:23:a6:ca:
                    e4:47:11:98:ae:96:19:5c:60:ad:f3:2c:49:e0:7f:
                    3a:1a:54:fd:7e:d6:76:85:8e:b7:0c:b2:65:89:cb:
                    d8:49:a9:aa:96:e8:e4:e2:5d:b3:f2:c0:53:68:d2:
                    6b:1b:b9:54:d8:66:af:4f:c2:d7:3b:11:ba:3f:12:
                    5f:1d:cb:8f:ab:9b:c3:97:0d:27:37:db:d3:6e:1c:
                    be:85:7b:d0:8e:44:f8:d8:0c:55:14:10:d6:52:c5:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:83:B2:24:26:60:43:B7:FF:7E:55:BC:53:C1:81:EA:20:93:5E
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:7b:74:46:cc:95:1c:cd:62:74:d9:cb:92:58:eb:69:d7:
         8c:ff:e9:76:bd:ee:60:e9:f5:1e:4a:51:9b:39:10:88:2c:cb:
         00:f0:e1:3a:c2:88:38:33:7c:c5:d7:70:98:a7:91:ac:a6:f6:
         80:bf:92:5a:82:99:72:45:7c:29:f6:20:f7:e7:58:f7:f3:30:
         9d:8d:f8:d6:ae:cd:24:bd:83:9d:84:3c:76:74:e9:d8:96:5d:
         0d:22:43:b3:b3:5a:78:fe:1c:35:b4:c9:c2:66:de:eb:f2:5f:
         d4:15:1f:56:9d:91:4c:72:c8:5d:ba:91:d8:ec:4b:ed:cf:ce:
         50:de:c8:04:0d:24:24:2d:d5:4a:7d:dc:2a:8e:19:bb:fb:03:
         69:d2:13:88:0b:a6:d8:0b:7b:38:d8:26:b6:db:b2:60:eb:08:
         b6:fb:f4:7d:3b:e9:7c:2b:18:d9:30:75:91:df:76:2d:e1:ae:
         73:8a:64:af:08:27:d7:eb:6e:d8:9e:6d:65:21:2c:63:60:87:
         f8:57:a7:22:87:06:ed:6f:ed:3e:ab:ea:99:f3:eb:a9:7d:47:
         4f:8d:8c:27:c3:10:77:fa:1f:00:48:f8:09:a0:1e:98:96:17:
         c1:5b:81:03:26:35:a8:a5:ee:96:b5:8d:90:d9:55:0a:a5:0f:
         c6:ff:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----