Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          6sFPzwxRUwYPtYyLohllYU+iygIxGMJECyFyVyIFvFM=
Subject key identifier:   63:F1:46:27:36:E7:01:55:38:FC:78:2A:BF:A2:B0:D5:29:61:B0:B8
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       0195E158DA5A59F29F7CFC4766D0610FAD7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          14C7
Signing time:             Sat 29 Mar 2025 10:00:51 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:51 +0000
Manifest next update:     Sun 30 Mar 2025 10:00:51 +0000
Files and hashes:         1: 4vY-bTyKzTJbIG8K1hcmZ2OzV3Y.roa (hash: 94nlldFhiqgmPqtety18s97ySLGHCvNHQ/0uGpBprik=)
                          2: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: nm207Ze0DoebMI/G5gxU0hysMjFA2PmrlEmZKLhi3m8=)
                          3: L2xzzOA8JfaZwPjrwMWqtyVALj8.roa (hash: X9Kq4PlbStrWO9FxwUbvnrlqsiqSHKE/+3dcCYXzI7A=)
                          4: Vtkp4nVzagTb1teWd63BFZh8RwU.roa (hash: TYSKwA87i0+WxUKYjqVqa3ovHNk1VR5486G73L2E0tU=)
                          5: wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa (hash: vx36cOt+aE+Tw3PFdY9b+UteGXfJmHCFf0+yXWJQTLM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:58:da:5a:59:f2:9f:7c:fc:47:66:d0:61:0f:ad:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Mar 29 10:00:51 2025 GMT
            Not After : Mar 30 10:00:51 2025 GMT
        Subject: CN=63f1462736e7015538fc782abfa2b0d52961b0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:11:1a:eb:5e:1a:6b:97:ec:4f:1a:2c:59:
                    de:1c:ee:a7:1e:78:8d:0d:2d:09:91:77:f5:a9:6d:
                    3e:b5:a4:c0:2f:8c:03:3d:e4:12:a6:de:32:1b:2d:
                    b9:f8:1b:15:ef:c1:b9:02:0c:fc:8b:f9:58:db:99:
                    0a:bf:4d:0e:84:70:ac:13:03:b5:39:35:cf:c4:10:
                    d3:b6:69:0e:19:87:a6:bf:e2:02:4f:b7:e1:2b:1e:
                    55:87:a2:44:a9:81:ff:2c:aa:2b:ef:e4:8e:ee:21:
                    2a:a5:ed:28:54:0f:8e:4f:f8:13:3f:ad:2a:5c:47:
                    60:5b:dd:06:cf:07:81:e9:22:08:24:db:a5:ec:7d:
                    71:22:f8:cc:67:8f:b0:88:23:4a:34:7f:88:a1:e7:
                    71:aa:e0:4d:be:9d:ac:a9:5b:b8:4d:5a:89:3c:f1:
                    a6:85:d7:05:fb:19:6f:ff:23:99:4c:31:3c:f0:a4:
                    d9:64:4e:ba:95:6e:b8:a1:2e:8b:10:f4:46:67:e2:
                    9b:0b:75:0a:d8:41:c2:e4:9b:9d:51:f4:58:06:3f:
                    fc:08:60:e2:b1:b8:bb:6b:1b:86:a0:22:3f:5b:80:
                    6a:f3:4e:1d:a5:77:ba:fc:13:24:89:f2:59:9e:4b:
                    76:75:b6:d1:22:0c:82:c5:46:95:0d:39:64:7a:96:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:46:27:36:E7:01:55:38:FC:78:2A:BF:A2:B0:D5:29:61:B0:B8
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:d3:b2:8d:8b:34:74:3d:40:2c:41:2c:35:7a:b8:8f:ce:
         35:d0:f2:e6:7c:b5:bd:6b:c9:c6:5d:e0:4a:23:d7:23:65:0b:
         75:93:89:34:57:8b:41:0e:54:5c:88:be:3e:11:03:86:1b:2b:
         35:15:51:be:24:71:eb:0a:f5:eb:93:8d:56:ee:c4:45:ed:ad:
         0d:78:3f:d6:ae:83:97:67:3d:fa:21:a4:1e:5e:23:fb:e7:09:
         24:20:2e:42:c1:26:73:53:15:74:bc:36:66:7c:06:71:fb:26:
         ca:96:8d:06:01:eb:79:a2:ac:4d:79:01:2f:07:ba:b5:fa:3c:
         b6:b3:82:fb:76:5d:c6:e6:f3:11:60:d0:f4:fd:22:a1:43:65:
         0e:74:cd:a7:a6:e9:98:f6:20:72:ef:e2:8a:c1:39:d6:52:e9:
         8e:09:b2:1e:51:be:ef:19:83:13:ff:a9:d2:95:60:ef:eb:3e:
         17:45:0a:ed:e6:c9:27:87:b6:1f:c9:b0:cb:47:4b:5e:e5:c9:
         21:54:25:f5:33:12:24:26:ef:e3:3d:d9:4c:33:16:2f:3d:0d:
         88:57:7a:b2:02:82:3d:20:09:0c:00:55:60:15:5c:c0:ec:87:
         4a:c0:b0:ec:cf:7c:47:54:b5:de:c8:92:31:2b:a8:78:df:1d:
         b5:d4:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----