Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File:                     AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier:          6+dFSMLerlPWioWO0C6qraBNWaVRGAYyjF4FTUCKEsg=
Subject key identifier:   98:2E:61:09:70:1B:A5:74:A9:F6:5A:48:B0:21:65:BC:B3:D1:FA:6C
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer:       /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial:       0195E1223342DCA9715E741850378E6E1974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 09:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:09 +0000
Files and hashes:         1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: LipAx0oxcQzqKMAZl4AzRqEY934sKq7E3uWlv5QdB7s=)
                          2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
                          3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:33:42:dc:a9:71:5e:74:18:50:37:8e:6e:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
        Validity
            Not Before: Mar 29 09:01:09 2025 GMT
            Not After : Mar 30 09:01:09 2025 GMT
        Subject: CN=982e6109701ba574a9f65a48b02165bcb3d1fa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:c6:13:c1:a8:f3:f5:19:60:dc:7c:2c:81:
                    5b:3b:f6:94:2d:e5:a2:f9:b3:5b:c4:84:b2:18:e7:
                    10:01:a0:a8:ff:31:98:e7:0b:97:82:d2:42:9d:9b:
                    6b:15:02:a7:8d:f7:32:73:de:38:a6:58:fd:89:08:
                    67:c9:4f:31:af:62:58:85:ae:4e:23:78:4e:7c:eb:
                    0b:07:14:52:79:84:c6:f8:1e:55:6f:e2:24:94:4d:
                    76:a3:71:92:80:7b:7e:51:5b:67:6a:e5:d6:97:28:
                    ca:07:9a:17:bf:56:c2:e8:fa:a9:91:51:a3:65:85:
                    54:2c:b7:80:21:53:e4:42:6e:6f:e5:6c:6c:e0:b2:
                    6a:b4:97:e1:f3:ac:f7:4e:bc:f1:cf:c6:2b:c9:47:
                    57:68:5b:ef:5c:fe:2b:3a:a2:be:81:6e:83:c2:8e:
                    fe:98:c2:0d:25:66:59:21:f2:e1:9d:ed:98:6b:9d:
                    0a:92:38:fa:82:c4:46:b9:59:91:e1:55:66:e4:6e:
                    28:d1:5f:ea:00:89:66:51:9e:85:1b:3e:ce:dc:e9:
                    cb:5b:d2:bf:5e:48:2e:f7:5e:b4:ee:98:17:24:ff:
                    e7:7d:f2:2d:2b:96:4f:c5:53:1b:5a:52:e7:aa:ed:
                    be:0e:23:d1:70:f7:7c:c7:eb:f8:40:22:95:60:1c:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2E:61:09:70:1B:A5:74:A9:F6:5A:48:B0:21:65:BC:B3:D1:FA:6C
            X509v3 Authority Key Identifier:
                keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:65:c6:17:85:f2:d1:39:da:37:f2:a9:52:5c:7a:b8:ec:d6:
         12:84:e1:4a:7d:76:de:af:c6:db:6c:a5:88:c0:6c:e0:50:fd:
         f0:52:96:3c:05:37:2d:ca:b2:19:c6:03:83:c5:44:73:64:c8:
         7f:81:32:db:d6:d4:5c:e7:d6:94:23:25:8b:00:03:50:3c:9a:
         5d:dd:79:94:ca:dc:02:fa:9c:56:0e:b1:08:94:cb:2d:26:01:
         5d:52:2e:a5:22:91:11:48:8d:be:99:cf:ed:82:55:37:79:5c:
         4b:77:46:2d:62:af:16:18:fb:64:58:03:04:3a:53:aa:b7:b6:
         01:fc:33:74:01:59:5e:e5:b7:17:59:ef:2b:b4:f7:ef:2b:b0:
         87:a2:e6:f3:5b:69:88:60:03:0c:14:0d:f1:1e:81:b0:4f:8a:
         12:28:1d:e2:80:db:81:5b:dc:89:49:52:71:8e:79:3c:31:f6:
         38:2a:01:bd:19:6c:b1:b7:b8:b0:5a:07:57:e6:2b:06:c7:24:
         ce:06:fe:7d:06:02:9c:65:07:88:cf:1f:a4:32:94:ac:96:9b:
         47:72:c3:76:cf:b1:fb:4e:fd:29:64:9e:a5:5c:a1:f2:05:a2:
         86:65:b4:50:08:e0:6e:2f:f9:02:e5:4f:07:82:94:04:fb:66:
         c1:0b:d0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIjNC3KlxXnQYUDeObhl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzIzNTA2NzE4ZGZjZjJhOGJkMTc2ZDRlYTI0ZTI3NTMy
MmZjZmIwHhcNMjUwMzI5MDkwMTA5WhcNMjUwMzMwMDkwMTA5WjAzMTEwLwYDVQQD
Eyg5ODJlNjEwOTcwMWJhNTc0YTlmNjVhNDhiMDIxNjViY2IzZDFmYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO7GE8Go8/UZYNx8LIFbO/aULeWi
+bNbxISyGOcQAaCo/zGY5wuXgtJCnZtrFQKnjfcyc944plj9iQhnyU8xr2JYha5O
I3hOfOsLBxRSeYTG+B5Vb+IklE12o3GSgHt+UVtnauXWlyjKB5oXv1bC6PqpkVGj
ZYVULLeAIVPkQm5v5Wxs4LJqtJfh86z3Trzxz8YryUdXaFvvXP4rOqK+gW6Dwo7+
mMINJWZZIfLhne2Ya50Kkjj6gsRGuVmR4VVm5G4o0V/qAIlmUZ6FGz7O3OnLW9K/
Xkgu91607pgXJP/nffItK5ZPxVMbWlLnqu2+DiPRcPd8x+v4QCKVYBx/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJguYQlwG6V0qfZaSLAhZbyz0fpsMB8GA1UdIwQY
MBaAFAFyNQZxjfzyqL0XbU6iTidTIvz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEt
MDUzNzNiYTk0ODNkLzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEtMDUzNzNiYTk0ODNk
LzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWXGF4Xy
0TnaN/KpUlx6uOzWEoThSn123q/G22yliMBs4FD98FKWPAU3LcqyGcYDg8VEc2TI
f4Ey29bUXOfWlCMliwADUDyaXd15lMrcAvqcVg6xCJTLLSYBXVIupSKREUiNvpnP
7YJVN3lcS3dGLWKvFhj7ZFgDBDpTqre2AfwzdAFZXuW3F1nvK7T37yuwh6Lm81tp
iGADDBQN8R6BsE+KEigd4oDbgVvciUlScY55PDH2OCoBvRlssbe4sFoHV+YrBsck
zgb+fQYCnGUHiM8fpDKUrJabR3LDds+x+079KWSepVyh8gWihmW0UAjgbi/5AuVP
B4KUBPtmwQvQiQ==
-----END CERTIFICATE-----