Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File:                     1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier:          rH0ymin/r6SfJimQq+qRNT9OAGzJiRxsIK+k1akqs/k=
Subject key identifier:   97:5F:E9:D3:11:A5:9F:45:53:B0:5F:B1:00:5C:C4:2F:8F:17:9E:39
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer:       /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial:       0195E1599D9924056DAD208039470709DA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number:          0264
Signing time:             Sat 29 Mar 2025 10:01:41 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:41 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:41 +0000
Files and hashes:         1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: efrD9N340RL8i0hTHq8AxT85NuZlZQ0WYGVX3/IO9m0=)
                          2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
                          3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
                          4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
                          5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:9d:99:24:05:6d:ad:20:80:39:47:07:09:da:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
        Validity
            Not Before: Mar 29 10:01:41 2025 GMT
            Not After : Mar 30 10:01:41 2025 GMT
        Subject: CN=975fe9d311a59f4553b05fb1005cc42f8f179e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7b:a3:f1:c1:45:c7:2d:34:11:57:ed:26:f8:
                    db:28:1f:b0:28:47:7d:c4:03:50:4d:a1:09:fa:c5:
                    37:00:be:e0:36:09:50:3b:40:a4:d9:95:06:3c:b0:
                    98:d0:8f:c6:c1:b2:01:87:6a:7f:94:2f:c4:85:35:
                    4c:51:ef:dc:29:a3:cb:13:b4:28:7e:cf:a9:af:5b:
                    3b:45:3b:a0:02:9d:c5:11:f1:26:4d:e1:1c:98:0c:
                    5d:7a:4b:5b:e6:8a:96:62:10:8f:aa:4c:92:7c:98:
                    bc:9a:10:63:83:d8:9e:38:71:3c:95:5c:60:f5:9a:
                    1d:36:fb:29:70:16:fc:b3:8a:5f:48:c1:96:07:43:
                    07:a6:94:e5:5d:e6:ff:94:82:86:19:04:7b:2b:da:
                    5e:f9:08:fe:0f:90:97:6f:6a:c2:82:0a:a2:a7:fd:
                    d0:2b:19:5d:93:99:01:36:ac:d7:38:50:ed:77:d1:
                    5d:bb:7c:03:4c:92:40:cd:28:03:f0:22:9d:e3:8e:
                    de:ea:fd:98:6b:2d:40:ee:23:56:da:83:ec:e6:bf:
                    9b:84:0c:9f:3d:ce:7c:74:0b:ee:90:0f:a2:c4:f7:
                    54:51:fe:b2:c1:54:af:11:6d:e7:4d:9f:23:09:95:
                    09:b5:b0:54:4a:39:9c:6b:88:ae:38:e0:4e:18:45:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:E9:D3:11:A5:9F:45:53:B0:5F:B1:00:5C:C4:2F:8F:17:9E:39
            X509v3 Authority Key Identifier:
                keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:64:07:8a:25:77:3e:78:0c:2b:79:1c:46:3a:db:3b:c3:
         af:44:e5:ce:67:9b:b1:e1:1a:65:ca:f8:93:96:b6:4e:3e:00:
         c7:7b:d4:30:dc:5b:90:5e:1a:5f:0c:35:e1:95:16:29:18:03:
         ab:28:9e:81:2d:20:7d:d4:66:5f:3d:af:f4:71:ac:cb:70:b5:
         bf:ce:ff:0f:8e:5f:f8:e3:27:3a:c2:45:b7:6f:a3:c3:09:a3:
         6b:28:93:cc:13:44:3c:49:b9:79:db:66:92:88:33:ec:a2:ab:
         c8:f1:62:43:4e:20:fe:37:82:18:2b:74:b5:3d:22:d6:af:2f:
         3a:0f:07:93:c3:41:73:0b:7a:a1:a2:bf:10:2f:df:e1:fa:1f:
         39:7a:3c:e7:3c:f9:8f:75:b6:19:a9:f2:51:df:08:65:72:d3:
         c7:d5:26:6a:47:86:ed:b4:ac:14:dc:0d:f5:88:a4:11:53:27:
         7a:08:87:2e:2a:42:fd:a9:ee:75:5b:81:78:9f:f5:cc:fb:51:
         d8:56:51:55:f8:22:27:88:06:fa:fd:86:a4:50:fe:c9:42:ab:
         27:ef:05:8b:7a:c0:6a:ea:26:29:4c:74:9a:05:8c:87:6b:12:
         e3:4c:0a:10:bf:e5:e0:1e:ce:df:25:37:e3:34:c0:f0:e3:8b:
         43:da:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----