Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File:                     wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier:          npELKDMDwcfzK5Z3aymi89xtyv7xk313f2lvW3Ai/zI=
Subject key identifier:   94:1C:B3:52:5F:50:C1:71:AF:9E:F6:5C:71:1B:DE:CF:68:08:9A:AE
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer:       /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial:       0195E0EB091505397A37A17C70D9B849A445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 08:00:54 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:54 +0000
Files and hashes:         1: 1-V2Wppi99tQ0ICJCe3K1wVDWeJM.roa (hash: 8LD/75b8b3uJIXBI6PmoCNFAOUQg00FVymHzyQOdHPs=)
                          2: gR7_p8V_zVRAYSLjkuaCFanK3Yc.roa (hash: qCXHymQkR6cp0GITgkqNAbNsnjRKEGt7ZyJutfebqWA=)
                          3: lmdWj112UpDUl0YMfe99QFpkU08.roa (hash: 9cGy7MriBqxfTCxDixZtncEZdfRZhLqGhD06Kf2V8OE=)
                          4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: vtdYswiyoebXWh55U63nm3PiwmpS3gZ+xS7Bz5zI988=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:09:15:05:39:7a:37:a1:7c:70:d9:b8:49:a4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
        Validity
            Not Before: Mar 29 08:00:54 2025 GMT
            Not After : Mar 30 08:00:54 2025 GMT
        Subject: CN=941cb3525f50c171af9ef65c711bdecf68089aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:94:d9:60:c7:3a:a2:1f:e0:19:d6:bc:be:
                    f3:cd:05:24:75:5e:f9:66:0a:9d:37:41:c5:30:7a:
                    43:ea:80:06:d5:28:a1:ca:7a:2b:06:8a:27:ea:38:
                    37:f0:51:5d:e9:ff:8d:11:71:b9:bb:65:17:27:1b:
                    a0:6e:b2:28:14:72:17:94:0a:97:27:2a:58:1c:2a:
                    5e:9c:dc:21:a1:e7:78:f3:49:e3:37:0e:fb:60:fc:
                    69:02:6d:d8:be:d7:fb:a2:cc:de:16:4b:52:24:18:
                    1c:da:b0:29:0b:ef:28:96:9f:b6:c8:b4:cc:cc:86:
                    c3:7c:a8:32:79:d3:c1:58:47:79:cd:2b:c2:4f:e6:
                    09:cc:10:61:9e:6d:74:77:c8:ea:6f:0c:d2:dc:01:
                    8d:dc:67:65:cc:a0:16:47:12:34:e3:ab:42:05:07:
                    46:07:77:c7:d4:55:3d:ec:d8:e1:a4:3c:1d:ca:3c:
                    dd:fd:90:9c:9a:52:1f:6f:b7:79:a6:00:a2:e5:44:
                    b8:bb:61:cd:05:82:c5:e2:3c:2e:db:f4:c1:ae:6f:
                    4a:2b:36:88:84:a9:79:fb:4a:3c:48:cb:dd:57:09:
                    a1:fc:46:3a:fa:99:37:a3:30:90:fc:23:cc:56:f0:
                    d1:4b:e6:64:3c:69:05:55:8b:23:84:82:8c:0b:87:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:B3:52:5F:50:C1:71:AF:9E:F6:5C:71:1B:DE:CF:68:08:9A:AE
            X509v3 Authority Key Identifier:
                keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:e0:62:a9:34:2f:b6:45:eb:13:91:fd:a2:69:a4:eb:d6:
         2d:2a:ac:9b:22:bd:90:5e:68:b9:9c:44:3a:25:ac:3f:a4:2a:
         c8:4c:15:d1:f3:9d:79:8b:c8:6f:81:bf:78:b4:72:13:b6:56:
         cb:f3:3e:62:d4:90:35:ea:21:66:c1:7d:69:d8:56:40:51:95:
         79:71:66:da:1f:31:ff:25:3d:95:b9:2c:8e:0b:40:fa:d9:51:
         c9:8f:4e:99:4e:ff:3b:67:a6:49:51:f3:13:dd:63:f6:73:5e:
         6e:f5:05:da:41:30:05:bb:76:8b:09:d9:80:77:8f:e6:23:37:
         7e:52:a6:34:f2:55:1d:fb:25:b1:4e:9c:98:91:6e:57:ca:af:
         90:cc:03:33:be:3e:e0:e4:6c:fe:e9:5b:db:4f:eb:37:3d:87:
         76:05:aa:78:a6:1d:d6:e7:72:93:5c:35:17:48:b2:4d:f3:33:
         3d:5d:f9:1f:7a:26:87:25:9e:e3:a1:e3:67:0a:36:53:46:62:
         19:a9:cc:36:22:9c:1b:a7:1f:22:83:fb:0f:31:ca:c8:47:04:
         a3:2e:0f:4a:76:0e:2d:27:05:d7:9d:bf:5b:9f:49:96:f4:57:
         67:11:07:08:3f:1a:03:4d:44:6b:64:64:a6:89:ef:2f:25:b7:
         2e:1e:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----