Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File:                     5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier:          9HYmLxepcWVJqMo1EZ/b7QhugRicVOL4pySDJk37wio=
Subject key identifier:   2D:D1:DA:B8:91:40:FA:C1:59:98:3C:B2:B4:14:18:96:CE:DF:7F:5D
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       0195E0462EFC4D4E130FE1B682697C228438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number:          1479
Signing time:             Sat 29 Mar 2025 05:00:50 +0000
Manifest this update:     Sat 29 Mar 2025 05:00:50 +0000
Manifest next update:     Sun 30 Mar 2025 05:00:50 +0000
Files and hashes:         1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=)
                          2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: NQSk9byRxdwi2VoykzQNf7uLXWlRJyG8/YNgt7ag1+w=)
                          3: 88YBk8uB85zBrul442nfGp-QuoU.roa (hash: 8CHBmw57/ECRTXJRCiSBu+1kizP0rODHSoGmFmfszQs=)
                          4: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=)
                          5: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=)
                          6: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=)
                          7: arM4rSr3_zYWYsvqUqH9LMJxK1c.roa (hash: jH1XC6dsbVtzQ5KTBqEfgNDIc/WzLssGqH+BUquB6w8=)
                          8: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=)
                          9: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=)
                          10: hYaFKrnyaSEueE3Nclhbcrh7WLk.roa (hash: R76xSs8UDOZAunK5fmzFUA+tV4VngZVYGVoMB8QO7xc=)
                          11: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=)
                          12: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:2e:fc:4d:4e:13:0f:e1:b6:82:69:7c:22:84:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: Mar 29 05:00:50 2025 GMT
            Not After : Mar 30 05:00:50 2025 GMT
        Subject: CN=2dd1dab89140fac159983cb2b4141896cedf7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:58:65:54:07:14:41:1c:9c:7b:e0:0e:87:
                    ef:5d:c8:65:2d:c1:d0:01:a6:d2:1d:d5:3e:15:b2:
                    30:aa:ec:db:c4:dd:6a:50:2a:84:d9:3d:3a:34:23:
                    d8:f5:2b:fe:d3:9d:26:c2:1f:1d:c8:bf:00:fe:e1:
                    23:3b:92:ac:07:89:37:fd:b7:a2:97:79:55:3f:a5:
                    54:14:cc:91:8b:1b:af:2e:d4:0d:7e:a1:b0:af:ec:
                    26:26:5a:11:a7:de:f5:f6:c9:44:ca:0e:b4:e6:e4:
                    46:2b:91:dc:5f:f7:b3:df:60:41:ba:6a:b3:12:86:
                    23:72:03:ac:bc:9e:2a:ca:0b:0b:54:d4:2e:34:1f:
                    5f:fc:8e:29:81:17:ed:9f:56:32:7e:a5:c9:02:4a:
                    7b:77:60:de:a0:6c:5e:34:bb:08:a0:f4:a2:af:7c:
                    3f:40:a3:8a:85:6a:6e:17:91:0b:7a:5f:3c:03:10:
                    da:18:eb:47:ed:69:b7:d1:3d:ed:1d:88:f8:9a:e9:
                    95:49:18:68:c0:28:ac:84:d2:b3:89:19:9c:1c:d8:
                    dc:09:10:d7:ed:69:ef:01:00:2d:8c:d0:89:f9:04:
                    6c:15:63:52:41:5f:38:28:55:c8:2a:c9:6b:d5:a1:
                    6c:ee:85:a0:f4:78:c7:32:2a:0a:58:b9:87:e5:7c:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:DA:B8:91:40:FA:C1:59:98:3C:B2:B4:14:18:96:CE:DF:7F:5D
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:48:05:bb:a0:f1:0d:9e:83:83:a5:65:22:c3:5e:1d:62:90:
         26:94:bd:b5:ca:d4:aa:87:28:a7:01:01:ef:6a:82:2e:7e:db:
         f4:8f:14:39:47:22:75:cd:d1:f9:07:75:72:54:40:96:b0:ff:
         49:f2:b2:1a:b1:da:84:53:31:3c:57:d0:cd:e8:16:87:3f:36:
         21:df:36:ae:48:91:9d:e8:89:14:87:0c:cc:4f:77:37:1f:00:
         a6:b9:82:9a:9b:14:fe:c2:ac:91:89:88:7a:9d:b2:15:f7:b4:
         b0:a0:d8:0d:44:01:6d:8a:8c:c4:ec:ab:56:16:57:9a:80:18:
         f8:bb:22:35:81:0f:0e:3b:57:f6:ad:85:73:85:fd:e7:ab:18:
         41:8d:98:26:0c:bf:e6:7b:3f:5b:4d:ef:20:8a:13:98:a2:9f:
         6e:b4:ff:93:48:d6:5f:d0:fa:4e:88:03:17:71:f5:af:cb:a8:
         a6:3d:c2:9d:5e:c8:e2:32:3f:6f:bc:bc:de:8b:07:ec:d3:2f:
         1c:4f:51:5d:fe:4a:5a:bc:2e:95:d4:5f:cb:d0:7a:59:62:d7:
         c0:79:86:39:38:65:4a:2c:02:c9:28:8e:f5:69:82:a8:ab:17:
         67:68:55:2a:b1:5e:bf:85:10:49:a9:7c:fc:1a:5c:65:07:3f:
         36:4b:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----