Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File:                     _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier:          i5vwv14GCoCg2IZhZwTLySHLwgz6WMH8stCyyRh7py8=
Subject key identifier:   0B:B0:8F:AA:C0:9B:7A:D4:43:37:3C:8D:E6:84:B6:95:97:95:CE:B6
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer:       /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial:       0195E07D31BA9B9BB259E2673D9498684175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number:          1268
Signing time:             Sat 29 Mar 2025 06:00:55 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:55 +0000
Manifest next update:     Sun 30 Mar 2025 06:00:55 +0000
Files and hashes:         1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
                          2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 1d980Xjv9gi1WEUAwRxN08y1auTkKnvpgcX4hx68XP8=)
                          3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:31:ba:9b:9b:b2:59:e2:67:3d:94:98:68:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
        Validity
            Not Before: Mar 29 06:00:55 2025 GMT
            Not After : Mar 30 06:00:55 2025 GMT
        Subject: CN=0bb08faac09b7ad443373c8de684b6959795ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:0b:2b:7f:ab:7f:fe:b4:85:02:c4:be:ac:
                    0d:f6:ed:91:60:d5:e3:cb:d8:b6:25:f4:f2:1a:d0:
                    b3:c5:59:75:7b:72:75:fa:73:c3:ba:df:75:3e:b5:
                    89:83:7f:a9:61:e0:6b:b7:e6:2d:b8:58:7b:65:39:
                    a8:ab:b5:5f:d2:59:b1:c8:0b:14:12:31:51:31:f8:
                    e4:0e:b7:40:70:c2:6c:de:43:ea:92:b3:6e:a8:a5:
                    9e:1d:57:33:dc:6d:56:d2:5f:f4:0d:7f:c9:d4:5e:
                    41:bb:6a:d4:da:bc:96:d5:24:59:22:f3:57:c7:50:
                    c0:d2:78:85:31:70:dc:2d:d0:be:8d:52:fb:2a:1d:
                    6f:04:c4:0d:34:20:22:a0:1c:2c:b2:70:71:ed:e8:
                    ec:8b:94:a7:97:74:17:d0:70:6b:48:ee:82:67:22:
                    3d:67:e9:f4:28:ce:6d:2b:c6:c8:1e:6a:0b:2c:c3:
                    cc:8a:41:e7:a6:0c:db:4e:cb:70:10:69:79:4a:17:
                    a5:87:98:c5:0b:7c:d8:59:aa:46:eb:8c:ca:2e:f8:
                    64:01:78:cb:f6:2f:34:2f:a1:7a:28:b7:73:a6:83:
                    c4:66:3c:2c:d3:d2:f2:63:ae:1c:43:e2:0c:b3:29:
                    7b:ee:d2:9c:86:e4:6c:5b:00:d0:e4:d2:b2:af:73:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:8F:AA:C0:9B:7A:D4:43:37:3C:8D:E6:84:B6:95:97:95:CE:B6
            X509v3 Authority Key Identifier:
                keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:83:31:7d:6a:cb:96:a5:32:28:88:ca:eb:77:88:61:a5:
         62:d6:72:b8:05:18:f2:b4:b0:e8:2f:8f:e1:92:38:64:e6:06:
         f2:26:9b:ee:c7:36:5e:d4:b9:53:51:48:b0:47:ef:14:d6:79:
         37:1a:0a:8d:18:2c:22:01:0e:4f:fa:cf:b3:51:dd:89:3d:27:
         39:66:3d:a1:af:ec:7a:d6:9e:f9:95:58:de:e3:96:6c:53:66:
         1a:88:2b:13:65:db:b1:50:03:92:5f:21:97:f4:ef:80:53:f5:
         50:0c:34:72:77:da:15:b0:24:67:8a:47:0e:0e:c0:13:d0:8a:
         a9:03:56:30:58:07:41:14:d5:ef:37:2a:29:b2:f4:40:8a:85:
         7b:72:40:52:36:64:6d:ab:ca:f7:e7:26:0c:e4:61:cb:a6:e4:
         35:3e:ed:b0:03:70:1a:6f:ab:89:b4:7e:60:ff:6e:2c:ca:dd:
         0c:ae:26:7f:ca:13:1b:54:6d:4f:62:22:27:ec:5c:01:d3:1f:
         c2:f4:a6:5f:f3:23:49:53:57:3b:d1:eb:a8:41:a5:2e:e2:97:
         bd:b6:33:48:42:bd:47:54:e8:bb:54:c1:cc:4f:10:08:53:b2:
         48:8a:02:b6:a6:88:eb:d6:c3:82:17:7a:7c:e1:c3:fd:af:44:
         9e:00:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----