Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          2g+M7Ey0Y4Kuqv7TkYTxf8Ak0ueKRV39y71OEPjA0OQ=
Subject key identifier:   6B:7A:CA:5D:88:E2:B5:4F:D3:A4:CC:52:AB:E1:09:88:FB:E7:4F:EF
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       0195E0EB22FDF0C1BD44153AA55824E16EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          1500
Signing time:             Sat 29 Mar 2025 08:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:01 +0000
Files and hashes:         1: 1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (hash: AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=)
                          2: 6N4n07cpVsvDfcO3eEPVPOVbfQg.roa (hash: nhZwGT39i2nPsTiPGKrLhdrJBmLcv3M5z0QYlPKdUVs=)
                          3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: Cj0YXqEKq/x9xGYENTNJ6NH720Fd3OgjhXHQ0nhCy6w=)
                          4: jZDFfglCAVXqMiHQiNaCS_ykt5c.roa (hash: Z9pj0iwTHPQ+PmAz+kp9u4GZKNWWC8RI/dko3M2WedQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:22:fd:f0:c1:bd:44:15:3a:a5:58:24:e1:6e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: Mar 29 08:01:01 2025 GMT
            Not After : Mar 30 08:01:01 2025 GMT
        Subject: CN=6b7aca5d88e2b54fd3a4cc52abe10988fbe74fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:9e:05:54:cf:52:83:c4:30:df:87:54:b5:
                    fb:d1:df:6e:0f:be:5a:03:6d:13:92:ee:83:da:61:
                    71:d2:af:99:9e:0f:3c:ad:ef:91:fb:89:ab:2e:0b:
                    1c:e3:1f:93:20:a7:8a:44:5d:76:a7:d7:91:a7:4d:
                    c5:e7:a0:7a:97:c4:1b:a3:8d:f8:8d:a7:fe:e0:4f:
                    b0:80:42:45:8a:1c:e4:f6:56:5c:70:c7:96:93:78:
                    8d:d5:a2:22:ca:82:e5:05:40:5f:8c:b5:b8:5d:b0:
                    c1:3e:89:e6:fe:b1:f6:27:e6:fa:c8:0c:9d:08:77:
                    fa:d5:d9:43:7a:e9:78:7f:d5:b8:c8:63:f0:cf:77:
                    a1:42:ce:8f:45:1f:57:96:14:7b:a9:b4:dc:fd:82:
                    af:30:1d:e6:64:0b:66:eb:bc:be:20:ae:86:9e:39:
                    e7:a6:87:6c:68:32:e2:76:c5:85:48:b0:a4:75:d8:
                    60:4f:e0:fa:2c:04:94:fb:f5:26:f2:80:5e:e0:04:
                    3e:5e:b9:31:5a:a9:b5:89:db:ae:df:1b:08:68:32:
                    3e:50:54:af:4b:96:7e:cb:0b:cb:1b:c4:9e:ac:77:
                    a7:3c:56:bd:7e:38:82:3d:70:2a:9e:43:6c:59:24:
                    39:65:16:d5:c8:fd:e9:83:1d:e4:2d:37:0e:e1:8e:
                    b0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:CA:5D:88:E2:B5:4F:D3:A4:CC:52:AB:E1:09:88:FB:E7:4F:EF
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:80:c3:88:c9:cb:db:5e:0b:4f:ec:28:63:a6:09:c0:9b:ae:
         2d:6b:de:5a:8d:06:06:10:e1:d5:8e:d7:7b:7b:1b:e2:75:65:
         c6:ff:73:d4:13:c1:da:af:1d:37:79:b2:53:1c:20:94:5a:6a:
         5b:fa:a5:b6:4d:3c:db:a1:fd:7d:fb:fc:a5:35:49:6f:77:53:
         ae:52:31:06:fa:52:c6:96:70:ec:f3:6f:c7:83:48:81:94:68:
         53:ce:7b:0c:ed:ca:fc:70:a2:95:ac:e2:9a:a5:d2:43:47:59:
         0a:18:c1:84:a9:4c:03:db:8d:34:d3:c8:b4:d5:fa:71:bf:80:
         51:7d:33:ad:6a:c8:00:3b:f7:b5:5e:bc:0a:a0:4c:bc:8e:21:
         02:af:ae:c3:e2:1e:d4:1f:88:f0:12:42:01:30:c1:3d:60:7c:
         50:14:cf:dc:cc:ec:0b:7e:77:3d:ad:de:85:96:3a:3a:c1:d0:
         c1:33:af:35:13:07:c8:61:c8:ff:47:fe:3b:16:37:82:87:45:
         47:7d:33:a9:b4:97:0b:f7:2a:37:35:3e:4c:c8:a7:c3:30:db:
         27:57:ad:b2:67:d5:8b:71:4d:d1:51:02:46:87:9b:48:63:75:
         26:4c:5d:82:b4:87:b8:d2:85:3e:9d:a4:3c:8f:2a:ef:c6:97:
         74:05:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----